last executing test programs: 8m29.155011836s ago: executing program 2 (id=29): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffcc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000100), 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) 8m28.47201403s ago: executing program 32 (id=30): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000800), 0x1, 0x80000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_test={0x1a, 0x3, 0x1ff, 0x0, [0x7, 0x0]}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1c0a8216ff87f6e6, 0x10, r2, 0x1f655000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c000201007b000904000001020e0000052406000105240000000d240f0100000000000000000006241a00003e090581030000000000090401"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000040)={'wlan1\x00', 0x103}) 8m28.169096112s ago: executing program 2 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000019991161855e92e74d3a65c3e0948f6add92d01b5ef1c87217b1dc343b0fdd6ea6ea0f3572d9b10cd61cbe8e3d49ec479a0350330d042654483a5d412decc8b854a62f9ac7e6cd0a17b7880a5455ec30ed9b1ff335834149", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = semget(0x3, 0x2, 0x3a01b4f59484d7a4) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = gettid() ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, 0x0, 0x1, {0x0, 0x1}}, 0x18) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x350c, 0xffffffffffffffff, 0x2}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0x58, 0x80000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup, 0x1e, 0xe431fa8ecbfd5375, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200"], 0xfc}}, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_SET_STATUS(r6, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0xc, 0x14, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec", [0x1]}) 8m27.972325707s ago: executing program 2 (id=36): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xa51d1000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000)=0x1, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000d00)=0xfffffffe, 0x4) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000180)=0x2100005, 0x4) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x0, 0x6, 0x6, 0x6, 0x7, "b188c1a301be9b40e4fb0d12660cb7c29598da", 0x4, 0xffffffff}) syz_init_net_socket$ax25(0x3, 0x5, 0x7) 8m27.871791852s ago: executing program 2 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 8m27.704251276s ago: executing program 2 (id=40): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0xd, 0x3, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c250000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r6}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x10c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc4875538", 0x28}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225", 0x45}, {&(0x7f0000001bc0)="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", 0x1e5}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r7 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) fcntl$setsig(r7, 0xa, 0x1e) 8m26.892426784s ago: executing program 2 (id=43): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x9, 0x5}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x1, 0x4, 0x4, 0xf7, 0x3, @multicast}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0200000000000000000000000000000000120000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x48) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00004e1560254722cb77187f3b68d00c00004e15545f8d8777043c1e3f9dc4"]) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$pptp(r6, &(0x7f0000000800)={0x18, 0x2, {0xfeff, @loopback}}, 0x1e) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x32, &(0x7f0000000100)="0bbb268d0200a808ed90cfcf000000000000210d0000aaa8fa017242ba9380d4100000000000000029080000", 0x2c) connect$pptp(r6, &(0x7f0000000300)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$peek(0x3, r7, &(0x7f00000000c0)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) preadv2(r5, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) syz_init_net_socket$ax25(0x3, 0x2, 0x6) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) openat$cgroup_ro(r11, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 8m26.14080521s ago: executing program 33 (id=43): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x9, 0x5}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000000c0)={0x1a, 0x1, 0x4, 0x4, 0xf7, 0x3, @multicast}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0200000000000000000000000000000000120000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x48) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00004e1560254722cb77187f3b68d00c00004e15545f8d8777043c1e3f9dc4"]) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1, 0x40}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$pptp(r6, &(0x7f0000000800)={0x18, 0x2, {0xfeff, @loopback}}, 0x1e) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x32, &(0x7f0000000100)="0bbb268d0200a808ed90cfcf000000000000210d0000aaa8fa017242ba9380d4100000000000000029080000", 0x2c) connect$pptp(r6, &(0x7f0000000300)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace$peek(0x3, r7, &(0x7f00000000c0)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) preadv2(r5, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}], 0x1, 0x5, 0x101, 0x1) syz_init_net_socket$ax25(0x3, 0x2, 0x6) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) openat$cgroup_ro(r11, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 7m16.507895938s ago: executing program 4 (id=250): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x83, 0xfffffff9, 0xfc}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "05554c05", {0x3, 0x0, 0x0, 0x5, 0x4, 0x3, 0x3}}) 7m15.657536737s ago: executing program 4 (id=258): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) iopl(0x3) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x10, r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_procfs(0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8923, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="000427bd7000fedbdf25510000000c009900fc0000005f00000005008a000200000005008a00000000000a000600ffff0f00ffff000005008a0001000000ecb65b4b02e4cb"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8050) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e0, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) socket$netlink(0x10, 0x3, 0xf) 7m14.727332124s ago: executing program 4 (id=265): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000440)="17178feab0b53972412be7a0bbb06e91defed0e96359872f777fb223322c07836ba8352e08d191ced663d11326282205fa4d8b155e66df028d527761a15ef6fe4936287ebd5eb096d652ed528b12aa027a72dca81ad90cecebc5411b860a68a429fb29b6b11120f51cecca4e1a135154c2eceeb708dd561d027e895dd378d37395288bd62a7ec3dc3e31573a2db14e8d5af50d6d6d58500afbced2ed8465e834acf0ed8879f4848c63a40a463d44a3bc1bc5b6", 0xb3}, {&(0x7f0000000500)="cb335321bd061422543374409f0cc1e6a6ae3c53ee3678e39529a5070839f5fa4b3d79d32fddd4a4e53dff451d7f906cdeb821780ec8c30b836f417bbe67a0e9a00ea84ecf8e28c9056634f6fbed809fc60aaba7d0bca11f38c3415b6bd32d5deb1395c76c3c55ef48f4a09dd4fe573f6b995c5484a06eecf7004dff3edaa3d9d5363558fa70e20115dd43b7b900d2fa6008cdae3651196b1bb84533a8a2742023c8ad107793da510396ba98a6564347829f52b49a39d83095e4f1", 0xbb}, {&(0x7f00000005c0)="99e5a1b4db365261bab9fbb313ac71a12b02bc4cf62b62603b163bd813c216ba52063f63727f1f173c9c2c29dad55093babcfbe1411f60e12b615737e743778744a3a0135d15a1b23a4953ede8259be823c86581bdc4f224c38d968f8f78cd354188fc46332b2874e6e0f85283eff97b92885b97309af45f0771a72e3c555197c7e1ed2257ae855b3ac3add4d16efa2cc215a3c3afcf650a4a2576278970066670d2712c365cbc19f09638d77fba0126f20671f27d34a4d30407b916", 0xbc}, {&(0x7f0000000100)="08b7b9d43cd66726c2150349f93f80765d9c8ad4977b0f07c638d12a410505", 0x1f}, {&(0x7f00000002c0)="b3d9f9c256901062401e32cfd51e5957ae9365f395b0324449e2e1958b8209afcb77fa1e05d7cc65dfb4018d27b2cd8e2bb37717ad49798adcbff5009fc1d0070b05499f6e8c03bf3115850e3b40d419029c16b55fd2aa29e69fa79bb67e6b6cc7a9e7a6833ae7eb9305813311fa29986598bd002863bbc58b9e16dad6", 0x7d}, {&(0x7f0000000680)="7ae668ff4721c69c97002cb81b4ef7b405653a788b655626356d5248915c67d4e3925665038878c5efa6541e29ddca8b4c6e51c762f5c29fdd7fc99a87debde88e49f6e56dd57a2c9e59eb68287dc84d1681ae7f249335fd85c0dddf87f3f6213e44eac5ac127877ea45b95b2d8bb0749672f5b5e42fe9ce99738b74fde817473d997ce54b9d2f8f3d375f3701f238f344bd85a09312322f9a035f8d3ba84bb642c1292c60d205228d3e837f6989da491a64d44ea3a646b95ce00100cb0256a76361e8d0121e", 0xc6}], 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000100006114ecc836ac21a6ddc3748aae2ec98f5304890001", @ANYRESDEC=r3, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000f40)="69d1d9d36fe62088e4d8570f9ad52b0ec4a63c4213314302f4140fbee9188145f859732aba3fccde30a19feb9fa50a076d939bded7dc3960b830ee6b75da838d7489a33ba1767a23fa8de6696b226ebdb6962df76d9fa720fc50e804d21223a11b8bf367fa4c4b84fa60a21a689045612963d8f3ce168a7607cdad453f513e57cb1a04831015b7bb219c46cccdf56f1c277b1cf91aeaa2b6b9b8f9c9f228465d2e551db01359377a7f09d531cfe3ce316597eca14bf7e5cf80d0f0961223caaee8f652c8bc8a55c0d12ad3dbf7b0b938c6c364a4777e0eae2a01cec379fe4ac618d19cf2fb3abbe05dfe0556663ae1944de71586eced51d94236", 0xfa}, {&(0x7f0000000b00)="4458914a490a127d72b75930f9d65944a830e6af60a147d2b411678359863485bc0baaead643b95c4597d0ab51141b4732bb61f44df09c6c556b8db6107c42aa7fe2af01cf64bf38c2ce5e67276dc09b43bfe2a5f9a743b047a471ea60a62acb0b16a3aaac61d60c8bb1ba5ffffd63032c8415b4f2ceb9a5622cdf41ab399c4b3bce3df69ca2030819037ce69a09a192867ae7c2b10877a2d6583715d23539993288a32ddc34c0698da7317e615ad151bcdb5b660f330b0492ff2d46a65eeb30b3dbc2a7c325ba2c3fd01bb99a0b6646e13143ba029fe466fb90e5ec8ba1e684742fc829afa882", 0xe7}, {&(0x7f00000010c0)="95721a75230681bcd529e56699b35e18a65e171ea38069c7547562ec4c24edcaadff632160074f4ad6d1d0c5b1704e64058e306a64940e4abae7a354a732af99eff3320e1f4daa394fecdb496f7b87a2382468d58403388f219246f5cfd793a96ac2096558b26dfbbd0658872256bcca0d609914cf03877887c316b9ab7fe0f2df37334e955c1082262cd3ed7f1a5a790b80ab73482f4e0089a798e6af88d267b1d13a94d8207ecf463c289aab360f7263eb125d7d62a8dec4599f91b0546460d8cd32a8bb86301ea83237617e506d148b750887e1930c8ef9968e9fba8ae016", 0xe0}, {&(0x7f0000001400)="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", 0x1000}], 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="540000000000007ab442990001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1000000000000000010000000100000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c696cf3e5000000cdeb709a82210500cf16e73b5cee9fff7f2d8ad8412be10e7442179f67ee2a1be0019893a643d3f1d0670ab3e616b42574ce9ae5e9c97f5a628b1293ae7d66732db585abdc5b92b20f0e414c8018f28cbe87dda05bfa884c579b5e209dae48136cfb0700ac178cee22985207b321098bbe641ddc347d55531465ba630e527828420b504bf46f9c440f4d9324c80ede617dbf141c5fd40ac99fff4d3b2de8770a28e028a3592cd9b9ad7e627498a782bf425b2b192b729a216d9fbe8d694f50c1f975753237", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x24004001}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000200)="cfdaab12bd83b4398e47298dcda36cd9d66cc16fecbd2d5b75105bd0331b4e61e310fdb5a127c121de86a88dd3452594aaddb7ffa9661554213565", 0x3b}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000000880)="fda9f47eb4198c16bc6b305ba59a758f3c2642ac234eb332d14a5de22aae657a0747ac95887933dd283dfeca4fd6d482cf4947a37b", 0x35}], 0x3, &(0x7f0000001200)=[@rights={{0x1c, 0x1, 0x1, [r0, r3, r2]}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r2, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xc0, 0x4008800}}], 0x3, 0x40000) r4 = syz_open_pts(r3, 0x801) r5 = dup3(r4, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f00000000c0)={0xd, 0x6}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'hu\xd9\fM\xe8v\xa6\x04a\xc7\rV\x81\xb1k\x87d\x0f(\xe6*\r\xa0eX\xa7\xbd\x95:\vqX\x05N\xb8\xe3rZv3\xb9\xedP\x17[B\xd7\x17o\x92\xa4vf\xc3<\xb5\x8b\x98\x18\\K\'\x86~\f\xef9I.\xde\xd17Xnk\xbe\xc9=\xab\xe5gx\x84\xbb%D,\xc5\xf4EP\x03J\x17H\xc6\xc2\xe0q7\xdc\x8e_\xed0-\xfc5eO1SZX\x84\xb0(M\xb7\xf4\x04\x97\xca\xe5R\xe3\xccbw\xd3\xffG\xbc\xbf1'}, {0x20, 'g\xc6\'\xa7\xda\xb0\xcf\f\x88f\x13\xadM\xda\xd4\xcb\x8f\x02\xebz\xaf\xdb\x015\x82\xf2\xcc\xa3:\xb0\x9e\xb0>S8\xdb\x13\xc5'}, {0x20, 'g\xc6\'\xa7\xda\xb0\xcf\f\x88f\x13\xadM\xda\xd4\xcb\x8f\x02\xebz\xaf\xdb\x015\x82\xf2\xcc\xa3:\xb0\x9e\xb0>S8\xdb\x13\xc5'}]}, 0xe2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000380)={0x0, 0x0}) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') setpgid(0x0, r9) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000001400)=ANY=[], 0xfe00) creat(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) 7m11.3959663s ago: executing program 4 (id=275): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x7ff, 0x1, 0x1, 0x1, 0x4, 0x7, 0x4}, &(0x7f00000000c0)={0x8, 0xaf, 0x0, 0x3f, 0x0, 0x8000, 0x5}, &(0x7f0000000100)={0x6ac, 0x9, 0x3ff, 0x1, 0x1, 0xcc}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x4]}, 0x8}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x78, "82145ad6ed62a404754a97c76d76d8f10cc6997c9a9eebf18a3cde41f56a4c4d"}) close(r0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000600)=""/197, &(0x7f0000000240)=0xc5) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfffffffffffffffe}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) 7m10.394962607s ago: executing program 4 (id=282): r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) mkdir(&(0x7f0000000080)='./file1\x00', 0x101) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x1f, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000040000000000bfb324cd516cb6d56a7dba43d779c14cde0040000000e52095000000000000001ad752590010fdb9ae5d0d28bd594744dd3d1733db6a7dfa65dfb30845"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030029bd7000fddbdf250900080008000123000000000057c4815d9ca2fd44f8090e9af7b14884b9d7e358cee136170000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x802) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) 7m9.514316994s ago: executing program 4 (id=285): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa15, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 7m9.345264s ago: executing program 34 (id=285): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa15, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 6m44.871380481s ago: executing program 7 (id=356): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x20, 0x70bd26, 0x1, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048014}, 0x11) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000400)=0x6, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) io_uring_setup(0x75ce, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="20405ecb080006000000000008000700002000000400008214f37ff954140000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008841) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100180, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000140)={0x0, 0x2}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x8) 6m44.724017955s ago: executing program 7 (id=357): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007efffff", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 6m44.493495181s ago: executing program 7 (id=360): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='affs\x00', 0x8090, 0x0) (fail_nth: 14) 6m43.919620252s ago: executing program 7 (id=362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xc0085508, &(0x7f00000000c0)={{}, "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"}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x40000000000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000d00)={"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"}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r6, 0x301, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x7f) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x88901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r10, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) fspick(0xffffffffffffffff, 0x0, 0x0) 6m42.591331902s ago: executing program 7 (id=366): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000002000000000000a00000000000000000000000800100002"], 0x24}}, 0x0) (async) writev(r0, &(0x7f0000000180), 0x0) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) r2 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0) 6m39.544086979s ago: executing program 7 (id=374): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)) 6m39.28337044s ago: executing program 35 (id=374): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)) 3m7.75602156s ago: executing program 3 (id=1216): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3m4.365686508s ago: executing program 3 (id=1237): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000021401"], 0x20}, 0x1, 0x0, 0x0, 0x9801}, 0x0) 3m2.977416433s ago: executing program 3 (id=1240): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, 0x0) 3m2.688512739s ago: executing program 3 (id=1244): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 3m2.688156928s ago: executing program 3 (id=1245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x340, 0x9403, 0x0, 0x0, 0x2c0, 0x450, 0x3d8, 0x3d8, 0x450, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'syz_tun\x00', {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x6}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) 3m0.552400409s ago: executing program 3 (id=1253): r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m0.318484031s ago: executing program 36 (id=1253): r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m57.861472256s ago: executing program 8 (id=1275): r0 = openat(0xffffffffffffff9c, 0x0, 0x1817c1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 2m57.692010497s ago: executing program 8 (id=1278): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 2m57.604438414s ago: executing program 8 (id=1280): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c2394f90435fc600400110a0a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m57.416117247s ago: executing program 8 (id=1281): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 2m56.910324145s ago: executing program 8 (id=1282): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m54.636079822s ago: executing program 8 (id=1298): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x10) 2m54.398626435s ago: executing program 37 (id=1298): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x10) 14.098318697s ago: executing program 1 (id=1938): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 11.686692525s ago: executing program 6 (id=1943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff05000700"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 11.051123891s ago: executing program 0 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0xfffe0002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x7}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$media(&(0x7f0000000080), 0xa7, 0x800) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0x2e, 0x0, "6248bc9c8095fdfb8d639d954a0649542709e9baf27860bd22292b501f2c28d45a71ec3fa8539e7223c278d70126314aca030d71da9dcb99d1d087f250685685db59cf6de9c2a0496da59a4fcf3d9ceb"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 10.851707053s ago: executing program 5 (id=1947): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750", 0x28}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff200000"], 0x28}}, 0x0) 9.47357808s ago: executing program 5 (id=1948): r0 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYBLOB="d766c38f5f2c577d7577dfa4f8bb35aae76ba78b359051ad95b97721da635f16d1df12dde5f343fe990281895e9ae9961604a9546a24eb3b7dddeb39482b803af0e75024b3345b77f0f392187125142f4462bd6ab88229f14a12e1830bde8c821657e96922268e472e2bd75362ed772b4454b542170067057abc7caaa5dd677b37e089467fbd49bc58f773d7fe5c39418412197a94313e3fc56ebe9215bf0f5d08144c1b162daa78bdc009259d49457b5f0876166cfd09bdf4a02851a4fe48fbf0", @ANYBLOB="0200bc6dd3cd302d", @ANYRES32=0xee00, @ANYBLOB='\n'], 0x5c, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r6 = memfd_create(&(0x7f00000001c0)='sched_switch\x00', 0x2) r7 = memfd_create(&(0x7f0000000280)='sched_switch\x00', 0x6) r8 = memfd_create(&(0x7f00000002c0)='sched_switch\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000035987df3b83f300700669d229ec3c7d0ed50a18c677cd4f0566fc3c2d8fa14746e7f16a91c8ad120b5018d595aa55b7a9ec398d47f2c0dd2170f84f2744117c6a5dd94dabcfc7f7103a0dfc64c", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000010000000000000100000000", @ANYRES32, @ANYBLOB="0000000000f0ffffffffffff00f0ff0f01000100", @ANYRES32=r8, @ANYBLOB="00000000000001000000000000f0ffffffffffff"]) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x3, 0x4) 9.472730947s ago: executing program 9 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa0179e1d}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2, &(0x7f0000000480)={0x6, {{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) 9.470631323s ago: executing program 0 (id=1950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xc0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time\x00') syz_open_pts(0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r4) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa1000000000000ffffffb702000008000000b703000000000000850000002d0000009500"/88], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) 9.40783102s ago: executing program 1 (id=1951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0xd, 0x3, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c25"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r6}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x10c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc4875538", 0x28}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225", 0x45}, {&(0x7f0000001bc0)="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", 0x1e5}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r7 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) fcntl$setsig(r7, 0xa, 0x1e) 8.420841036s ago: executing program 6 (id=1952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa0179e1d}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2, &(0x7f0000000480)={0x6, {{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) 8.135112649s ago: executing program 1 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setfsgid(0xee00) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 7.216492578s ago: executing program 0 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x5000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000100)={0xa0179e1d}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f000001a080)={0x0, 0x9, 0x0, 0x0, 0x0, 0x40000000, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2, &(0x7f0000000480)={0x6, {{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) 6.294263173s ago: executing program 9 (id=1955): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4008000}, 0x0) 5.458828068s ago: executing program 0 (id=1956): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0xd, 0x3, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8, r6}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x10c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc4875538", 0x28}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225", 0x45}, {&(0x7f0000001bc0)="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", 0x1e5}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 5.409339689s ago: executing program 9 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setfsgid(0xee00) r4 = socket$inet(0x2, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 5.39036709s ago: executing program 5 (id=1958): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00ffff"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 5.355905262s ago: executing program 6 (id=1959): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750", 0x28}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff200000"], 0x28}}, 0x0) 5.338209691s ago: executing program 1 (id=1960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="2d04f1486f1d53e96de97204a0cfadc3341cc3084d1615815b3e620e33eff6e1cb709c2962", 0x25}, {&(0x7f0000000100)="2372f418833d2ad5c2bf7150f3b56a461101282a7944ba87813497fa99c02c561da55e679d97a101b2bb68dd91d3b073f81467bb5351bb0e663d571db7e17dced4da662f71f193f47703a547faf51f5fc786df48a91aee08f9a1f067a57327a41645e95f45a03b867964695570912d01814484aefb7c00b7ada645558c3faeb1c56251fe489a9e", 0x87}, {&(0x7f0000000240)="c28e7ea475d54a7ab412aaf729f6653d0d93c03321956c55aebf05b757489050f242d9c5c8a11e15bbf89bf181d7891a96e83fd9ac442e2d87dc38be6f80f13b40d16fecdad88f1e5008961d3f78269790807b77ce31ba0fca8e3043f6a5a49ce2fb30f8c7524cbbb796c62da3e87193ec51ae5bcebdf85e5a7a260ae86e13c6d48b7b80cfec343b30f82c6ad27b8eb0e67edffbabfa14ad2e316ed26457152d81093de33dacfaeee082409a802419fb09571b5d272daaf35a9c07d1998adf211a47ae8a3388b2ff896f399b19a7f7f677f36c513f2a7e32e3afaf26e900ce5e9cd39f762c95f31354c20d", 0xeb}, {0x0}, {&(0x7f00000001c0)="5f47486fbd273fb2393f56a349ec88d1bbea79b9629351cf42912594f437a4c32d9719387f5596073e77b7db73e634", 0x2f}, {&(0x7f0000000580)="d96175e0d3405dd7787a916e48a693fb66a46a4e89be541f920542623609283a3b3199e28c5ea017c8ffb1f6477058cbda8ba89f29ef31ba35383a2fde33c51aa13a76d6d837f1c88fa64d4b110385661616758738a0f87fcdf6281ace863528564b839e", 0x64}, {&(0x7f0000000640)="477a1dbae2cca84cc8eeb58c28fbb1eec9d7ebf49c2e3e02a6e9ede419654d03b8aef6d7cf482d2eb1b13deed7e0c6872898746cc62bcf07c5fda2f547932c9f44777edfff8c4de7266655d1adfe5ad9cc2e58", 0x53}], 0x7) 4.539262281s ago: executing program 6 (id=1961): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x2, 0xf9, 0xb7, 0x7fff, 0x2, 0x3, 0xfffffeff, 0x2df, 0x40, 0x303, 0x0, 0x8, 0x38, 0x1, 0x4, 0x4, 0xd}, [{0x3, 0x8000, 0x0, 0x7, 0x8, 0x5, 0x402, 0xca5}]}, 0x78) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x41, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.304144299s ago: executing program 1 (id=1962): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 4.288882337s ago: executing program 9 (id=1963): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x200, 0x4) sendto$inet(r4, 0x0, 0x0, 0x20008802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000340)={r6, 0x1, 0x6, @local}, 0x10) fcntl$dupfd(r0, 0x0, r0) 4.277807483s ago: executing program 0 (id=1964): syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003600)=""/120) 4.203034581s ago: executing program 5 (id=1965): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e, 0x0, 0x0, @void, @value}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) 4.107988761s ago: executing program 5 (id=1966): add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x55f6e88299ff8d68, 0x180801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20000000}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000fb0000000a020000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='fsi_slave_init\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000000580)="004f28528714f2dfa69abbd8f2aef5138cdc4ed99544d356947c5317ec121817bfa4012e5fcee694f38ec49bbf652c0d2c67368b2046e8f939452aff4c1670376e55940ba803654348", 0x0}, 0x50) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb505920de0c23003221010203010902120001000600000904"], 0x0) syz_usb_disconnect(r5) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[], 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) 4.053488919s ago: executing program 6 (id=1967): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be", 0x43, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r7}, 0x10, &(0x7f0000000100)={&(0x7f00000005c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0e7692fddc9d8ba5a0ac79669b2947a81f2e3c8973fc2af2a7fa10b9126ea28baed9b57d82ab23db557c307ae88da9c6c68d8ceae8e69b06707297b87f8c925a"}, 0x48}, 0x2, 0x0, 0x0, 0x4008000}, 0x0) 3.315987799s ago: executing program 1 (id=1968): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) syz_usb_connect(0x0, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003600)=""/120) 3.003721991s ago: executing program 9 (id=1969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0xd, 0x3, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000300)={0x48}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x10c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc4875538", 0x28}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872fc4f9be9660bb62708d0f52f4958fb4cc5144775062cc7225", 0x45}, {&(0x7f0000001bc0)="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", 0x1e5}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) 827.464011ms ago: executing program 9 (id=1970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setfsgid(0xee00) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 30.456422ms ago: executing program 5 (id=1971): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 28.326418ms ago: executing program 6 (id=1972): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_procfs(r1, &(0x7f0000000280)='net/dev\x00') io_submit(0x0, 0x0, &(0x7f0000004540)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x7, 0x7f00000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) remap_file_pages(&(0x7f00009c2000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x20000) 0s ago: executing program 0 (id=1973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="2d04f1486f1d53e96de97204a0cfadc3341cc3084d1615815b3e620e33eff6e1cb709c2962", 0x25}, {&(0x7f0000000100)="2372f418833d2ad5c2bf7150f3b56a461101282a7944ba87813497fa99c02c561da55e679d97a101b2bb68dd91d3b073f81467bb5351bb0e663d571db7e17dced4da662f71f193f47703a547faf51f5fc786df48a91aee08f9a1f067a57327a41645e95f45a03b867964695570912d01814484aefb7c00b7ada645558c3faeb1c56251fe489a9e", 0x87}, {&(0x7f0000000240)="c28e7ea475d54a7ab412aaf729f6653d0d93c03321956c55aebf05b757489050f242d9c5c8a11e15bbf89bf181d7891a96e83fd9ac442e2d87dc38be6f80f13b40d16fecdad88f1e5008961d3f78269790807b77ce31ba0fca8e3043f6a5a49ce2fb30f8c7524cbbb796c62da3e87193ec51ae5bcebdf85e5a7a260ae86e13c6d48b7b80cfec343b30f82c6ad27b8eb0e67edffbabfa14ad2e316ed26457152d81093de33dacfaeee082409a802419fb09571b5d272daaf35a9c07d1998adf211a47ae8a3388b2ff896f399b19a7f7f677f36c513f2a7e32e3afaf26e900ce5e9cd39f762c95f31354c20d", 0xeb}, {&(0x7f0000000040)}, {&(0x7f00000001c0)="5f47486fbd273fb2393f56a349ec88d1bbea79b9629351cf42912594f437a4c32d9719387f5596073e77b7db73e634", 0x2f}, {&(0x7f0000000580)="d96175e0d3405dd7787a916e48a693fb66a46a4e89be541f920542623609283a3b3199e28c5ea017c8ffb1f6477058cbda8ba89f29ef31ba35383a2fde33c51aa13a76d6d837f1c88fa64d4b110385661616758738a0f87fcdf6281ace863528564b839e", 0x64}, {&(0x7f0000000640)="477a1dbae2cca84cc8eeb58c28fbb1eec9d7ebf49c2e3e02a6e9ede419654d03b8aef6d7cf482d2eb1b13deed7e0c6872898746cc62bcf07c5fda2f547932c9f44777edfff8c4de7266655d1adfe5ad9cc2e58", 0x53}], 0x7) kernel console output (not intermixed with test programs): th error -22 [ 335.777373][ T964] usb 4-1: USB disconnect, device number 49 [ 335.961989][ T29] audit: type=1400 audit(1730164627.503:828): avc: denied { create } for pid=10111 comm="syz.8.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 336.470060][ T964] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 336.643848][ T964] usb 9-1: Using ep0 maxpacket: 8 [ 336.661509][ T5916] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 336.682538][ T964] usb 9-1: unable to get BOS descriptor or descriptor too short [ 336.707000][ T964] usb 9-1: config 9 has an invalid interface number: 5 but max is 0 [ 336.769673][ T964] usb 9-1: config 9 has no interface number 0 [ 336.803675][ T964] usb 9-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 336.852996][ T964] usb 9-1: config 9 interface 5 has no altsetting 0 [ 336.913396][ T964] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 336.979702][ T964] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.185000][ T8] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 337.208647][ T964] usb 9-1: Product: syz [ 337.220817][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 337.407169][T10129] batadv_slave_0: entered promiscuous mode [ 337.786335][T10123] batadv_slave_0: left promiscuous mode [ 338.086963][ T964] usb 9-1: Manufacturer: syz [ 338.091818][ T964] usb 9-1: SerialNumber: syz [ 338.182820][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 338.196277][ T5916] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 338.208496][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.220630][ T5870] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 338.277149][ T5916] usb 6-1: Product: syz [ 338.284998][ T5916] usb 6-1: Manufacturer: syz [ 338.297204][T10131] netlink: set zone limit has 4 unknown bytes [ 338.309984][ T5916] usb 6-1: SerialNumber: syz [ 338.316488][ T5916] usb 6-1: config 0 descriptor?? [ 338.330544][ T5916] hub 6-1:0.0: bad descriptor, ignoring hub [ 338.346633][ T5916] hub 6-1:0.0: probe with driver hub failed with error -5 [ 338.367263][ T5916] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 338.379884][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 338.380213][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 338.391153][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 338.397655][ T8] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 338.409929][ T5870] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 338.413693][ T8] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 338.439960][ T29] audit: type=1400 audit(1730164629.973:829): avc: denied { write } for pid=10111 comm="syz.8.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 338.449876][ T5870] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 338.459207][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.478380][ T8] usb 7-1: Product: syz [ 338.482731][ T8] usb 7-1: Manufacturer: syz [ 338.487432][ T8] usb 7-1: SerialNumber: syz [ 338.493710][ T29] audit: type=1400 audit(1730164630.033:830): avc: denied { write } for pid=10111 comm="syz.8.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 338.539904][ T29] audit: type=1400 audit(1730164630.063:831): avc: denied { setopt } for pid=10111 comm="syz.8.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 338.539926][ T8] usb 7-1: config 0 descriptor?? [ 338.580566][ T5870] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 338.595003][ T5870] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 338.614843][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 338.626762][ T29] audit: type=1400 audit(1730164630.063:832): avc: denied { connect } for pid=10111 comm="syz.8.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 338.660528][ T5916] usb 6-1: USB disconnect, device number 41 [ 338.678797][ T5870] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 338.702702][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.720690][ T5870] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 338.945230][ T5870] scsi host1: usb-storage 4-1:1.0 [ 339.197615][ T29] audit: type=1400 audit(1730164630.733:833): avc: denied { connect } for pid=10125 comm="syz.3.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 339.909710][ T964] usb 9-1: USB disconnect, device number 20 [ 340.065737][ T12] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 340.130549][ T12] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 340.377008][ T29] audit: type=1400 audit(1730164631.903:834): avc: denied { map } for pid=10149 comm="syz.5.993" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.812322][ T29] audit: type=1400 audit(1730164631.903:835): avc: denied { execute } for pid=10149 comm="syz.5.993" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 341.289491][ T5870] usb 7-1: USB disconnect, device number 32 [ 341.344042][ T964] usb 4-1: USB disconnect, device number 50 [ 341.382736][ T35] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 341.394134][ T35] sd 1:0:0:0: [sdb] Sense not available. [ 341.404729][ T35] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 341.412305][ T35] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 341.418465][ T35] sd 1:0:0:0: [sdb] Write Protect is off [ 341.429100][ T35] sd 1:0:0:0: [sdb] Asking for cache data failed [ 341.440339][ T35] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 341.524478][T10165] batadv_slave_0: entered promiscuous mode [ 341.573398][ T35] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 342.175463][T10156] batadv_slave_0: left promiscuous mode [ 342.196689][T10177] batadv_slave_0: entered promiscuous mode [ 342.719268][ T6666] udevd[6666]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 342.942822][T10169] batadv_slave_0: left promiscuous mode [ 343.611671][ T6666] udevd[6666]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 343.985671][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.070550][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1009'. [ 345.695148][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.711503][ T29] audit: type=1400 audit(1730164637.243:836): avc: denied { mount } for pid=10222 comm="syz.6.1013" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 345.738858][ T29] audit: type=1400 audit(1730164637.253:837): avc: denied { write } for pid=10222 comm="syz.6.1013" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 345.762192][ T29] audit: type=1400 audit(1730164637.273:838): avc: denied { remount } for pid=10222 comm="syz.6.1013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 345.783051][ T29] audit: type=1400 audit(1730164637.273:839): avc: denied { remount } for pid=10222 comm="syz.6.1013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 345.848417][ T29] audit: type=1400 audit(1730164637.383:840): avc: denied { unmount } for pid=6043 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 345.897400][T10201] bridge_slave_0 (unregistering): left allmulticast mode [ 345.918506][T10201] bridge_slave_0 (unregistering): left promiscuous mode [ 345.927648][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.959746][ T29] audit: type=1400 audit(1730164637.493:841): avc: denied { getopt } for pid=10224 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.178199][T10241] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1018'. [ 346.234903][T10241] netlink: zone id is out of range [ 346.306939][T10249] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 346.317433][T10249] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 347.228569][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1019'. [ 347.277188][ T29] audit: type=1400 audit(1730164638.763:842): avc: denied { mount } for pid=10238 comm="syz.5.1019" name="/" dev="pstore" ino=2751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 347.530175][ T5900] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 347.774706][ T29] audit: type=1400 audit(1730164639.313:843): avc: denied { getopt } for pid=10258 comm="syz.8.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.871232][ T5900] usb 6-1: Invalid ep0 maxpacket: 64 [ 348.010103][ T8] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 348.018196][ T5900] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 348.180002][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 348.206544][ T5900] usb 6-1: Invalid ep0 maxpacket: 64 [ 348.225949][ T8] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 348.234352][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.244598][ T8] usb 4-1: config 0 has no interface number 0 [ 348.258212][ T5900] usb usb6-port1: attempt power cycle [ 348.267033][ T8] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a7.3a [ 348.331718][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.353322][ T8] usb 4-1: Product: syz [ 348.357611][ T8] usb 4-1: Manufacturer: syz [ 348.362349][ T8] usb 4-1: SerialNumber: syz [ 348.376993][ T8] usb 4-1: config 0 descriptor?? [ 348.630091][ T5900] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 348.642614][ T8] usb 4-1: unknown interface protocol 0x71, assuming v1 [ 348.649587][ T8] usb 4-1: 104:0 : does not exist [ 348.710398][ T5900] usb 6-1: Invalid ep0 maxpacket: 64 [ 348.731589][ T8] usb 4-1: USB disconnect, device number 51 [ 348.749529][ T29] audit: type=1400 audit(1730164640.263:844): avc: denied { read write } for pid=10276 comm="syz.1.1030" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 348.788052][ T6666] udevd[6666]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.104/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.811457][ T29] audit: type=1400 audit(1730164640.263:845): avc: denied { open } for pid=10276 comm="syz.1.1030" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 348.845197][T10282] netlink: 191416 bytes leftover after parsing attributes in process `syz.8.1032'. [ 348.868426][T10282] netlink: zone id is out of range [ 348.880189][ T5900] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 348.904677][ T5900] usb 6-1: Invalid ep0 maxpacket: 64 [ 348.912346][ T5900] usb usb6-port1: unable to enumerate USB device [ 348.944604][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1034'. [ 349.619007][ T5869] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 349.789710][ T5869] usb 2-1: config 0 has no interfaces? [ 349.806062][ T5869] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 349.822752][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.870960][ T5869] usb 2-1: Product: syz [ 349.881050][ T5869] usb 2-1: Manufacturer: syz [ 349.885758][ T5869] usb 2-1: SerialNumber: syz [ 349.898558][ T5869] usb 2-1: config 0 descriptor?? [ 349.974559][T10314] xt_nat: multiple ranges no longer supported [ 350.565829][ T5869] usb 2-1: USB disconnect, device number 47 [ 350.831598][T10331] netlink: set zone limit has 4 unknown bytes [ 350.920281][T10333] syz.8.1045: attempt to access beyond end of device [ 350.920281][T10333] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 350.933365][T10333] exFAT-fs (nbd8): unable to read boot sector [ 350.939462][T10333] exFAT-fs (nbd8): failed to read boot sector [ 350.945632][T10333] exFAT-fs (nbd8): failed to recognize exfat type [ 351.035663][ T5869] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 351.525547][ T967] IPVS: starting estimator thread 0... [ 351.609397][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 351.609414][ T29] audit: type=1400 audit(1730164643.113:863): avc: denied { watch watch_reads } for pid=10335 comm="syz.3.1047" path="/proc/661" dev="proc" ino=28259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 351.661631][T10340] IPVS: using max 29 ests per chain, 69600 per kthread [ 351.663061][ T29] audit: type=1400 audit(1730164643.203:864): avc: denied { unmount } for pid=7928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 351.677075][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 352.480272][ T5869] usb 2-1: config 0 has an invalid interface number: 99 but max is 0 [ 352.488375][ T5869] usb 2-1: config 0 has no interface number 0 [ 352.497419][ T5869] usb 2-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 352.532619][ T5869] usb 2-1: config 0 interface 99 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 352.615034][ T5869] usb 2-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 352.629956][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.639014][ T5869] usb 2-1: Product: syz [ 352.644196][ T5869] usb 2-1: Manufacturer: syz [ 352.652853][ T5869] usb 2-1: SerialNumber: syz [ 352.666294][ T5869] usb 2-1: config 0 descriptor?? [ 352.692020][ T5869] usbtest 2-1:0.99: couldn't get endpoints, -22 [ 352.715129][ T5869] usbtest 2-1:0.99: probe with driver usbtest failed with error -22 [ 352.759185][T10357] FAULT_INJECTION: forcing a failure. [ 352.759185][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 352.779954][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.8.1053 Not tainted 6.12.0-rc5-syzkaller #0 [ 352.789008][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.799065][T10357] Call Trace: [ 352.802332][T10357] [ 352.805262][T10357] dump_stack_lvl+0x16c/0x1f0 [ 352.809955][T10357] should_fail_ex+0x497/0x5b0 [ 352.814636][T10357] should_failslab+0xc2/0x120 [ 352.819313][T10357] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 352.824692][T10357] ? skb_clone+0x190/0x3f0 [ 352.829111][T10357] skb_clone+0x190/0x3f0 [ 352.833347][T10357] netlink_deliver_tap+0xab3/0xd90 [ 352.838458][T10357] netlink_unicast+0x6b4/0x7f0 [ 352.843219][T10357] ? __pfx_netlink_unicast+0x10/0x10 [ 352.848492][T10357] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 352.853591][T10357] netlink_ack+0x6a8/0xb90 [ 352.858002][T10357] netlink_rcv_skb+0x348/0x440 [ 352.862844][T10357] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.868285][T10357] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.873571][T10357] ? netlink_deliver_tap+0x1ae/0xd90 [ 352.878848][T10357] netlink_unicast+0x53c/0x7f0 [ 352.883606][T10357] ? __pfx_netlink_unicast+0x10/0x10 [ 352.888886][T10357] netlink_sendmsg+0x8b8/0xd70 [ 352.893644][T10357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.898920][T10357] ? __might_fault+0xe3/0x190 [ 352.903590][T10357] ____sys_sendmsg+0xaaf/0xc90 [ 352.908350][T10357] ? copy_msghdr_from_user+0x10b/0x160 [ 352.913797][T10357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.919074][T10357] ? __pfx___lock_acquire+0x10/0x10 [ 352.924259][T10357] ___sys_sendmsg+0x135/0x1e0 [ 352.928922][T10357] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.934113][T10357] ? lock_acquire+0x2f/0xb0 [ 352.938595][T10357] ? __fget_files+0x40/0x3f0 [ 352.943181][T10357] ? fdget+0x176/0x210 [ 352.947245][T10357] __sys_sendmsg+0x117/0x1f0 [ 352.951821][T10357] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.956913][T10357] ? __fget_files+0x244/0x3f0 [ 352.961591][T10357] do_syscall_64+0xcd/0x250 [ 352.966089][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.971971][T10357] RIP: 0033:0x7fbeed77e719 [ 352.976368][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.995959][T10357] RSP: 002b:00007fbeee645038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.004354][T10357] RAX: ffffffffffffffda RBX: 00007fbeed935f80 RCX: 00007fbeed77e719 [ 353.012323][T10357] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 353.020294][T10357] RBP: 00007fbeee645090 R08: 0000000000000000 R09: 0000000000000000 [ 353.028258][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.036216][T10357] R13: 0000000000000000 R14: 00007fbeed935f80 R15: 00007ffd7e74c068 [ 353.044184][T10357] [ 353.058727][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.075556][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.096590][ T964] usb 2-1: USB disconnect, device number 48 [ 353.102554][ T8] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 353.271969][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 353.284298][ T8] usb 6-1: config 174 has an invalid interface number: 178 but max is 0 [ 353.293347][ T8] usb 6-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 353.304279][ T8] usb 6-1: config 174 has no interface number 0 [ 353.310811][ T8] usb 6-1: config 174 interface 178 has no altsetting 0 [ 353.323265][ T8] usb 6-1: string descriptor 0 read error: -22 [ 353.330631][ T8] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 353.339851][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.354897][ T8] usb 6-1: bad CDC descriptors [ 353.361213][ T8] usb 6-1: unsupported MDLM descriptors [ 353.380074][ T5869] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 353.490079][ T5900] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 353.530008][ T5869] usb 9-1: Using ep0 maxpacket: 16 [ 353.540760][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 353.573007][ T5869] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 353.593373][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.603946][ T5869] usb 9-1: Product: syz [ 353.608449][ T5869] usb 9-1: Manufacturer: syz [ 353.616100][ T5869] usb 9-1: SerialNumber: syz [ 353.625758][ T5870] usb 6-1: USB disconnect, device number 46 [ 353.627503][ T5869] usb 9-1: config 0 descriptor?? [ 353.655429][ T5869] hub 9-1:0.0: bad descriptor, ignoring hub [ 353.661539][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 353.668627][ T5869] hub 9-1:0.0: probe with driver hub failed with error -5 [ 353.677084][ T5900] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 353.687109][ T5900] usb 7-1: config 0 has no interface number 0 [ 353.693907][ T5900] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 50, using maximum allowed: 30 [ 353.707666][ T5869] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input24 [ 353.717914][ T5900] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 353.732538][ T5900] usb 7-1: config 0 interface 48 has no altsetting 0 [ 353.745626][ T5900] usb 7-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 353.755196][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.767598][ T5900] usb 7-1: Product: syz [ 353.774316][ T5900] usb 7-1: Manufacturer: syz [ 353.779102][ T5900] usb 7-1: SerialNumber: syz [ 353.788964][ T5900] usb 7-1: config 0 descriptor?? [ 353.842802][T10364] tipc: Enabling of bearer rejected, already enabled [ 353.906156][T10366] FAULT_INJECTION: forcing a failure. [ 353.906156][T10366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.943016][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.1.1057 Not tainted 6.12.0-rc5-syzkaller #0 [ 353.952169][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 353.962242][T10366] Call Trace: [ 353.965527][T10366] [ 353.968438][T10366] dump_stack_lvl+0x16c/0x1f0 [ 353.973104][T10366] should_fail_ex+0x497/0x5b0 [ 353.977757][T10366] _copy_from_user+0x32/0x100 [ 353.982427][T10366] copy_msghdr_from_user+0x99/0x160 [ 353.987622][T10366] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 353.993410][T10366] ? __pfx___lock_acquire+0x10/0x10 [ 353.998586][T10366] ___sys_sendmsg+0xff/0x1e0 [ 354.003167][T10366] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.008376][T10366] ? lock_acquire+0x2f/0xb0 [ 354.012861][T10366] ? __fget_files+0x40/0x3f0 [ 354.017439][T10366] ? fdget+0x176/0x210 [ 354.021500][T10366] __sys_sendmsg+0x117/0x1f0 [ 354.026105][T10366] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.031216][T10366] ? __fget_files+0x244/0x3f0 [ 354.035904][T10366] do_syscall_64+0xcd/0x250 [ 354.040405][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.046289][T10366] RIP: 0033:0x7f12f417e719 [ 354.050706][T10366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.070302][T10366] RSP: 002b:00007f12f3bff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.078701][T10366] RAX: ffffffffffffffda RBX: 00007f12f4335f80 RCX: 00007f12f417e719 [ 354.086659][T10366] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 354.094634][T10366] RBP: 00007f12f3bff090 R08: 0000000000000000 R09: 0000000000000000 [ 354.102607][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.110580][T10366] R13: 0000000000000000 R14: 00007f12f4335f80 R15: 00007ffc34fb9618 [ 354.118558][T10366] [ 354.121691][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.382362][T10373] 9pnet_fd: Insufficient options for proto=fd [ 354.393619][T10373] FAULT_INJECTION: forcing a failure. [ 354.393619][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 354.406279][T10373] CPU: 0 UID: 0 PID: 10373 Comm: syz.1.1058 Not tainted 6.12.0-rc5-syzkaller #0 [ 354.415302][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.425354][T10373] Call Trace: [ 354.428633][T10373] [ 354.431563][T10373] dump_stack_lvl+0x16c/0x1f0 [ 354.436251][T10373] should_fail_ex+0x497/0x5b0 [ 354.440930][T10373] ? fs_reclaim_acquire+0xae/0x150 [ 354.446045][T10373] should_failslab+0xc2/0x120 [ 354.450730][T10373] __kmalloc_cache_noprof+0x6b/0x300 [ 354.456017][T10373] ? cgroup_show_path+0xb2/0x740 [ 354.460960][T10373] ? __pfx_cgroup_show_path+0x10/0x10 [ 354.466332][T10373] cgroup_show_path+0xb2/0x740 [ 354.471097][T10373] ? __pfx_cgroup_show_path+0x10/0x10 [ 354.476470][T10373] kernfs_sop_show_path+0x12b/0x1b0 [ 354.481671][T10373] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 354.487388][T10373] show_path+0x9b/0x100 [ 354.491545][T10373] show_mountinfo+0x1d5/0x830 [ 354.496222][T10373] ? __pfx_show_mountinfo+0x10/0x10 [ 354.501421][T10373] ? m_next+0x47/0xb0 [ 354.505404][T10373] ? m_next+0x6a/0xb0 [ 354.509387][T10373] seq_read_iter+0xb19/0x12b0 [ 354.514089][T10373] copy_splice_read+0x620/0xb90 [ 354.518947][T10373] ? __pfx_copy_splice_read+0x10/0x10 [ 354.524333][T10373] ? do_splice_read+0x1de/0x370 [ 354.529184][T10373] ? __pfx_copy_splice_read+0x10/0x10 [ 354.534558][T10373] do_splice_read+0x282/0x370 [ 354.539240][T10373] splice_direct_to_actor+0x2a4/0xa40 [ 354.544617][T10373] ? __pfx_direct_splice_actor+0x10/0x10 [ 354.550259][T10373] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 354.556163][T10373] ? __pfx___might_resched+0x10/0x10 [ 354.561453][T10373] do_splice_direct+0x178/0x250 [ 354.566309][T10373] ? __pfx_do_splice_direct+0x10/0x10 [ 354.571683][T10373] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 354.577589][T10373] do_sendfile+0xb0c/0xe40 [ 354.582016][T10373] ? __pfx_do_sendfile+0x10/0x10 [ 354.586957][T10373] ? __pfx___schedule+0x10/0x10 [ 354.591825][T10373] ? __fget_files+0x244/0x3f0 [ 354.596519][T10373] __x64_sys_sendfile64+0x1da/0x220 [ 354.601717][T10373] ? ksys_write+0x1ad/0x260 [ 354.606230][T10373] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 354.612045][T10373] do_syscall_64+0xcd/0x250 [ 354.616557][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.622457][T10373] RIP: 0033:0x7f12f417e719 [ 354.626883][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.646504][T10373] RSP: 002b:00007f12f3bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 354.654907][T10373] RAX: ffffffffffffffda RBX: 00007f12f4336130 RCX: 00007f12f417e719 [ 354.662865][T10373] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000009 [ 354.670822][T10373] RBP: 00007f12f3bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 354.678788][T10373] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.686758][T10373] R13: 0000000000000000 R14: 00007f12f4336130 R15: 00007ffc34fb9618 [ 354.694724][T10373] [ 354.697759][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.760001][ T5874] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 354.915138][ T5874] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 354.944393][ T5874] usb 6-1: config 0 has no interface number 1 [ 354.951082][ T5874] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 354.961499][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.088802][ T5874] usb 6-1: config 0 descriptor?? [ 355.200530][ T5874] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.292549][ T5874] usb 6-1: MIDIStreaming interface descriptor not found [ 355.374557][ T29] audit: type=1400 audit(1730164646.913:865): avc: denied { connect } for pid=10371 comm="syz.5.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.429980][ T5900] usb 7-1: reset high-speed USB device number 33 using dummy_hcd [ 355.458761][ T5874] gspca_main: spca561-2.14.0 probing abcd:cdee [ 355.981552][ T5900] usb 7-1: failed to restore interface 48 altsetting 48 (error=-71) [ 356.000300][ T5900] usb 7-1: USB disconnect, device number 33 [ 356.053560][ T5874] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 356.321610][ T964] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 356.515280][ T964] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 356.524862][ T964] usb 4-1: config 0 has no interface number 0 [ 356.536519][ T964] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice=5e.d2 [ 356.546193][ T964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.557530][ T964] usb 4-1: Product: syz [ 356.563497][ T964] usb 4-1: Manufacturer: syz [ 356.568273][ T964] usb 4-1: SerialNumber: syz [ 356.575815][ T964] usb 4-1: config 0 descriptor?? [ 357.282633][ T964] rtl8150 4-1:0.176: eth17: rtl8150 is detected [ 357.370270][ T29] audit: type=1400 audit(1730164648.903:866): avc: denied { getopt } for pid=10402 comm="syz.6.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 357.399231][ T967] usb 6-1: USB disconnect, device number 47 [ 357.425202][ T5916] usb 4-1: USB disconnect, device number 52 [ 357.425773][ T29] audit: type=1400 audit(1730164648.933:867): avc: denied { bind } for pid=10404 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 357.553378][ T29] audit: type=1400 audit(1730164648.933:868): avc: denied { name_bind } for pid=10404 comm="syz.1.1070" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 357.613104][ T29] audit: type=1400 audit(1730164648.933:869): avc: denied { node_bind } for pid=10404 comm="syz.1.1070" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 357.634549][ T29] audit: type=1400 audit(1730164648.993:870): avc: denied { listen } for pid=10404 comm="syz.1.1070" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 357.709728][ T29] audit: type=1400 audit(1730164649.043:871): avc: denied { connect } for pid=10404 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 357.885421][ T8] usb 9-1: USB disconnect, device number 21 [ 358.186390][T10417] vcan0: entered promiscuous mode [ 358.202300][T10417] vlan2: entered promiscuous mode [ 358.208546][ T29] audit: type=1400 audit(1730164649.043:872): avc: denied { name_connect } for pid=10404 comm="syz.1.1070" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 358.240721][T10417] vlan2: entered allmulticast mode [ 358.250291][T10417] vcan0: entered allmulticast mode [ 358.347760][T10417] vcan0: left allmulticast mode [ 358.353034][T10417] vcan0: left promiscuous mode [ 358.455308][T10432] [U] R5¡JCÒ°~V6“˜|‡7§¤Á…KXVZZËG—RÙÔ $¨ [ 358.463855][T10432] [U] ,ÅÁRF°-ANQ,”µÉÈ*ÏŸÀиBÞ [ 358.469560][T10432] [U] 03¤ÃCZŠ·‹V-¤ÏÇŠ!WKI©0OÞSÆQ,ˆ]{”}ÀÔ.3SÑͬ=“$.CVÙ#ÚDM¢;ÒXÜWC4ºÇÌÈMƒ\¾ÚÑÝMÂÖU(RO©”0LÈ¿”¾Ü¼^1ÚƒŒÊMÍC®ZÜ¡|26÷ÉQ”ÇÁÂCÏ*ÏÚÌFFƲ |Ð&¡7ÉÕ/V'úÍ 1‰§;Â|TÜÁ¬EHÈŽ«"ÇØ¡¿$;KÐCZÁ·ÝQÒÎ-K6Û•KÖZ©¬£ÖJµ¼ÉV$ÅQ‚€ÊɧÔ­¹=™Å‹÷[ÞÍ¿8E,Ç[ÌO*Ž¨VɹÎ׬&G  [ 358.503189][ T29] audit: type=1400 audit(1730164650.043:873): avc: denied { getopt } for pid=10433 comm="syz.8.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 358.522844][ T967] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 358.531584][T10432] [U] È<Á/FB½ÓEO‘*|À B6RÚSZ@5ØB‡¦°„ÐIØÔцÔÜÅ¥[ĢѴ7±TÙ¾ÞÈ­ÃEK`ÃÇD„ÒØ®LL 1 [ 366.070438][T10544] overlayfs: overlapping lowerdir path [ 366.564500][ T3498] wlan1: Creating new IBSS network, BSSID 66:12:69:d8:6d:e1 [ 367.422440][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 368.583407][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 368.583424][ T29] audit: type=1400 audit(1730164659.283:880): avc: denied { bind } for pid=10575 comm="syz.8.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.266714][ T5834] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 370.275613][ T5834] Bluetooth: hci3: Injecting HCI hardware error event [ 370.284545][ T5834] Bluetooth: hci3: hardware error 0x00 [ 370.654750][T10619] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 371.806963][ T29] audit: type=1400 audit(1730164663.003:881): avc: denied { write } for pid=10620 comm="syz.8.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.883701][ T5874] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 372.040253][ T5874] usb 9-1: device descriptor read/64, error -71 [ 372.279968][ T5874] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 372.557942][ T5834] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 373.440015][ T5874] usb 9-1: device descriptor read/64, error -71 [ 373.550597][ T5874] usb usb9-port1: attempt power cycle [ 373.602214][ T29] audit: type=1400 audit(1730164664.513:882): avc: denied { read write } for pid=10634 comm="syz.6.1150" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 373.624723][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.631255][ T29] audit: type=1400 audit(1730164664.513:883): avc: denied { open } for pid=10634 comm="syz.6.1150" path="/235/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 373.654306][ T29] audit: type=1400 audit(1730164665.123:884): avc: denied { mount } for pid=10647 comm="syz.3.1152" name="/" dev="ocfs2_dlmfs" ino=29892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 373.884050][ T29] audit: type=1400 audit(1730164665.423:885): avc: denied { getopt } for pid=10647 comm="syz.3.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 374.773208][ T5834] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 374.849902][ T5874] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 374.885719][ T964] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 375.064034][ T964] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.075793][ T964] usb 9-1: config 0 has no interface number 0 [ 375.135563][ T964] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.246756][ T964] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.401069][ T964] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 375.439896][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 375.447837][ T5874] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 375.456104][ T5874] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.466228][ T964] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.476841][ T964] usb 9-1: config 0 descriptor?? [ 375.504562][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.504698][ T29] audit: type=1400 audit(1730164667.043:886): avc: denied { watch } for pid=10687 comm="syz.6.1170" path="/238/net_prio.prioidx" dev="tmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 375.538302][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.543824][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.555279][ T29] audit: type=1400 audit(1730164667.063:887): avc: denied { watch_sb } for pid=10687 comm="syz.6.1170" path="/238/net_prio.prioidx" dev="tmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 375.579530][ T5874] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.594829][ T5874] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 376.112808][ T964] input: HID 04d9:a055 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:04D9:A055.000F/input/input25 [ 376.584800][ T964] holtek_kbd 0003:04D9:A055.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.8-1/input1 [ 376.605316][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.613712][ T29] audit: type=1400 audit(1730164668.143:888): avc: denied { ioctl } for pid=5183 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3425 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 376.638582][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.719318][ T964] usb 9-1: USB disconnect, device number 26 [ 377.500006][ T5874] usb 2-1: usb_control_msg returned -32 [ 377.505610][ T5874] usbtmc 2-1:16.0: can't read capabilities [ 377.649875][ T5870] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 377.700039][ T964] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 377.801243][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 377.812887][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 377.824356][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 377.835846][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.849295][ T5870] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.858780][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.884196][ T964] usb 6-1: Using ep0 maxpacket: 8 [ 377.899245][ T5870] usb 4-1: config 0 descriptor?? [ 377.912203][T10703] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.971718][ T964] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 377.980996][ T964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.989128][ T964] usb 6-1: Product: syz [ 377.993760][ T964] usb 6-1: Manufacturer: syz [ 377.998757][ T964] usb 6-1: SerialNumber: syz [ 378.006211][ T964] usb 6-1: config 0 descriptor?? [ 378.209052][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.239182][ T964] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.338246][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.354862][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.364472][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.378396][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.387520][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.399116][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.408542][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.419423][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.428327][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.439115][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.449354][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.463749][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.472537][ T5870] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 378.486741][ T5870] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 378.534069][ T5870] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 378.592804][ T5870] usb 4-1: USB disconnect, device number 53 [ 378.840071][ T5834] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 378.849038][ T5834] Bluetooth: hci0: Injecting HCI hardware error event [ 378.858000][ T5140] Bluetooth: hci0: hardware error 0x00 [ 379.046540][ T5870] usb 2-1: USB disconnect, device number 51 [ 379.229358][T10729] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1186'. [ 379.239712][T10729] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.1186'. [ 379.581595][ T5870] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 379.771608][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 379.791549][ T5870] usb 2-1: config 0 has no interfaces? [ 379.896692][ T5870] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 379.905858][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.914127][ T5870] usb 2-1: Product: syz [ 379.918610][ T5870] usb 2-1: Manufacturer: syz [ 379.926557][ T5870] usb 2-1: SerialNumber: syz [ 379.934486][ T5870] usb 2-1: config 0 descriptor?? [ 380.110018][ T964] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 380.150655][ T964] usb 6-1: USB disconnect, device number 48 [ 380.685966][ T29] audit: type=1400 audit(1730164672.223:889): avc: denied { bind } for pid=10720 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.712399][ T5870] usb 2-1: USB disconnect, device number 52 [ 381.018625][ T5140] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 383.209960][ T29] audit: type=1400 audit(1730164673.913:890): avc: denied { setopt } for pid=10765 comm="syz.3.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 383.230030][ T29] audit: type=1400 audit(1730164674.113:891): avc: denied { ioctl } for pid=10765 comm="syz.3.1198" path="socket:[30108]" dev="sockfs" ino=30108 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 383.256044][ T29] audit: type=1400 audit(1730164674.423:892): avc: denied { view } for pid=10765 comm="syz.3.1198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 383.819245][ T5900] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 384.000123][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 384.017297][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.123425][ T5900] usb 6-1: config 0 has no interfaces? [ 384.236408][ T5900] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 384.326444][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.345345][ T5900] usb 6-1: Product: syz [ 384.420541][ T5900] usb 6-1: Manufacturer: syz [ 384.425179][ T5900] usb 6-1: SerialNumber: syz [ 384.431436][ T5900] usb 6-1: config 0 descriptor?? [ 384.880384][ T5874] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 385.172633][ T5874] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 385.180894][ T5900] usb 6-1: USB disconnect, device number 49 [ 385.192572][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.222190][ T5874] usb 7-1: config 0 descriptor?? [ 385.479305][ T5874] [drm] vendor descriptor length:6 data:06 5f 88 25 b1 be 00 00 00 00 00 [ 385.492379][ T5874] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 385.648104][ T8] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 385.830386][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 385.965194][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 386.125252][ T5874] [drm:udl_init] *ERROR* Selecting channel failed [ 386.141918][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.168444][ T5874] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 386.206979][ T5874] [drm] Initialized udl on minor 2 [ 386.235008][ T5874] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.258198][ T8] usb 4-1: config 0 descriptor?? [ 386.274720][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1219'. [ 386.275606][ T8] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 386.308427][ T5874] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 386.478187][ T5870] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.509324][ T5870] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 386.564227][ T5874] usb 7-1: USB disconnect, device number 34 [ 386.861541][ T8] gspca_sonixj: reg_w1 err -110 [ 386.872903][ T8] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 387.607007][T10834] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.1223'. [ 387.630681][T10834] netlink: 183228 bytes leftover after parsing attributes in process `syz.6.1223'. [ 387.808386][T10839] netlink: 'syz.6.1226': attribute type 12 has an invalid length. [ 388.443584][ T29] audit: type=1400 audit(1730164679.983:893): avc: denied { ioctl } for pid=10845 comm="syz.8.1228" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 388.637702][ T5916] usb 4-1: USB disconnect, device number 54 [ 389.975002][T10872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1237'. [ 390.103635][ T29] audit: type=1400 audit(1730164681.643:894): avc: denied { read write } for pid=10879 comm="syz.3.1240" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 390.294844][ T29] audit: type=1400 audit(1730164681.833:895): avc: denied { open } for pid=10879 comm="syz.3.1240" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 391.115640][ T29] audit: type=1400 audit(1730164682.643:896): avc: denied { getopt } for pid=10899 comm="syz.6.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 392.151595][ T29] audit: type=1400 audit(1730164682.743:897): avc: denied { getopt } for pid=10902 comm="syz.8.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.005869][ T3498] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.454914][ T29] audit: type=1326 audit(1730164684.993:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10927 comm="syz.5.1258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdb8b7e719 code=0x0 [ 393.874661][ T3498] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.026068][ T5874] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 394.085682][ T3498] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.159884][ T5874] usb 9-1: device descriptor read/64, error -71 [ 394.194112][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.204760][ T5834] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 394.213657][ T5834] Bluetooth: hci2: Injecting HCI hardware error event [ 394.220063][T10944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.221764][ T5834] Bluetooth: hci2: hardware error 0x00 [ 394.228358][T10944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.280449][T10944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.288648][T10944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 394.296508][T10944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.317325][ T29] audit: type=1400 audit(1730164685.843:899): avc: denied { mounton } for pid=10939 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 394.558015][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 394.821837][ T3498] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.054035][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 395.068053][T10964] ceph: No mds server is up or the cluster is laggy [ 395.278218][T10939] chnl_net:caif_netlink_parms(): no params data found [ 395.557055][T10939] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.576442][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.583742][T10939] bridge_slave_0: entered allmulticast mode [ 395.592073][T10939] bridge_slave_0: entered promiscuous mode [ 395.599578][T10939] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.607312][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.614563][T10939] bridge_slave_1: entered allmulticast mode [ 395.673495][ T29] audit: type=1400 audit(1730164687.213:900): avc: denied { accept } for pid=10981 comm="syz.5.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.875405][T10939] bridge_slave_1: entered promiscuous mode [ 396.152582][ T3498] bridge_slave_1: left allmulticast mode [ 396.161910][ T3498] bridge_slave_1: left promiscuous mode [ 396.179385][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.188495][ T3498] bridge_slave_0: left allmulticast mode [ 396.194381][ T3498] bridge_slave_0: left promiscuous mode [ 396.200251][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.414999][T10944] Bluetooth: hci0: command tx timeout [ 396.681170][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.840006][ T5834] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 397.081720][T11007] Process accounting resumed [ 398.159704][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.177928][ T3498] bond0 (unregistering): Released all slaves [ 398.188755][T10939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.230255][T10939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.306131][T10939] team0: Port device team_slave_0 added [ 398.333159][T10939] team0: Port device team_slave_1 added [ 398.440011][ T5834] Bluetooth: hci0: command tx timeout [ 398.529640][T10939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.551358][T10939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.061273][T10939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.160653][T10939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.167684][T10939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.196281][T10939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.237286][ T3498] hsr_slave_0: left promiscuous mode [ 399.244133][ T3498] hsr_slave_1: left promiscuous mode [ 399.273688][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.295025][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.325789][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.333389][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.358598][ T3498] veth1_macvtap: left promiscuous mode [ 399.364317][ T3498] veth0_macvtap: left promiscuous mode [ 399.372857][ T3498] veth1_vlan: left promiscuous mode [ 399.374583][T10944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.382328][ T3498] veth0_vlan: left promiscuous mode [ 399.392124][T10944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.400747][T10944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.408469][T10944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.416378][T10944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 399.431525][T10944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 399.456309][ T29] audit: type=1326 audit(1730164690.993:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.5.1304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdb8b7e719 code=0x0 [ 400.522791][T10944] Bluetooth: hci0: command tx timeout [ 400.536811][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 400.577434][ T3498] team0 (unregistering): Port device team_slave_0 removed [ 401.209920][ T964] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 401.352075][T10939] hsr_slave_0: entered promiscuous mode [ 401.370206][T10939] hsr_slave_1: entered promiscuous mode [ 401.380130][T10939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.387843][T10939] Cannot create hsr debugfs directory [ 401.393420][ T964] usb 2-1: Using ep0 maxpacket: 32 [ 401.399957][ T964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.437948][ T964] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.459586][ T964] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 401.471697][ T964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.482995][T10944] Bluetooth: hci2: command tx timeout [ 401.518002][ T964] usb 2-1: Product: syz [ 401.522407][ T964] usb 2-1: Manufacturer: syz [ 401.527268][ T964] usb 2-1: SerialNumber: syz [ 401.544329][ T964] usb 2-1: config 0 descriptor?? [ 401.553524][ T964] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.634528][ T964] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 401.671545][ T6666] udevd[6666]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.756603][T10939] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 401.801519][T10939] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 401.837367][T10939] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 401.878613][T10939] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 402.088408][ T8] usb 2-1: USB disconnect, device number 53 [ 402.434798][T10939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.448058][T10939] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.528596][T10939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.539196][T10939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.601100][T10944] Bluetooth: hci0: command tx timeout [ 402.778723][ T6037] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.813674][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.820851][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.841751][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.848838][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.881861][T11047] chnl_net:caif_netlink_parms(): no params data found [ 402.911595][ T6037] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.992332][ T6037] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.044571][T10939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.165638][ T6037] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.192057][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.219446][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.240013][T11047] bridge_slave_0: entered allmulticast mode [ 403.250748][T11047] bridge_slave_0: entered promiscuous mode [ 403.261448][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.300015][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.322929][T11047] bridge_slave_1: entered allmulticast mode [ 403.337277][T11047] bridge_slave_1: entered promiscuous mode [ 403.431918][T11047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.506126][T11047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.560028][T10944] Bluetooth: hci2: command tx timeout [ 403.614887][T11047] team0: Port device team_slave_0 added [ 403.632269][ T6037] bridge_slave_1: left allmulticast mode [ 403.644947][ T6037] bridge_slave_1: left promiscuous mode [ 403.655872][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.728022][ T6037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.749428][ T6037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.775325][ T6037] bond0 (unregistering): Released all slaves [ 404.796314][T11047] team0: Port device team_slave_1 added [ 404.804881][T10939] veth0_vlan: entered promiscuous mode [ 405.326159][T11143] veth1: entered promiscuous mode [ 405.331416][T11143] macvtap1: entered promiscuous mode [ 405.337067][T11143] macvtap1: entered allmulticast mode [ 405.342609][T11143] veth1: entered allmulticast mode [ 405.349709][T11143] veth1: left allmulticast mode [ 405.354970][T11143] veth1: left promiscuous mode [ 405.401462][T11047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.408434][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.460009][T11047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.507058][T11047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.514135][ T29] audit: type=1400 audit(1730164697.033:902): avc: denied { read } for pid=11148 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.519984][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.559228][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.567211][T11047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.580899][T10939] veth1_vlan: entered promiscuous mode [ 405.640400][T10944] Bluetooth: hci2: command tx timeout [ 405.688246][T11047] hsr_slave_0: entered promiscuous mode [ 405.695723][T11047] hsr_slave_1: entered promiscuous mode [ 405.702042][T11047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.709606][T11047] Cannot create hsr debugfs directory [ 405.797040][ T6037] hsr_slave_0: left promiscuous mode [ 405.804621][ T6037] hsr_slave_1: left promiscuous mode [ 405.812755][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.821467][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.829081][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.836608][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.854496][ T6037] veth1_macvtap: left promiscuous mode [ 405.860808][ T6037] veth0_macvtap: left promiscuous mode [ 405.866336][ T6037] veth1_vlan: left promiscuous mode [ 405.874011][ T6037] veth0_vlan: left promiscuous mode [ 405.899904][ T5874] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 406.052045][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 406.069053][ T5874] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 406.078839][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.099104][ T5874] usb 6-1: config 0 descriptor?? [ 406.108611][ T5874] gspca_main: sq930x-2.14.0 probing 041e:403c [ 406.280039][ T5916] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 406.340392][ T6037] team0 (unregistering): Port device team_slave_1 removed [ 406.387736][ T6037] team0 (unregistering): Port device team_slave_0 removed [ 406.450812][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 406.479966][ T5916] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.496692][ T5916] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.508608][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 406.519688][ T5916] usb 7-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 406.534900][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.556361][ T5916] usb 7-1: config 0 descriptor?? [ 406.896014][T10939] veth0_macvtap: entered promiscuous mode [ 406.999489][T10939] veth1_macvtap: entered promiscuous mode [ 407.007151][ T5916] belkin 0003:1020:0006.0011: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.6-1/input0 [ 407.040050][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.057259][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.067723][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.078859][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.093904][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.104678][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.117213][ T5874] gspca_sq930x: ucbus_write failed -71 [ 407.124208][T10939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.126831][ T5874] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 407.148257][ T5874] usb 6-1: USB disconnect, device number 50 [ 407.201505][ T5920] usb 7-1: USB disconnect, device number 35 [ 407.287841][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.302830][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.315646][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.327263][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.337548][T10939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.348093][T10939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.367764][T10939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.381531][T10939] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.398088][T10939] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.407356][T10939] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.416458][T10939] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.582668][ T8059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.592183][ T8059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.622390][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.622848][ T5874] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 407.630916][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.654219][ T29] audit: type=1400 audit(1730164699.183:903): avc: denied { mounton } for pid=10939 comm="syz-executor" path="/root/syzkaller.HvrwGV/syz-tmp" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 407.703383][ T29] audit: type=1400 audit(1730164699.193:904): avc: denied { mounton } for pid=10939 comm="syz-executor" path="/root/syzkaller.HvrwGV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 407.730798][T10944] Bluetooth: hci2: command tx timeout [ 407.744535][ T29] audit: type=1400 audit(1730164699.193:905): avc: denied { mounton } for pid=10939 comm="syz-executor" path="/root/syzkaller.HvrwGV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 407.793246][ T29] audit: type=1400 audit(1730164699.223:906): avc: denied { mounton } for pid=10939 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 407.809582][T11047] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.848030][ T29] audit: type=1400 audit(1730164699.223:907): avc: denied { mounton } for pid=10939 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 407.870091][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 407.887538][ T5874] usb 2-1: config 0 has no interface number 0 [ 407.896147][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.903202][T11184] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.1345'. [ 407.907290][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.916995][T11184] netlink: 183228 bytes leftover after parsing attributes in process `syz.6.1345'. [ 407.926370][ T5874] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 407.941159][T11047] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.944905][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.007838][ T5874] usb 2-1: config 0 descriptor?? [ 408.143081][T11047] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.509950][T11047] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.577584][ T5874] usbhid 2-1:0.1: can't add hid device: -71 [ 409.585119][ T5874] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 409.595843][ T5874] usb 2-1: USB disconnect, device number 54 [ 410.421168][T11047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.435586][T11047] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.449380][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.456528][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.632314][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.639425][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.678714][T11047] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 410.689671][T11047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.199499][T11047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.273941][T11047] veth0_vlan: entered promiscuous mode [ 412.361088][T11047] veth1_vlan: entered promiscuous mode [ 412.436409][ T5869] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 412.448758][T11047] veth0_macvtap: entered promiscuous mode [ 412.457519][T11047] veth1_macvtap: entered promiscuous mode [ 412.654679][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 412.690848][ T29] audit: type=1400 audit(1730164704.133:908): avc: denied { bind } for pid=11247 comm="syz.9.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 412.863754][ T5869] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 413.595085][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.604625][ T5869] usb 2-1: config 0 descriptor?? [ 413.631019][ T5869] gspca_main: sq930x-2.14.0 probing 041e:403c [ 413.638363][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.649035][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.659098][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.669761][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.679686][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.690235][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.700226][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.710691][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.721921][T11047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.759080][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.769693][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.779566][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.790282][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.800196][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.810713][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.820594][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.831158][T10944] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 413.838262][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.849752][T11047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.859902][T11047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.868614][T11047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.877475][T11047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.886280][T11047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.027152][ T5958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.240156][ T5958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.598694][ T6037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.625837][ T6037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.636569][T11275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1380'. [ 414.651449][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1380'. [ 414.687390][T10944] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 414.699833][T10944] Bluetooth: hci0: Injecting HCI hardware error event [ 414.709303][ T5834] Bluetooth: hci0: hardware error 0x00 [ 415.498649][ T5869] gspca_sq930x: ucbus_write failed -71 [ 415.504243][ T5869] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 415.513469][ T5869] usb 2-1: USB disconnect, device number 55 [ 415.525302][T10944] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 415.566090][T11296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1387'. [ 415.932718][T11311] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1393'. [ 417.007159][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 417.020233][T11313] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1394'. [ 417.704115][T11325] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1400'. [ 417.704543][T11323] netlink: 16126 bytes leftover after parsing attributes in process `syz.9.1398'. [ 417.746199][T11323] netlink: 183228 bytes leftover after parsing attributes in process `syz.9.1398'. [ 417.779902][ T5920] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 417.881190][ T5834] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 417.899406][ T5834] Bluetooth: hci4: Injecting HCI hardware error event [ 417.910785][T10944] Bluetooth: hci4: hardware error 0x00 [ 418.845513][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.857023][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.867314][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.880161][ T5920] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 418.948973][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.959421][ T5920] usb 2-1: config 0 descriptor?? [ 419.125068][T11365] netlink: 16126 bytes leftover after parsing attributes in process `syz.9.1417'. [ 419.134740][T11365] netlink: 183228 bytes leftover after parsing attributes in process `syz.9.1417'. [ 419.385995][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 420.229925][T10944] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 420.479989][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 420.486338][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.511189][ T5920] usbhid 2-1:0.0: can't add hid device: -71 [ 420.517204][ T5920] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 420.556200][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.586939][ T5920] usb 2-1: USB disconnect, device number 56 [ 420.609758][ T5869] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 420.644324][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.680074][ T5869] usb 1-1: Product: syz [ 420.688097][ T5869] usb 1-1: Manufacturer: syz [ 420.692779][ T5869] usb 1-1: SerialNumber: syz [ 420.891355][ T5869] usb 1-1: config 0 descriptor?? [ 420.928342][ T5869] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 420.941152][T11403] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 420.958145][ T5869] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 421.163335][ T6666] udevd[6666]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.179897][ T5920] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 422.480732][ T8] usb 1-1: USB disconnect, device number 4 [ 422.716066][T11426] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1440'. [ 422.739919][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 423.066641][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 423.092777][ T5920] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 423.102063][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.110135][ T5920] usb 2-1: Product: syz [ 423.114385][ T5920] usb 2-1: Manufacturer: syz [ 423.119024][ T5920] usb 2-1: SerialNumber: syz [ 423.132806][ T5920] usb 2-1: config 0 descriptor?? [ 423.149376][ T5920] hub 2-1:0.0: bad descriptor, ignoring hub [ 423.155792][ T5920] hub 2-1:0.0: probe with driver hub failed with error -5 [ 423.165104][ T5920] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 423.320216][ T8] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 423.546970][T11441] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 424.081138][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.096432][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.106459][ T8] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.124568][ T8] usb 10-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 424.134083][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.190879][ T8] usb 10-1: config 0 descriptor?? [ 425.149861][ T5872] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 425.195963][ T8] gt683r_led 0003:1770:FF00.0012: item fetching failed at offset 1/5 [ 425.204966][ T8] gt683r_led 0003:1770:FF00.0012: hid parsing failed [ 425.212007][ T8] gt683r_led 0003:1770:FF00.0012: probe with driver gt683r_led failed with error -22 [ 425.362359][ T52] usb 2-1: USB disconnect, device number 57 [ 425.381664][ T5872] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.392210][ T5872] usb 7-1: config 0 has no interface number 0 [ 425.398309][ T5872] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.410916][ T5870] usb 10-1: USB disconnect, device number 2 [ 425.416696][ T5872] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.427067][ T5872] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 425.447530][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.459972][ T5872] usb 7-1: config 0 descriptor?? [ 425.718865][T11477] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 426.264117][ T5872] usbhid 7-1:0.1: can't add hid device: -71 [ 426.284810][ T5872] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 426.311491][ T5872] usb 7-1: USB disconnect, device number 36 [ 426.382821][T11488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1464'. [ 426.610141][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 426.629877][ T5870] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 426.799945][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 426.860543][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.958252][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.111443][ T5920] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 427.239133][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.250429][ T5920] usb 1-1: Product: syz [ 427.254669][ T5920] usb 1-1: Manufacturer: syz [ 427.259321][ T5920] usb 1-1: SerialNumber: syz [ 427.274725][ T5920] usb 1-1: config 0 descriptor?? [ 427.309910][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 427.340590][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 427.356055][ T5870] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 427.368492][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.382148][ T5870] usb 6-1: Product: syz [ 427.386371][ T5870] usb 6-1: Manufacturer: syz [ 427.394061][ T5870] usb 6-1: SerialNumber: syz [ 427.404331][ T5870] usb 6-1: config 0 descriptor?? [ 427.413069][ T5870] hub 6-1:0.0: bad descriptor, ignoring hub [ 427.419546][ T5870] hub 6-1:0.0: probe with driver hub failed with error -5 [ 427.434286][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.446733][ T5870] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input27 [ 427.457974][ T5920] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 427.484373][T11519] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 427.509346][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.786084][ T5920] usb 1-1: USB disconnect, device number 5 [ 428.982545][ T5870] usb 6-1: USB disconnect, device number 51 [ 429.007852][T11544] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1486'. [ 429.449985][ T5920] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 429.603611][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.625252][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.643197][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 429.665326][ T5920] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 429.674756][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.779058][ T5920] usb 7-1: config 0 descriptor?? [ 430.791474][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 431.069846][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 431.079242][ T5870] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.094675][ T5870] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.109941][ T5870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 431.286152][ T5870] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 431.291709][ T5920] gt683r_led 0003:1770:FF00.0013: item fetching failed at offset 1/5 [ 431.295300][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.313710][ T5870] usb 1-1: config 0 descriptor?? [ 431.331624][ T5920] gt683r_led 0003:1770:FF00.0013: hid parsing failed [ 431.415034][ T5920] gt683r_led 0003:1770:FF00.0013: probe with driver gt683r_led failed with error -22 [ 432.143919][ T5874] usb 7-1: USB disconnect, device number 37 [ 432.411578][ T5870] usbhid 1-1:0.0: can't add hid device: -71 [ 432.651172][ T5870] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 432.693337][ T5870] usb 1-1: USB disconnect, device number 6 [ 433.391435][T11588] syzkaller0: entered promiscuous mode [ 433.398216][T11588] syzkaller0: entered allmulticast mode [ 433.457532][T11595] overlayfs: failed to resolve './file0': -2 [ 434.851919][ T7939] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 435.560324][ T7939] usb 10-1: Using ep0 maxpacket: 32 [ 435.580943][ T7939] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 435.593135][ T7939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.616535][ T7939] usb 10-1: config 0 descriptor?? [ 435.633401][ T7939] gspca_main: sq930x-2.14.0 probing 041e:403c [ 436.689541][T11626] netlink: 16126 bytes leftover after parsing attributes in process `syz.6.1512'. [ 436.700417][T11626] netlink: 183228 bytes leftover after parsing attributes in process `syz.6.1512'. [ 436.761260][T11628] overlayfs: failed to resolve './file0': -2 [ 436.797846][ T7939] gspca_sq930x: ucbus_write failed -71 [ 436.809070][ T7939] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 436.841891][ T7939] usb 10-1: USB disconnect, device number 3 [ 439.219999][ T5872] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 440.221269][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.418890][T11665] overlayfs: failed to resolve './file0': -2 [ 440.776238][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1527'. [ 441.379904][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 441.387169][ T5872] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.410415][ T5872] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.430516][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.433761][T11674] syzkaller0: entered promiscuous mode [ 441.437130][ T5872] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 441.437155][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.470728][T11674] syzkaller0: entered allmulticast mode [ 441.473674][ T5872] usb 2-1: config 0 descriptor?? [ 441.932873][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 441.938944][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 441.956988][ T5872] usb 2-1: USB disconnect, device number 58 [ 443.566100][T11710] overlayfs: failed to resolve './file1': -2 [ 445.200004][ T8] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 445.369958][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 445.378868][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.398885][ T8] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 445.408832][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.420604][ T8] usb 2-1: Product: syz [ 445.424821][ T8] usb 2-1: Manufacturer: syz [ 445.429426][ T8] usb 2-1: SerialNumber: syz [ 445.437912][ T8] usb 2-1: config 0 descriptor?? [ 445.448674][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 445.470731][ T8] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 445.494931][ T6666] udevd[6666]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.599895][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 445.920058][ T8] usb 2-1: USB disconnect, device number 59 [ 447.238869][T11757] overlayfs: failed to resolve './file1': -2 [ 447.661422][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1555'. [ 450.171755][T11798] overlayfs: failed to resolve './file1': -2 [ 451.432820][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1568'. [ 452.457337][T11843] overlayfs: failed to resolve './file1': -2 [ 452.530437][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 453.197972][T11851] netlink: 16126 bytes leftover after parsing attributes in process `syz.5.1575'. [ 453.212572][T11851] netlink: 183228 bytes leftover after parsing attributes in process `syz.5.1575'. [ 453.480030][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 453.486277][ T8] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 453.495382][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.504881][ T8] usb 1-1: config 0 descriptor?? [ 453.512890][ T8] gspca_main: sq930x-2.14.0 probing 041e:403c [ 454.139987][ T5872] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 454.214302][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1584'. [ 454.720283][T11879] overlayfs: failed to resolve './file1': -2 [ 455.300496][ T8] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 455.314281][ T8] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 455.486917][ T8] usb 1-1: USB disconnect, device number 7 [ 455.907570][ T5872] usb 10-1: unable to get BOS descriptor or descriptor too short [ 455.917166][ T5872] usb 10-1: config 174 has an invalid interface number: 178 but max is 0 [ 455.927207][ T5872] usb 10-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 455.939035][ T5872] usb 10-1: config 174 has no interface number 0 [ 455.953928][ T5872] usb 10-1: config 174 interface 178 has no altsetting 0 [ 455.966234][ T5872] usb 10-1: string descriptor 0 read error: -22 [ 455.973099][ T5872] usb 10-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 455.983672][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.031530][ T5872] usb 10-1: bad CDC descriptors [ 456.038420][ T5872] usb 10-1: unsupported MDLM descriptors [ 456.748702][ T5920] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 456.770710][ T5874] usb 10-1: USB disconnect, device number 4 [ 457.072551][T11918] overlayfs: failed to resolve './file1': -2 [ 457.270745][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1599'. [ 457.360062][ T7939] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 457.520813][ T7939] usb 6-1: Using ep0 maxpacket: 32 [ 457.675251][ T7939] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 457.803925][ T7939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.833956][ T7939] usb 6-1: config 0 descriptor?? [ 457.839887][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 457.847203][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.849654][ T7939] gspca_main: sq930x-2.14.0 probing 041e:403c [ 457.872021][ T5920] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 457.889296][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.905363][ T5920] usb 2-1: Product: syz [ 457.909749][ T5920] usb 2-1: Manufacturer: syz [ 457.914464][ T5920] usb 2-1: SerialNumber: syz [ 457.926201][ T5920] usb 2-1: config 0 descriptor?? [ 457.934644][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.926894][ T5920] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 459.029896][ T5870] usb 2-1: USB disconnect, device number 60 [ 459.108393][T11819] udevd[11819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.215995][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1606'. [ 459.268971][T11947] overlayfs: failed to resolve './file0': -2 [ 460.281023][ T7939] gspca_sq930x: ucbus_write failed -71 [ 460.286584][ T7939] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 460.306397][ T7939] usb 6-1: USB disconnect, device number 52 [ 461.740028][ T5920] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 462.186780][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 463.704631][T11985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 464.015054][T11993] overlayfs: failed to resolve './file0': -2 [ 464.036690][T11989] overlayfs: missing 'lowerdir' [ 464.077133][T11996] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1621'. [ 464.169459][T12000] overlayfs: failed to resolve './file1': -2 [ 465.109436][ T5920] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 465.225546][ T5920] usb 7-1: can't read configurations, error -71 [ 465.419947][ T52] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 466.601395][ T52] usb 1-1: device descriptor read/64, error -71 [ 466.660027][ T7939] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 468.913259][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1630'. [ 469.369229][ T7939] usb 6-1: Using ep0 maxpacket: 32 [ 469.525788][ T7939] usb 6-1: device descriptor read/all, error -71 [ 469.551133][T12039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1635'. [ 469.601437][T12037] overlayfs: failed to resolve './file0': -2 [ 469.638952][T12045] overlayfs: failed to resolve './file1': -2 [ 473.074559][T12078] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1647'. [ 473.139897][ T7939] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 473.269898][ T5870] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 473.484262][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'. [ 473.494730][ T7939] usb 6-1: device descriptor read/64, error -71 [ 474.014380][ T964] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 474.198722][ T7939] usb usb6-port1: attempt power cycle [ 474.269880][ T964] usb 7-1: Using ep0 maxpacket: 32 [ 474.300661][ T964] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 474.794091][ T964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.955702][ T964] usb 7-1: config 0 descriptor?? [ 475.029084][ T964] gspca_main: sq930x-2.14.0 probing 041e:403c [ 475.271392][ T964] gspca_sq930x: reg_r 001f failed -32 [ 475.342230][ T964] sq930x 7-1:0.0: probe with driver sq930x failed with error -32 [ 475.398939][T12113] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 475.407879][T12113] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 475.489236][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1659'. [ 476.861468][ T7939] usb 7-1: USB disconnect, device number 40 [ 477.356371][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1662'. [ 478.109671][ T5870] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 478.375941][ T5870] usb 6-1: device descriptor read/64, error -71 [ 478.978021][T12153] batadv_slave_0: entered promiscuous mode [ 479.392121][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1671'. [ 479.681013][T12146] batadv_slave_0: left promiscuous mode [ 480.120680][ T5870] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 480.588529][T12174] netlink: set zone limit has 4 unknown bytes [ 480.935955][ T5872] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 481.081151][T12184] loop0: detected capacity change from 0 to 127 [ 481.110672][ T5872] usb 10-1: Using ep0 maxpacket: 32 [ 481.123193][ T5872] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 481.175238][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.216893][ T5872] usb 10-1: config 0 descriptor?? [ 481.222281][ T964] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 481.797742][ T5872] gspca_main: sq930x-2.14.0 probing 041e:403c [ 482.011377][ T5872] gspca_sq930x: reg_r 001f failed -32 [ 482.016834][ T5872] sq930x 10-1:0.0: probe with driver sq930x failed with error -32 [ 482.025067][ T964] usb 7-1: Using ep0 maxpacket: 16 [ 482.034983][ T964] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 482.044757][ T964] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 482.053299][ T964] usb 7-1: Product: syz [ 482.057735][ T964] usb 7-1: Manufacturer: syz [ 482.063961][ T964] usb 7-1: SerialNumber: syz [ 482.073614][ T964] usb 7-1: config 0 descriptor?? [ 482.250026][ T7939] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 482.409851][ T7939] usb 1-1: Using ep0 maxpacket: 16 [ 482.418010][ T7939] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.433486][ T7939] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.459857][ T7939] usb 1-1: config 0 interface 0 has no altsetting 0 [ 482.469955][ T7939] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 482.499339][ T7939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.518836][ T7939] usb 1-1: config 0 descriptor?? [ 482.936791][ T7939] usbhid 1-1:0.0: can't add hid device: -71 [ 482.954195][ T7939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 482.971456][ T7939] usb 1-1: USB disconnect, device number 11 [ 483.127354][ T8] usb 10-1: USB disconnect, device number 5 [ 483.330469][ T964] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 483.470114][ T964] usb 6-1: device descriptor read/64, error -71 [ 483.731537][ T964] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 483.919993][ T964] usb 6-1: device descriptor read/64, error -71 [ 484.014911][ T8] usb 7-1: USB disconnect, device number 41 [ 484.099947][ T964] usb usb6-port1: attempt power cycle [ 484.470831][ T964] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 484.510726][ T964] usb 6-1: device descriptor read/8, error -71 [ 484.523108][T12239] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 484.790009][ T964] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 484.835357][ T964] usb 6-1: device descriptor read/8, error -71 [ 484.960497][ T964] usb usb6-port1: unable to enumerate USB device [ 485.665632][T12261] batadv_slave_0: entered promiscuous mode [ 485.770382][T12263] overlayfs: missing 'lowerdir' [ 485.945868][T12268] netlink: 191416 bytes leftover after parsing attributes in process `syz.6.1710'. [ 485.958958][T12268] netlink: zone id is out of range [ 486.113795][T12256] batadv_slave_0: left promiscuous mode [ 486.934111][ T8] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 487.065031][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'. [ 487.591647][T12296] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 487.690310][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 487.699103][ T8] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 487.855680][ T8] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 487.864967][ T8] usb 10-1: Product: syz [ 487.872501][ T8] usb 10-1: Manufacturer: syz [ 487.877224][ T8] usb 10-1: SerialNumber: syz [ 487.883944][ T8] usb 10-1: config 0 descriptor?? [ 487.982007][T12302] overlayfs: missing 'workdir' [ 488.232402][T12309] syzkaller0: entered promiscuous mode [ 488.244322][T12309] syzkaller0: entered allmulticast mode [ 488.485010][ T52] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 488.679871][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 488.713977][ T52] usb 2-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 488.784208][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.815402][ T52] usb 2-1: Product: syz [ 488.822420][ T52] usb 2-1: Manufacturer: syz [ 488.827154][ T52] usb 2-1: SerialNumber: syz [ 488.845010][ T52] usb 2-1: config 0 descriptor?? [ 489.187578][ T964] usb 10-1: USB disconnect, device number 6 [ 489.458752][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1731'. [ 489.638852][T12325] netlink: set zone limit has 4 unknown bytes [ 489.683481][ T52] usb 2-1: reset high-speed USB device number 61 using dummy_hcd [ 491.685935][ T52] usb 2-1: USB disconnect, device number 61 [ 491.726936][T12349] overlayfs: missing 'workdir' [ 494.193553][ T52] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 494.503278][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 494.512329][ T52] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 494.521650][ T52] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 494.533023][ T52] usb 1-1: Product: syz [ 494.537458][ T52] usb 1-1: Manufacturer: syz [ 494.547676][ T52] usb 1-1: SerialNumber: syz [ 494.570200][ T52] usb 1-1: config 0 descriptor?? [ 494.572366][T12370] loop0: detected capacity change from 0 to 127 [ 495.469169][T12381] netlink: set zone limit has 4 unknown bytes [ 495.484403][ T964] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 495.643145][ T964] usb 7-1: Using ep0 maxpacket: 32 [ 495.655880][ T964] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.690151][ T964] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.725824][ T964] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 495.737525][ T964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.229123][ T964] usb 7-1: Product: syz [ 496.250063][ T964] usb 7-1: Manufacturer: syz [ 496.254695][ T964] usb 7-1: SerialNumber: syz [ 496.307509][ T964] usb 7-1: config 0 descriptor?? [ 496.312711][ T5872] usb 1-1: USB disconnect, device number 12 [ 496.421406][T12389] overlayfs: failed to resolve './file0': -2 [ 497.990524][ T8] usb 7-1: USB disconnect, device number 42 [ 498.315785][T10944] block nbd0: Wrong magic (0x14000000) [ 498.375327][T12398] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1753'. [ 498.396282][T12408] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1756'. [ 498.559913][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 498.679860][ T5872] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 498.850486][T12420] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1759'. [ 498.935250][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 499.007888][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 499.028983][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 499.043095][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 499.054102][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 499.123085][ T8] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 499.133492][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.142796][ T8] usb 1-1: Product: syz [ 499.147037][ T8] usb 1-1: Manufacturer: syz [ 499.151734][ T8] usb 1-1: SerialNumber: syz [ 499.458091][ T8] usb 1-1: config 0 descriptor?? [ 499.463884][ T5872] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.475036][ T5872] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.485103][ T5872] usb 6-1: config 0 interface 0 has no altsetting 0 [ 499.491789][ T5872] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 499.500904][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.513285][ T5872] usb 6-1: config 0 descriptor?? [ 499.831778][ T8] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 499.834375][T12407] block nbd0: shutting down sockets [ 499.839592][ T8] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 500.578999][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 500.605654][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 500.636718][ T5872] usbhid 6-1:0.0: can't add hid device: -71 [ 500.642852][ T5872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 500.664822][ T8] usb 1-1: USB disconnect, device number 13 [ 500.721729][ T5872] usb 6-1: USB disconnect, device number 62 [ 500.949899][ T5920] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 501.119948][ T5920] usb 10-1: Using ep0 maxpacket: 16 [ 501.145459][ T5920] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 501.159711][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.241663][ T5920] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 501.376036][ T5920] usb 10-1: Product: syz [ 501.448272][ T5920] usb 10-1: Manufacturer: syz [ 501.499027][ T5920] usb 10-1: SerialNumber: syz [ 501.528383][ T5920] usb 10-1: config 0 descriptor?? [ 501.539137][T12444] netlink: set zone limit has 4 unknown bytes [ 501.684331][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1768'. [ 502.395509][T12450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1768'. [ 502.521569][ T5870] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 503.621523][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 503.626446][T12465] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1771'. [ 503.627946][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.646742][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 504.144794][ T52] usb 10-1: USB disconnect, device number 7 [ 504.299890][ T5870] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 504.309179][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.317594][ T5870] usb 1-1: Product: syz [ 504.322107][ T5870] usb 1-1: Manufacturer: syz [ 504.327055][ T5870] usb 1-1: SerialNumber: syz [ 504.350683][ T5870] usb 1-1: config 0 descriptor?? [ 504.369937][ T5870] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 504.388880][ T5870] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 504.478012][T11819] udevd[11819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.484155][T12476] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 504.515280][ T7939] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 505.605892][ T29] audit: type=1400 audit(1730164796.913:909): avc: denied { shutdown } for pid=12472 comm="syz.6.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 505.639679][ T5872] usb 1-1: USB disconnect, device number 14 [ 505.664973][ T7939] usb 6-1: unable to get BOS descriptor or descriptor too short [ 505.673574][ T7939] usb 6-1: config 174 has an invalid interface number: 178 but max is 0 [ 505.697590][ T7939] usb 6-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 505.708082][ T7939] usb 6-1: config 174 has no interface number 0 [ 505.714501][ T7939] usb 6-1: config 174 interface 178 has no altsetting 0 [ 505.724597][ T7939] usb 6-1: string descriptor 0 read error: -22 [ 505.730153][T12490] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1780'. [ 505.733972][ T7939] usb 6-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 505.747571][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1778'. [ 505.749054][ T7939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.770427][ T7939] usb 6-1: bad CDC descriptors [ 505.779660][T12490] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.1780'. [ 505.781742][ T7939] usb 6-1: unsupported MDLM descriptors [ 507.450964][T12503] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 507.756486][ T5872] usb 6-1: USB disconnect, device number 63 [ 508.237024][ T5870] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 509.759832][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 509.765665][ T5870] usb 7-1: device descriptor read/all, error -71 [ 511.419978][T12531] netlink: 'syz.1.1788': attribute type 10 has an invalid length. [ 512.449421][T12531] bond0: (slave bond_slave_0): Releasing backup interface [ 512.457060][T12531] bond_slave_0: left promiscuous mode [ 513.667195][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1797'. [ 515.699885][ T5872] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 516.022410][ T5870] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 516.811213][ T5870] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.839901][ T5870] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.858184][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 516.864936][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 516.873190][ T5870] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.879495][ T5872] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 516.900566][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.909028][ T5872] usb 2-1: Product: syz [ 516.913265][ T5872] usb 2-1: Manufacturer: syz [ 516.917865][ T5872] usb 2-1: SerialNumber: syz [ 516.924526][ T5872] usb 2-1: config 0 descriptor?? [ 517.004875][ T5872] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.044918][ T5872] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 517.084469][ T5870] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 517.093722][ T5870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.378028][ T5870] usb 10-1: config 0 descriptor?? [ 517.959499][T11819] udevd[11819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.355305][ T5870] usb 10-1: can't set config #0, error -71 [ 518.362991][ T5870] usb 10-1: USB disconnect, device number 8 [ 518.396040][ T7939] usb 2-1: USB disconnect, device number 62 [ 521.805684][ T7939] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 523.360558][ T7939] usb 2-1: device descriptor read/all, error -71 [ 523.398202][T12643] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1821'. [ 523.407629][T12643] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1821'. [ 523.799878][ T52] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 523.886023][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 523.949905][ T52] usb 6-1: Using ep0 maxpacket: 16 [ 523.961778][ T52] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 523.987525][ T52] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 524.000047][ T52] usb 6-1: Product: syz [ 524.004226][ T52] usb 6-1: Manufacturer: syz [ 524.031087][ T52] usb 6-1: SerialNumber: syz [ 524.233132][ T52] usb 6-1: config 0 descriptor?? [ 524.400140][ T5874] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 524.583938][ T5874] usb 7-1: Using ep0 maxpacket: 32 [ 524.611104][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.126591][ T5874] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 525.220243][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.230717][ T5874] usb 7-1: Product: syz [ 525.235193][ T5874] usb 7-1: Manufacturer: syz [ 525.240125][ T5874] usb 7-1: SerialNumber: syz [ 525.293502][T12663] overlayfs: missing 'lowerdir' [ 525.324317][ T5874] usb 7-1: config 0 descriptor?? [ 525.333585][ T5874] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.358402][ T5874] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 525.414980][T11819] udevd[11819]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 526.079667][ T52] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 526.128897][ T8] usb 7-1: USB disconnect, device number 45 [ 526.149921][ T5874] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 526.234378][ T5872] usb 6-1: USB disconnect, device number 64 [ 526.279901][ T52] usb 10-1: Using ep0 maxpacket: 16 [ 526.287402][ T52] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 526.301226][ T52] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 526.310561][ T52] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.318700][ T52] usb 10-1: Product: syz [ 526.323632][ T52] usb 10-1: Manufacturer: syz [ 526.328348][ T52] usb 10-1: SerialNumber: syz [ 526.356916][ T52] usb 10-1: config 0 descriptor?? [ 526.376338][ T5874] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 526.385451][ T5874] usb 2-1: config 0 has no interface number 0 [ 526.421003][ T52] hub 10-1:0.0: bad descriptor, ignoring hub [ 526.431787][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.446580][ T52] hub 10-1:0.0: probe with driver hub failed with error -5 [ 526.454371][ T5874] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.468707][ T52] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input29 [ 526.486046][ T5874] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 526.504909][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.218350][ T5874] usb 2-1: config 0 descriptor?? [ 527.230564][ T52] usb 10-1: USB disconnect, device number 9 [ 527.646436][ T29] audit: type=1400 audit(1730164819.183:910): avc: denied { map } for pid=12688 comm="syz.5.1836" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 528.282156][ T5874] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0014/input/input30 [ 528.514492][ T5874] holtek_kbd 0003:04D9:A055.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 528.532439][ T5874] usb 2-1: USB disconnect, device number 65 [ 528.730202][ T29] audit: type=1400 audit(1730164820.263:911): avc: denied { bind } for pid=12688 comm="syz.5.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 529.072413][T12708] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 533.485191][T12751] batadv_slave_0: entered promiscuous mode [ 533.861886][T12742] batadv_slave_0: left promiscuous mode [ 535.787719][T12759] overlayfs: failed to resolve './file1': -2 [ 539.241545][ T8] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 539.391243][ T8] usb 10-1: device descriptor read/64, error -71 [ 539.566307][T12811] loop0: detected capacity change from 0 to 127 [ 539.665501][ T8] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 539.799996][ T8] usb 10-1: device descriptor read/64, error -71 [ 539.910855][ T8] usb usb10-port1: attempt power cycle [ 540.369952][ T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 540.403472][ T8] usb 10-1: device descriptor read/8, error -71 [ 540.660301][ T8] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 540.680346][ T8] usb 10-1: device descriptor read/8, error -71 [ 540.945167][ T8] usb usb10-port1: unable to enumerate USB device [ 542.267508][T12842] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1879'. [ 542.326581][T12842] netlink: zone id is out of range [ 542.595115][ T8] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 543.450383][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 543.466578][ T8] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.523542][ T8] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.543610][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 543.560053][ T8] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 543.579819][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.600930][ T964] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 543.640570][ T8] usb 6-1: config 0 descriptor?? [ 543.826543][ T964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.849865][ T964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.879840][ T964] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.929261][ T964] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 543.947581][ T964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.959003][ T964] usb 7-1: config 0 descriptor?? [ 544.118780][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 544.125037][ T8] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 544.141424][ T8] usb 6-1: USB disconnect, device number 65 [ 544.424704][ T964] gt683r_led 0003:1770:FF00.0015: item fetching failed at offset 1/5 [ 544.443559][ T964] gt683r_led 0003:1770:FF00.0015: hid parsing failed [ 544.474386][ T964] gt683r_led 0003:1770:FF00.0015: probe with driver gt683r_led failed with error -22 [ 544.570193][T12871] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 544.806096][ T964] usb 7-1: USB disconnect, device number 46 [ 546.180075][ T964] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 546.320149][ T964] usb 1-1: device descriptor read/64, error -71 [ 547.458547][ T964] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 547.812487][ T964] usb 1-1: device descriptor read/64, error -71 [ 547.903545][T12907] netlink: 191416 bytes leftover after parsing attributes in process `syz.6.1900'. [ 548.018719][T12907] netlink: zone id is out of range [ 548.459962][ T964] usb usb1-port1: attempt power cycle [ 548.594835][T12916] netlink: set zone limit has 4 unknown bytes [ 548.605703][ T5872] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 548.736304][T12921] overlayfs: missing 'lowerdir' [ 548.774448][T12923] batadv_slave_0: entered promiscuous mode [ 549.009967][ T5872] usb 10-1: Using ep0 maxpacket: 32 [ 549.018385][ T5872] usb 10-1: config 0 has an invalid interface number: 48 but max is 0 [ 549.027950][ T5872] usb 10-1: config 0 has no interface number 0 [ 549.034488][ T5872] usb 10-1: too many endpoints for config 0 interface 48 altsetting 48: 50, using maximum allowed: 30 [ 549.045802][ T5872] usb 10-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 549.155984][ T5872] usb 10-1: config 0 interface 48 has no altsetting 0 [ 549.312033][ T5872] usb 10-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 549.322293][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.367149][ T5872] usb 10-1: Product: syz [ 549.392795][ T5872] usb 10-1: Manufacturer: syz [ 549.397645][ T5872] usb 10-1: SerialNumber: syz [ 549.544597][ T5872] usb 10-1: config 0 descriptor?? [ 549.551014][T12913] batadv_slave_0: left promiscuous mode [ 551.329819][ T5870] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 551.530179][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 551.537044][ T5870] usb 6-1: no configurations [ 551.544801][ T5870] usb 6-1: can't read configurations, error -22 [ 551.761562][ T5870] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 551.959971][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 552.025987][ T5870] usb 6-1: no configurations [ 552.039839][ T5870] usb 6-1: can't read configurations, error -22 [ 552.059882][ T5872] usb 10-1: reset high-speed USB device number 14 using dummy_hcd [ 552.063028][ T5870] usb usb6-port1: attempt power cycle [ 553.160351][ T5870] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 554.323755][ T5872] usb 10-1: USB disconnect, device number 14 [ 555.058092][ T5870] usb 6-1: device descriptor read/8, error -71 [ 555.935393][ T5872] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 556.202919][T12996] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 557.544541][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.613357][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.653330][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.688486][T13008] overlayfs: missing 'lowerdir' [ 557.693513][ T5872] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 557.715200][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.752824][ T5872] usb 7-1: config 0 descriptor?? [ 558.589716][T13017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1934'. [ 558.690175][T13018] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 558.817393][ T5872] usbhid 7-1:0.0: can't add hid device: -71 [ 558.823449][ T5872] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 558.833431][ T5872] usb 7-1: USB disconnect, device number 47 [ 561.928276][T13048] netlink: zone id is out of range [ 561.940340][T13048] netlink: set zone limit has 4 unknown bytes [ 561.976947][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1943'. [ 561.986224][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1943'. [ 562.041489][ T5872] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 562.215866][T13055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1947'. [ 563.498605][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.702513][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1958'. [ 568.320832][T13104] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1959'. [ 568.658819][T13097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1958'. [ 569.019849][T13122] batadv_slave_0: entered promiscuous mode [ 569.657476][T12928] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 569.733194][T13112] batadv_slave_0: left promiscuous mode [ 570.059928][T12928] usb 6-1: Using ep0 maxpacket: 32 [ 570.066474][T12928] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 570.075013][T12928] usb 6-1: config 0 has no interface number 0 [ 570.081784][T12928] usb 6-1: too many endpoints for config 0 interface 48 altsetting 48: 50, using maximum allowed: 30 [ 571.046643][ T7939] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 571.050224][T12928] usb 6-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 571.067494][T12928] usb 6-1: config 0 interface 48 has no altsetting 0 [ 571.075936][T12928] usb 6-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 571.085180][T12928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.093709][T12928] usb 6-1: Product: syz [ 572.048007][T12928] usb 6-1: Manufacturer: syz [ 572.052815][T12928] usb 6-1: SerialNumber: syz [ 572.085375][T12928] usb 6-1: config 0 descriptor?? [ 572.728699][T12928] usb 6-1: can't set config #0, error -71 [ 572.919835][ T7939] usb 1-1: Using ep0 maxpacket: 16 [ 572.925690][T12928] usb 6-1: USB disconnect, device number 70 [ 572.932445][ T7939] usb 1-1: device descriptor read/all, error -71 [ 572.982051][ T5870] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 573.114348][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1971'. [ 573.123767][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1971'. [ 573.364109][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 573.676303][T13155] [ 573.678660][T13155] ====================================================== [ 573.685756][T13155] WARNING: possible circular locking dependency detected [ 573.692762][T13155] 6.12.0-rc5-syzkaller #0 Not tainted [ 573.698118][T13155] ------------------------------------------------------ [ 573.705122][T13155] syz.6.1972/13155 is trying to acquire lock: [ 573.711176][T13155] ffff888035ed82c8 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x39c/0x2370 [ 573.721886][T13155] [ 573.721886][T13155] but task is already holding lock: [ 573.729235][T13155] ffff88801cb1ba98 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 573.739243][T13155] [ 573.739243][T13155] which lock already depends on the new lock. [ 573.739243][T13155] [ 573.749639][T13155] [ 573.749639][T13155] the existing dependency chain (in reverse order) is: [ 573.758642][T13155] [ 573.758642][T13155] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 573.766195][T13155] down_read_killable+0x9d/0x380 [ 573.771654][T13155] lock_mm_and_find_vma+0x3a9/0x6a0 [ 573.777370][T13155] do_user_addr_fault+0x2b5/0x13f0 [ 573.783010][T13155] exc_page_fault+0x5c/0xc0 [ 573.788038][T13155] asm_exc_page_fault+0x26/0x30 [ 573.793414][T13155] fault_in_readable+0xee/0x200 [ 573.798781][T13155] fault_in_iov_iter_readable+0x101/0x2c0 [ 573.805018][T13155] generic_perform_write+0x21b/0x920 [ 573.810819][T13155] shmem_file_write_iter+0x10e/0x140 [ 573.816634][T13155] do_iter_readv_writev+0x532/0x7f0 [ 573.822370][T13155] vfs_iter_write+0x1df/0x9c0 [ 573.827580][T13155] backing_file_write_iter+0x5ae/0x900 [ 573.833563][T13155] ovl_write_iter+0x377/0x460 [ 573.838795][T13155] vfs_write+0x5ae/0x1150 [ 573.843646][T13155] ksys_write+0x12f/0x260 [ 573.848498][T13155] do_syscall_64+0xcd/0x250 [ 573.853525][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.859939][T13155] [ 573.859939][T13155] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 573.868635][T13155] __lock_acquire+0x250b/0x3ce0 [ 573.874000][T13155] lock_acquire.part.0+0x11b/0x380 [ 573.879627][T13155] down_write+0x93/0x200 [ 573.884386][T13155] process_measurement+0x39c/0x2370 [ 573.890105][T13155] ima_file_mmap+0x146/0x1d0 [ 573.895210][T13155] security_mmap_file+0x8bd/0x990 [ 573.900754][T13155] __do_sys_remap_file_pages+0x526/0x900 [ 573.906904][T13155] do_syscall_64+0xcd/0x250 [ 573.911930][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.918344][T13155] [ 573.918344][T13155] other info that might help us debug this: [ 573.918344][T13155] [ 573.928563][T13155] Possible unsafe locking scenario: [ 573.928563][T13155] [ 573.936084][T13155] CPU0 CPU1 [ 573.941445][T13155] ---- ---- [ 573.946797][T13155] lock(&mm->mmap_lock); [ 573.951121][T13155] lock(&sb->s_type->i_mutex_key#12); [ 573.959102][T13155] lock(&mm->mmap_lock); [ 573.966030][T13155] lock(&sb->s_type->i_mutex_key#12); [ 573.971490][T13155] [ 573.971490][T13155] *** DEADLOCK *** [ 573.971490][T13155] [ 573.979624][T13155] 1 lock held by syz.6.1972/13155: [ 573.984726][T13155] #0: ffff88801cb1ba98 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 573.995181][T13155] [ 573.995181][T13155] stack backtrace: [ 574.001058][T13155] CPU: 1 UID: 0 PID: 13155 Comm: syz.6.1972 Not tainted 6.12.0-rc5-syzkaller #0 [ 574.010162][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 574.020209][T13155] Call Trace: [ 574.023480][T13155] [ 574.026404][T13155] dump_stack_lvl+0x116/0x1f0 [ 574.031091][T13155] print_circular_bug+0x41c/0x610 [ 574.036124][T13155] check_noncircular+0x31a/0x400 [ 574.041065][T13155] ? __pfx_check_noncircular+0x10/0x10 [ 574.046526][T13155] ? finish_task_switch.isra.0+0x212/0xcc0 [ 574.052329][T13155] ? __pfx_lock_release+0x10/0x10 [ 574.057363][T13155] ? lockdep_lock+0xc6/0x200 [ 574.061953][T13155] ? __pfx_lockdep_lock+0x10/0x10 [ 574.066994][T13155] __lock_acquire+0x250b/0x3ce0 [ 574.071858][T13155] ? __pfx___lock_acquire+0x10/0x10 [ 574.077064][T13155] ? __pfx_mark_lock+0x10/0x10 [ 574.081829][T13155] lock_acquire.part.0+0x11b/0x380 [ 574.086939][T13155] ? process_measurement+0x39c/0x2370 [ 574.092315][T13155] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 574.097947][T13155] ? rcu_is_watching+0x12/0xc0 [ 574.100005][ T29] audit: type=1326 audit(1730164865.183:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13149 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9eb7e719 code=0x7ffc0000 [ 574.102698][T13155] ? trace_lock_acquire+0x14a/0x1d0 [ 574.126015][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.131173][T13155] ? process_measurement+0x39c/0x2370 [ 574.137223][ T29] audit: type=1326 audit(1730164865.183:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13149 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9eb7e719 code=0x7ffc0000 [ 574.142452][T13155] ? lock_acquire+0x2f/0xb0 [ 574.142472][T13155] ? process_measurement+0x39c/0x2370 [ 574.175656][T13155] down_write+0x93/0x200 [ 574.179895][T13155] ? process_measurement+0x39c/0x2370 [ 574.185260][T13155] ? __pfx_down_write+0x10/0x10 [ 574.190107][T13155] ? process_measurement+0x388/0x2370 [ 574.195476][T13155] process_measurement+0x39c/0x2370 [ 574.200673][T13155] ? __pfx_mark_lock+0x10/0x10 [ 574.205427][T13155] ? __pfx_process_measurement+0x10/0x10 [ 574.211056][T13155] ? __pfx___schedule+0x10/0x10 [ 574.215902][T13155] ? trace_lock_acquire+0x14a/0x1d0 [ 574.221108][T13155] ? file_map_prot_check+0x1eb/0x360 [ 574.226393][T13155] ima_file_mmap+0x146/0x1d0 [ 574.230975][T13155] ? __pfx_ima_file_mmap+0x10/0x10 [ 574.236080][T13155] security_mmap_file+0x8bd/0x990 [ 574.241100][T13155] __do_sys_remap_file_pages+0x526/0x900 [ 574.246730][T13155] ? __seccomp_filter+0x6a2/0xf40 [ 574.251751][T13155] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 574.257904][T13155] ? xfd_validate_state+0x5d/0x180 [ 574.263008][T13155] ? __secure_computing+0x273/0x3f0 [ 574.268203][T13155] do_syscall_64+0xcd/0x250 [ 574.272710][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.278603][T13155] RIP: 0033:0x7fca9eb7e719 [ 574.283009][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.302620][T13155] RSP: 002b:00007fca9e5ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 574.311028][T13155] RAX: ffffffffffffffda RBX: 00007fca9ed362e0 RCX: 00007fca9eb7e719 [ 574.318990][T13155] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 00000000209c2000 [ 574.326957][T13155] RBP: 00007fca9ebf132e R08: 0000000000020000 R09: 0000000000000000 [ 574.334919][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.342880][T13155] R13: 0000000000000000 R14: 00007fca9ed362e0 R15: 00007fffba1dda48 [ 574.350847][T13155] [ 574.383929][ T5870] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 574.425215][ T29] audit: type=1326 audit(1730164865.213:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13149 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fca9eb7e719 code=0x7ffc0000 [ 574.543908][ T29] audit: type=1326 audit(1730164865.903:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13149 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9eb7e719 code=0x7ffc0000 [ 574.567333][ T5870] usb 2-1: can't read configurations, error -71 [ 574.574058][ T29] audit: type=1326 audit(1730164865.903:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13149 comm="syz.6.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca9eb7e719 code=0x7ffc0000