last executing test programs: 2m37.33115743s ago: executing program 0 (id=4258): openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000001300)=ANY=[@ANYRESDEC], 0x8, 0x0) msgsnd(r0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200"], 0x401, 0x0) msgsnd(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x3800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x1, 0x3}, 0x6) request_key(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/179}, 0xbb, 0x3, 0x1000) 2m36.383768462s ago: executing program 0 (id=4261): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18e400000000000000f7ffffffffffff840000002a0000009500000000200000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0xea) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000034700)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r9, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000b"], 0x60}}, 0x40000) r10 = socket(0x10, 0x3, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de000000002000128008000100767469001400028008000100", @ANYRES32=r12, @ANYBLOB="080005000a010701"], 0x40}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="20030000", @ANYRES16=r6, @ANYBLOB="00012abd7000fddbdf251800000060000180080003000300000008000300020000001400020070696d72656731000000000000000000080003000fc3993308000300010000001400020076657468305f746f5f6873720000000014000200767863616e31000200000000000000000c00018008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x320}, 0x1, 0x0, 0x0, 0x80000}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 2m35.920433283s ago: executing program 0 (id=4264): ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x4d00}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001480)={&(0x7f0000000140)={0x1318, 0x0, 0x810, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x59}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0xd2, 0xc5, "da6832af223ea6be8bc5e8675619e1c1e556c0b68b3e0a7b1ae51f43de9efb90c99b60f4065201d6f312ba3449fcbbdbcfc2d77514b62fcafda751083a8e9477198068a6644a543b677a3573bb4f881aedcbdf1d52fe3c7f145e40cadcb6be7c4b5df81e994876894b239b31890244d052932b5c780de767572df7e1ec627342798eab08c953634d57943ccb173640fab495241d7a9bbc8110fcb83ec547ecf30bb3c5c41819fb0abbd20cebd2097d7a93e6d7ff90b52940376c038bffefa3622d59d6fc1c5f47ef05d942ed835a"}, @NL80211_ATTR_VENDOR_DATA={0x3a, 0xc5, "e9a5e20f4e88773d921016983319495429f71ce938514b9e158cdc3a652710044a3b498f1e21acd17b4d3883516e0b8983a14043087b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_DATA={0xf5, 0xc5, "bef5dfef7fd39f592b5cdd032c65105c33bd56e1367e602c2665fc3286a10bba1d7324643ea479f5ab30dba33f5c22554d4a511b58383cac8b405356420aaded17fc49182f8486bfb6ed7de498a4e7547a5d3d150290b807f318968740a2f0853a6b7b21d1f3190e7e7f8ef9f93abc38069a748946feb399e5c9d5aea9a94d3a8e88fc40856e40c497e5a16589d5c4bff044d9b38a72ac1615e388666a96d74b1757c1f420e71376658c13159bcbf709fb69c7a295e69a1c9340ed0612c6180a0d8b006d179a139130ba13966359db1feba8c875ce74a78f9c63cb0d903a6a79f99db37af9e0cabe643f0ee0694d9e545d"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_DATA={0xbc, 0xc5, "3731e41ac0efb1660c4ef48780f5b7127ee22be01bf560733294f5b73154f6cbe58c7e68488e8d88608f14bdd533b0b83cad5638d4e08ced9c4d28b42bc457aac32b4dfa479d156c672dcdcd3e5c68f244cd71916b28b0f73cc17d039ba9c6f3db3d0e15e04fb586c05dd845ef851ce0d90b88b4e17942df17444ee28ae9ecb18f457f09921052464f41b95fc6ce02324e5aae7753031a59b94823a2be7d0bce3ea6de5ca3bba8d7ff50a7ab3ab836065ad444dbc2a47495"}]}, 0x1318}, 0x1, 0x0, 0x0, 0xc80c}, 0x4010) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001500), 0x400040, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000001540)={0x0, 0x0, 0x100b, 0x1}) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000001580), &(0x7f00000015c0)=0x4) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000001600), &(0x7f0000001640)=0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001680)=""/48, 0x30}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002740)=@generic={&(0x7f0000002700)='./file0\x00'}, 0x18) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000002780)={0x7, {0x2, 0x0, 0xffffffffffffffff, 0x100, 0x2}}) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000027c0)={0x1, 0x0, [{0x0, 0x9747, 0x2, 0x1, 0x5f, 0xfffffff8, 0x5}]}) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000002800)=""/139) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000028c0)={{r2}, "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"}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000048c0)={&(0x7f00000038c0)=""/4096, 0x1000}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004900), 0x10000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000004940)=0x5, 0x4) r5 = syz_io_uring_setup(0x57c1, &(0x7f0000004980)={0x0, 0xdf0e, 0x10000, 0x2, 0x372, 0x0, r2}, &(0x7f0000004a00), &(0x7f0000004a40)) ioctl$FICLONE(r2, 0x40049409, r5) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000004a80)={0x2, 0x4e24, @multicast2}, 0x10) accept4(r4, &(0x7f0000004ac0)=@generic, &(0x7f0000004b40)=0x80, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0), 0x81800, &(0x7f0000004c00)={[{@xino_off}], [{@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0xcb94}}, {@smackfsroot={'smackfsroot', 0x3d, '#$^'}}, {@uid_lt}, {@smackfsdef={'smackfsdef', 0x3d, '!{'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_lt={'uid<', 0xee01}}]}) r6 = socket(0xb, 0xa, 0x2) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000004cc0)=[r5, r3, r6], 0x3) sendmsg$NFT_BATCH(r6, &(0x7f0000005240)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005200)={&(0x7f0000004d40)={{0x14}, [@NFT_MSG_DELOBJ={0x194, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0xaa, 0x8, "d0d85925ac7acd94bbef060fbb84966d33df415ff9d75b9b9c88f8706c2031f4942005f7f9e61cf899bf398f7bc09461adb6c6cba058d12e843cd5b9f0c790bcf1257e231c2e9f292df3e003c02e040994a7a583796d63a926d6c23582d1b4043ab25ca6a797e2d1770eaac193a698781997254b6c7d3016d56acbafa8aa8563a7cc0864078de3e72ee961c051f0ceab3cfa9fc8a98332dcd7f66045e897f4d08eac7b3faa72"}, @NFTA_OBJ_USERDATA={0xd2, 0x8, "d67192378ea5b8e61fb677aa2004c3f31c568b30ebc35015c9ac01b69b532813e981bf49d2d0f940ffbe2eb97788421cd1f77f09e52e369d6340bf6ce2f5cb8daac891e2bdcee43b6dc9e38c970ffe9bbb6b246e42fd75d4b663a6ab613debe3ddbc37b3457227d4bd4a58bced70ac87bd225318c9d9de89c3bd4eb5a630d3fce57154a74a524993ff9f84230315bebb7b05f4377fa0171dbf3e8d9eeb9380c6f422c4c13f4eec85d8a56b240a227eb39243ec7f8fd4275eaf53c5bcb9e7389b0a1b3adf1c5958515652012092e3"}]}, @NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'NETMAP\x00'}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "df776fb0863091c9fd4c843a7b0d251a977f3aff30b1be5ab3d499ae785acfaa186a6771b7f29d1a65fa66536c605b2a1add02490077ccc1eecefeba4aef4db5295459cdffaf5be414523e6e4fecc05a215e3f8ea0dc35f77c9fa44b5b25366face6be55176aa5fee101fd4402f7b2deba851188553e8416f900e35e8b8d6ebbbcedfb826daec5397bc0c2e647b46f884f8780b46391711a721e0d39c31643e446251f23a91962342a6620abd2f688d17ef28e7372b1dabd847edb14a04d5fb1714252369e9764"}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x134, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xcb, 0xc, "bccf888afd5423bc0d96fc4824a86a380f413ab8b1ac294ecbd7a29a249d1941a69f7892bc0800957e88263aca21a6f9ad2ea752ddf272f0d618ddd94582d75cd60f9a5ee3d9f910c9ef73dbe01ad8aaf3ea67daa2b02602d45c6d175475d5cd593d57b03623484656f458f816bc4cca1e91cd1714e86846520749c5b03495437066ec4bad325d093adb0b7f99a329d74803d03feb6ad0ad4db4023e374fe22762337f6041ac99d4cadb3fabc5497c6c7ddb66202c880521fc857906e76569ed7720bb4fa2353c"}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x34824c52}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7dc3dd56}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x498}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000005280)=0x2, 0x4) 2m35.669939532s ago: executing program 0 (id=4266): r0 = syz_open_dev$sndpcmp(&(0x7f0000000540), 0x8, 0x151400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800020000000000000000000000000300110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r6, @ANYBLOB="6f097de4f37657d622665a601a5fabb87ee57c8135a26db7bf522da281780e34262cf2d58946bb3a9e656abf904264222d7f782dc2188eb70a890e1bdf8b4b4f", @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRES64=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r10 = memfd_create(&(0x7f0000000a80)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xdai\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqG', 0x0) fallocate(r10, 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000580)={0x0, 0x7, 0x4eb, 0x10, '\x00', '\x00', '\x00', 0x7fff, 0x8001, 0x9, 0x0, "34f38004c5366bf53bee725be795d41f"}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={r12, 0xffff7fff}, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f00000004c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 2m32.298622172s ago: executing program 0 (id=4278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0xfe33) syz_open_dev$evdev(0x0, 0x0, 0x2002) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$ax25(r7, &(0x7f0000000180)={{0x3, @default, 0x8}, [@null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), 0x0}, 0x20) fcntl$dupfd(r8, 0x0, r9) ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000140)={0x14}) 2m29.674493187s ago: executing program 0 (id=4286): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000010) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="ea0006e6", @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf25010000000000000008410000004c00180000000362726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2m14.506039377s ago: executing program 32 (id=4286): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000010) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="ea0006e6", @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf25010000000000000008410000004c00180000000362726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 13.779082438s ago: executing program 3 (id=4668): r0 = syz_open_dev$sndpcmp(&(0x7f0000000540), 0x8, 0x151400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800020000000000000000000000000300110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r6, @ANYBLOB="6f097de4f37657d622665a601a5fabb87ee57c8135a26db7bf522da281780e34262cf2d58946bb3a9e656abf904264222d7f782dc2188eb70a890e1bdf8b4b4f", @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRES64=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r10 = memfd_create(&(0x7f0000000a80)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xdai\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqG', 0x0) fallocate(r10, 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={r12, 0xffff7fff}, 0x8) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$FUSE(r13, &(0x7f000001b000)={0x2020}, 0xfffffebf) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f00000004c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 11.18153896s ago: executing program 3 (id=4675): inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone3(&(0x7f00000011c0)={0x8100000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x4}, &(0x7f0000000100)=""/4096, 0x1000, &(0x7f0000001100)=""/118, &(0x7f0000001180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7}, 0x58) prlimit64(r0, 0x1, &(0x7f0000001240)={0x248a2bd9, 0xffffffff80000001}, &(0x7f0000001280)) socket(0x10, 0x80003, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) 10.91909324s ago: executing program 5 (id=4676): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x24) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window={0x3, 0x1, 0x7}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(0x0, 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x10}, {0x7}}}, 0x24}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) exit(0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.908772763s ago: executing program 4 (id=4679): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r4, r3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r7}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xbfc, @remote, 0xffffffff}, r7, 0x9dffffff}}, 0x48) 9.58105919s ago: executing program 2 (id=4680): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000040), 0x49, 0xc10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @local, @broadcast, @broadcast}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff5d}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421, 0x0, 0x6, 0x2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 9.214387199s ago: executing program 2 (id=4681): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x24) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window={0x3, 0x1, 0x7}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x10}, {0x7}}}, 0x24}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) exit(0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.183069419s ago: executing program 5 (id=4682): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x3, 0x300, 0x0, 0x6, 0xa00}]}, {0x0, [0x30, 0x2e]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f00000001c0)={&(0x7f0000000380)=[0x6, 0x80000001, 0x9, 0x1, 0xbfd, 0x2, 0x1, 0xae71, 0x0, 0x5, 0x6, 0x3, 0x2, 0x3, 0x8e, 0x1, 0x189, 0xea84, 0x2, 0xfffffffc, 0x2, 0x4, 0xada, 0x7, 0x6, 0x685, 0x2, 0x7, 0x7, 0xe, 0x1d, 0x0, 0xffffffff, 0x29, 0x80, 0x8, 0x4, 0x3, 0x37, 0x1, 0x6, 0x1, 0x2, 0x9, 0xf9c6, 0xffc4, 0x7d509818, 0x3, 0x62, 0x3, 0x0, 0x7, 0xfffffffa, 0x2, 0x1, 0x6714, 0x5, 0x2, 0x3, 0x7e0, 0x9, 0x0, 0xffffffc0, 0xf7, 0x7bfb, 0x4, 0xff, 0x6, 0x42c, 0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x8, 0x5, 0xf, 0x4ee8, 0x3377, 0x35, 0xbd32, 0x3, 0x7, 0x2, 0x6, 0x10000, 0x402, 0x10000, 0x1000, 0xff, 0x8, 0x2, 0x0, 0x6, 0x10000, 0x5, 0x16, 0x2, 0x35, 0x7, 0xe057, 0x101, 0x2, 0x7, 0xd21a, 0x80000000, 0x3, 0x3, 0xf, 0x9, 0x8ff, 0x8, 0xb, 0x9, 0x83ed, 0x7f, 0x29, 0xfffffffc, 0x4, 0x7, 0x8, 0x6c025eea, 0x3, 0x7, 0x6, 0xf32, 0x4, 0x4, 0x7470a4f6, 0x1, 0x4, 0x8, 0x9, 0x5, 0xffff, 0x8, 0x7, 0x1, 0x8, 0x4, 0x2, 0x0, 0x1, 0x5, 0x2, 0x1, 0x100, 0x4, 0x7fffffff, 0x9, 0x599f6f0f, 0x80, 0x0, 0xfffffff8, 0x2, 0x5, 0x8000, 0x3, 0x1, 0xe, 0x2, 0x9, 0xfffffffa, 0x0, 0x2, 0x3, 0x6, 0x8, 0xaeb6, 0x8, 0x6fe, 0x10, 0x4, 0x9, 0x6, 0x8, 0xfffffffa, 0x7fffffff, 0x4, 0x1b7, 0x2, 0xb6000000, 0x7fe2, 0x5, 0x400, 0x0, 0x6, 0x3, 0x2, 0xa6, 0xffff, 0x9, 0xc, 0x5, 0x4, 0x5, 0x5, 0xfc1, 0x546, 0x3, 0x2, 0x5, 0x8, 0xfff, 0xd4, 0x9, 0x8, 0x8, 0x5, 0x4, 0x1, 0x5, 0x23e0b827, 0xb, 0x1800, 0x41f4, 0x100, 0x8, 0xb6, 0x4, 0x0, 0x7, 0x1, 0x84, 0x38d, 0x5, 0xe, 0x3, 0x5, 0x0, 0xf8700, 0x10000, 0x2ad, 0xffffffff, 0x4, 0x7fffffff, 0x8, 0x0, 0x7, 0x5, 0x2, 0x9, 0x8, 0x5, 0x8, 0x4, 0x4, 0x3, 0x4, 0x7, 0x6733, 0x1, 0x7, 0xca5, 0x5, 0x0, 0x0, 0x8, 0x8, 0x400, 0x9, 0x1000, 0x3, 0xffff, 0x1, 0x3, 0x0, 0x9213, 0x7, 0x0, 0x8, 0x400, 0x7ff, 0x8, 0x8e, 0xffffff9f, 0x10000000, 0x80000, 0x9, 0x9, 0x8, 0x1, 0x4, 0x9, 0x7, 0x0, 0x7f, 0x4, 0x8000, 0xf6, 0x3, 0x3, 0x1b80, 0x1, 0x101, 0x200, 0x11bf, 0x4, 0x9, 0x1, 0x7, 0x2, 0x54, 0x1, 0x1, 0x1, 0x0, 0x10, 0x6, 0x7ff, 0x0, 0x1e2ea84e, 0x9f, 0x9bc3, 0x8000, 0x9, 0x5, 0x18000000, 0x1, 0x2, 0x1000, 0x4, 0x8, 0x5, 0x0, 0x10001, 0x7, 0x2, 0xfff, 0x6, 0x5, 0x0, 0x6, 0xc, 0x8, 0x8, 0x2, 0x742, 0x8cc, 0x661, 0x1000, 0x7189aefd, 0x80000000, 0xfffff801, 0x528542d6, 0x7, 0x6, 0x6, 0x3c0, 0xfffffffc, 0x1ff, 0x4, 0x2800000, 0x800, 0x5, 0x0, 0x241, 0x800, 0x1, 0x8, 0x4, 0x1000, 0x5, 0x7, 0x80000000, 0x3, 0x3, 0x2, 0x2e, 0x9, 0x8, 0x80000000, 0x800, 0x8, 0x200, 0x3, 0x60, 0x4e, 0x66ea, 0x1, 0x800, 0x5, 0xef, 0x7fff, 0x7, 0x6, 0x80b, 0xa2, 0x8001, 0x1, 0x2, 0x6ac, 0x40000, 0x80, 0x6, 0x9, 0x4, 0xfffff800, 0x5, 0x7f, 0xe3, 0x5, 0x8, 0x6, 0xffffffff, 0x3a, 0x0, 0xfff, 0x800, 0x2, 0x0, 0x5, 0x3, 0x8, 0x7fff, 0xb80, 0x2, 0x5, 0x8, 0x80, 0x1, 0x5, 0xe, 0x0, 0x1, 0x7, 0x2, 0x9, 0x8, 0x4, 0x1, 0x7, 0x3, 0x7fffffff, 0xd, 0x909, 0x7, 0x3, 0x9, 0x4, 0x10001, 0xc19, 0x7, 0x1, 0xfffffff7, 0x6, 0x4, 0x33, 0x6, 0x8, 0x82, 0x8, 0x3, 0x3, 0x9196, 0x1, 0x4, 0x3, 0x40, 0x9, 0x5, 0xa04, 0xef9, 0x4, 0x0, 0x1, 0x0, 0x9, 0x7, 0x4, 0xcfc1, 0xffffffff, 0x17eb, 0x1, 0x8, 0x1000, 0x2, 0x0, 0x8, 0xfffffff8, 0x5, 0x6, 0x80000001, 0xe, 0x3, 0x401, 0x7, 0x800, 0x7, 0x5, 0x7, 0xc, 0xcf, 0x0, 0x6, 0x81, 0x3a, 0x0, 0xd284, 0x56b0, 0x6, 0x3, 0x0, 0x9, 0x40, 0x57, 0x9, 0x6, 0x9, 0x1000, 0x36d6, 0x1, 0x9, 0x9, 0x3, 0xffffffff, 0x4, 0x3, 0x61f, 0x9, 0x1, 0x1, 0x7fff, 0x6f80, 0x8, 0x7, 0x4, 0x5, 0x1, 0x927, 0x4, 0x100, 0x0, 0x8001, 0x32c0, 0x200, 0x2819, 0xca20, 0x4, 0x6, 0x100, 0x8000, 0x8, 0x400, 0xe, 0x80000000, 0xad3, 0x1, 0xa, 0xffffff07, 0x0, 0x6, 0x11, 0x7, 0x2, 0x3745, 0xfffffffa, 0xfffffff7, 0xce21, 0x1, 0x7f9, 0x1, 0x9, 0x6, 0x4e, 0xeacb, 0x66218707, 0x9, 0x7a09, 0x5, 0x28c5, 0x7, 0x7, 0xe, 0xf6, 0x2, 0xfffffffb, 0x0, 0x848, 0x100, 0x1, 0x2, 0x8, 0x3, 0x3456, 0x3, 0xffffffff, 0x7, 0x1, 0x8, 0x6, 0x4a, 0x27, 0x1, 0x101, 0x2, 0x0, 0x9, 0x5, 0x10, 0x6c671dc3, 0x401, 0x81, 0xf63, 0xa43f, 0x511fb73c, 0x3ff, 0x4, 0xe0000000, 0x7, 0x9, 0x10, 0x2, 0x4, 0x1ff, 0x5, 0x1, 0x1000, 0x6, 0xea6c, 0xfffffffa, 0x7f, 0x0, 0x8, 0x7fffffff, 0x8, 0x8, 0xf, 0x80000001, 0x43, 0x6e7b4064, 0x6, 0x4, 0x3, 0x80, 0x7, 0xc0e, 0xfff, 0x2, 0x4, 0x7, 0xb293, 0x577f, 0x5, 0x3, 0x0, 0x5, 0x1, 0x81, 0x5, 0x6, 0xf203, 0x8, 0x0, 0x4, 0x8, 0x401, 0x2, 0x81, 0x0, 0x40, 0x730f, 0x0, 0x4, 0x100, 0x200, 0x81, 0xffff, 0x1, 0x64a, 0x5, 0x1, 0x7, 0x6, 0x2, 0xfffffff7, 0x7, 0xe, 0x4, 0x7, 0xffffff93, 0x8f1, 0x3, 0xfffffffd, 0x6, 0x7, 0x5, 0x2, 0x9, 0x1, 0xd8f, 0x1, 0xd, 0x4, 0x6, 0x7f, 0x1ff, 0x2, 0x1, 0x2, 0xfffffffe, 0x6, 0x3, 0x8dab, 0x80000, 0xfffffffe, 0x6b7, 0x2, 0x7, 0x0, 0x0, 0x0, 0x200, 0x9, 0x400, 0x2, 0x8, 0x10001, 0x80000001, 0x9, 0xf925, 0x0, 0x8e, 0x8, 0x10, 0xc0000000, 0x1, 0x149, 0xffff, 0x7, 0x8, 0x0, 0x7f, 0x7, 0x7, 0x3b3, 0x7ff, 0x62a4, 0x83a, 0x3, 0x8, 0x6, 0x4, 0x3, 0xca31, 0x5, 0x1, 0x77a630f9, 0x4, 0xe, 0x1ff, 0x200, 0x2683, 0x9, 0x80000001, 0x8, 0x8, 0x0, 0xda67, 0xea8, 0xfffffff8, 0x68a, 0x2, 0x7d6a, 0x80000000, 0x6, 0xffffffff, 0x1, 0xe9dd, 0x8000, 0x400, 0x101, 0x8, 0x8, 0x3, 0x1, 0x0, 0x6, 0x3, 0x1, 0x8000, 0x10001, 0x7fffffff, 0x0, 0x7, 0x6f81695, 0x7, 0x3, 0x4ee5, 0x3c, 0x4, 0x923, 0x5, 0xa, 0x3, 0xfffffffa, 0x3, 0x8, 0x7, 0xe30d, 0x5845, 0xb, 0x3a, 0x5, 0x6, 0x7, 0x1, 0x4, 0x9, 0x5, 0x18a, 0x2, 0x4, 0x0, 0x1, 0x6, 0x8, 0x1d, 0x8, 0x22b0, 0x1, 0x10000, 0xfffff801, 0xfe, 0x6, 0x6, 0x5, 0xd077, 0x2, 0x0, 0x9, 0x6f2, 0xa, 0x8, 0x3, 0x40, 0x7f, 0x400, 0x2, 0x1ff0, 0x200, 0x10000, 0x8, 0xc, 0x8, 0x37b7, 0x3, 0x0, 0x4, 0x2, 0x0, 0xc3, 0x10000, 0x2, 0x1, 0x7, 0xe64, 0x6, 0x3, 0x0, 0xb2, 0x7, 0x37, 0x4, 0x9, 0xd, 0x8, 0x7f, 0x3, 0x10001, 0x0, 0x80, 0x4, 0x2, 0x0, 0x8, 0x9, 0xfff, 0x0, 0x7, 0x7, 0x1, 0x5, 0x5, 0xb, 0x6, 0x9, 0x8f2, 0x73, 0x0, 0x3, 0x6, 0x0, 0x7, 0x9, 0x8001, 0x400, 0x9, 0xffffffff, 0x4b8, 0x8, 0x1, 0x2, 0x6, 0x5, 0x1000, 0xc3e, 0xf6, 0x10, 0xd, 0x3, 0x1000, 0x10000, 0x9, 0xf06, 0x10000000, 0x2, 0x0, 0x10, 0x4, 0x81, 0x46bb, 0x2, 0x9c3, 0x1, 0x9, 0xfe, 0xff, 0x1, 0x72e, 0x6, 0x5, 0x2, 0x43e, 0x7, 0xb9, 0x7f, 0x7, 0x0, 0x2, 0x5, 0x80000000, 0x9, 0x401, 0x4, 0x8001, 0x0, 0x9, 0x2, 0x7, 0x3, 0x6, 0x40, 0x40, 0x4, 0x1, 0x7, 0x0, 0x10001, 0x1000, 0xa, 0x7f, 0x9, 0x5, 0x2, 0x4a43, 0x5, 0x5, 0xff, 0x12, 0x100, 0x5, 0x0, 0x3, 0xa534, 0x2, 0x3, 0x80, 0x81, 0xe, 0x3ff, 0x3, 0xded1, 0xa0, 0x2, 0x2, 0x1d, 0x0, 0x5, 0x6, 0x9, 0x0, 0x6, 0x6, 0x3, 0x4, 0xd, 0x7fffffff, 0x6, 0x8, 0x8, 0x0, 0x5, 0x59, 0x9, 0x0, 0x7, 0xe278, 0x2, 0x5, 0x1, 0x31af, 0x4, 0x81, 0x9, 0x8, 0x8, 0x1, 0x3, 0x0, 0x17, 0x0, 0x4], 0x2, 0x400, 0x7}) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @mcast1}, 0x1c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000000300)={0x28, r7, 0x100, 0x70bd29, 0x8000, {{}, {@val={0x8, 0x1, 0x45}, @void, @val={0xc, 0x99, {0x4, 0x6a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) read(r9, &(0x7f0000000040)=""/95, 0x5f) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="07000000010001", 0x7) 9.091447311s ago: executing program 3 (id=4683): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff57f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e97980b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6c5a031c66b91ab32a50dc6098ed884e7cb51726b360fbb37b4fe035c4b09587304900"/77, 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f104c443e9c6ad752a8103ef2f4b766b9a21501f94c1568b13756b66f74f44cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f1100", 0xce}], 0x3, &(0x7f0000000740), 0x0, 0x20000000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3ff, 0x20000) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001e1e9cb20daa6781ee456010203010902120001000010000904a040000803"], 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000180)={0x2e, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x20, 0xfffffffd, 0xf}, 0x2c) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r5, 0x401070c9, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"dcb8c79e0b2c19f4d767997c5f1e52f403177c6f0dcf237ddad1848e6badfcb7", r5}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r7, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000010"], 0x0, 0x2af, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r10, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62617461647600d0000380180003801400018005000200000000000800010004000000b40003801800018005000200000000000400030004000300040003"], 0xfc}}, 0x804) 8.968474476s ago: executing program 5 (id=4684): inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone3(&(0x7f00000011c0)={0x8100000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x4}, &(0x7f0000000100)=""/4096, 0x1000, &(0x7f0000001100)=""/118, &(0x7f0000001180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) 8.809172362s ago: executing program 1 (id=4685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208800, 0x0) socket(0x2, 0x80805, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0xb) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) read$dsp(r1, &(0x7f0000000140)=""/40, 0x28) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = dup(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000380)={0x1, 0x8, 0xc, 0xf55, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000080)={r5, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x7}, 0x90) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xc072) r6 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000000)={0xc, {0x7f, 0xe7, 0xfffffff8, 0xfffff000}, {0x2, 0x3, 0xffffbfff, 0xfff}, {0x40, 0x4}}) r7 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x404c801}, 0x4000) fadvise64(r7, 0xb2, 0xef7, 0x5) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)={r5, 0x3c4, 0x4, [0x0, 0x81, 0x1000, 0x294b]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={0x0, 0xffff, 0x10}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000240)={r9, 0xca, "5db8a1b058ef74e3860db4010ba428f6d323735eba7cc0bb5d324a44258a8db2ebaac55f8b13af91f50438631c983741f699a98bc72877c3dec329d6199d2f5e6da84d256ba87d5371d875fa1da4afc452316c22c3d29e307b14e97dc0ea93113b50a1d973abfa5b119721aaae82bf75d06e3bd4512556c0b29f85a6c5f1385a3b140daf4009dfae6395c22a560b46bd7eca37e27d813bc382523547585ed03fe1cf304abf04d4ee87eb1598d3aa1964ba5f2fee9d4ecf9158d0ac44d2274924ffb21b05c951f475abcd"}, &(0x7f0000000340)=0xd2) 7.711072626s ago: executing program 2 (id=4686): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 6.790563069s ago: executing program 2 (id=4687): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x4, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0x3}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 6.780452317s ago: executing program 5 (id=4688): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) socket$inet6(0xa, 0x4, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.493551636s ago: executing program 4 (id=4689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xebd, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {}, {0x4, 0x8}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x27}}}}, 0x108) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x3a) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) (fail_nth: 3) r10 = getpid() syz_pidfd_open(r10, 0x0) 6.326020109s ago: executing program 1 (id=4690): io_setup(0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000958ec804f253e363f86c1bbff908d013c040fd6b1a8517d61cca94611c308d383f7485f14743ae03a8f648e74070a8fa11daa53ac897cc37d355c05735c1cf5c9249b995f76a0d1d6089654b6b63898d3f662bc1a0f199b059f9981e25c25b0fc86257301013a329a710a78a40a0cf6350fceb30cf262300621cd785f892f77bbd60ea7d226e920aa90060c801fac0503931a5564c5e35a8570c1ccc1d3bef902da33da209c786d18da5"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x20040010) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000a00)=[{0x0}, {&(0x7f0000000380)=""/137, 0x89}, {0x0}, {&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/237, 0xed}, {&(0x7f0000000900)=""/245, 0xf5}, {&(0x7f00000001c0)}], 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r4 = syz_open_pts(r3, 0x101) r5 = dup3(r4, r3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, &(0x7f00000001c0)={0x9, 0xbb18, 0x2, 0xc, 0x0, 0x4f, 0x0, 0x4}, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r5, &(0x7f0000002440)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c6029455091676c214569a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d040700ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e99b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0xe24}}, 0xffffff5c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) 5.460973021s ago: executing program 5 (id=4691): r0 = syz_open_dev$sndpcmp(&(0x7f0000000540), 0x8, 0x151400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800020000000000000000000000000300110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r6, @ANYBLOB="6f097de4f37657d622665a601a5fabb87ee57c8135a26db7bf522da281780e34262cf2d58946bb3a9e656abf904264222d7f782dc2188eb70a890e1bdf8b4b4f", @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRESDEC, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRES64=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r10 = memfd_create(&(0x7f0000000a80)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\x1ag\x00\x8eCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\xba3?Q\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xdai\xf2\xd1\xb8[\xd0\x95\xa5\x04\xf9~\x93kj\xc3\xe1\xc2\xd8*SZ\xc3\xf9H/\xd7\v\xcb\x99_\x1d\xaan\"\xde\xc2\xc9\xe7>\a]Q\xce\\\xbas\xfcB\xaf\xf5\xb3-\xb95\xb9\f\x1f\xeb\xb3\xaf\xcb\x96\xfe \x81\xc0\xfb\xc7D\xf1)\x1d\xad\xf9V\xd1T\x9d\xb2\xba/\x0e\x17\xf6\xbd3F\x9e<\x1d\xf9\b\xd0\xe3Z\a\n\x14\nzY\xd2/\xe8\xdb\x066am\xad@\xbf\x11h\x9c\xcdQ\xf9\xc7\xd1g\r\x1bb\xc6\xc5\xba!`\xd7\xdcx\x92\'\x7f\xc4\xdf\xaf\x90\x94r\x93\x17\x18\xb8#gS:6\x93s\xcf\vqG', 0x0) fallocate(r10, 0x0, 0x0, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000580)={0x0, 0x7, 0x4eb, 0x10, '\x00', '\x00', '\x00', 0x7fff, 0x8001, 0x9, 0x0, "34f38004c5366bf53bee725be795d41f"}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000080)={r12, 0xffff7fff}, 0x8) r13 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$FUSE(r13, &(0x7f000001b000)={0x2020}, 0xfffffebf) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000800, &(0x7f00000004c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) 5.460547416s ago: executing program 4 (id=4692): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xebd, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {}, {0x4, 0x8}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x27}}}}, 0x108) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x3a) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r10 = getpid() syz_pidfd_open(r10, 0x0) 5.403697888s ago: executing program 3 (id=4693): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.356520129s ago: executing program 1 (id=4694): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640)=[{0x0}], 0x178) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x81, 0x0, 0x32314258, 0x4, 0x4, [{0xff}, {0xffffffff}, {0x0, 0x1}, {0x0, 0x76dfbff1}, {0xfffffffe, 0x2}, {0xfffffffd}, {0x0, 0x10}], 0x0, 0x20}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x881) 3.994460316s ago: executing program 3 (id=4695): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f00000004c0)={0x8, {{0xa, 0x4e22, 0x4, @mcast2, 0x5}}, {{0xa, 0x4e24, 0xa51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe}}}, 0x108) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$SG_IO(r0, 0x2285, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = syz_open_dev$vbi(&(0x7f00000003c0), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000008c0)={0x4, @sliced={0x9, [0x10, 0x4, 0x7, 0x7, 0x2, 0x4ac, 0x7, 0x7, 0x80, 0x7, 0x1, 0x8, 0xfffd, 0x4, 0xfffb, 0x3, 0x401, 0x0, 0xd, 0x6, 0x7, 0x0, 0xe, 0x6b, 0x6, 0x400, 0x4, 0x7, 0x2, 0xd6c, 0xad9, 0x7, 0x9, 0xfffb, 0xb229, 0x8, 0x7, 0x4, 0x7fff, 0xfff9, 0xa07, 0x9, 0x3, 0x2, 0x9, 0xb], 0x1}}) 3.661325375s ago: executing program 1 (id=4696): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x24) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @window={0x3, 0x1, 0x7}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x10}, {0x7}}}, 0x24}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) exit(0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.644195724s ago: executing program 4 (id=4697): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) 3.480687897s ago: executing program 4 (id=4698): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) write$selinux_access(r2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x1c, r4, 0x401, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40040110}, 0x80) 2.72330731s ago: executing program 3 (id=4699): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}]) dup3(r5, r3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r8}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xbfc, @remote, 0xffffffff}, r8, 0x9dffffff}}, 0x48) 2.514163403s ago: executing program 2 (id=4700): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208800, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0xb) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) read$dsp(r2, &(0x7f0000000140)=""/40, 0x28) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r5 = dup(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000380)={0x1, 0x8, 0xc, 0xf55, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000080)={r6, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x4, 0x7}, 0x90) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xc072) r7 = syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000000)={0xc, {0x7f, 0xe7, 0xfffffff8, 0xfffff000}, {0x2, 0x3, 0xffffbfff, 0xfff}, {0x40, 0x4}}) r8 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x404c801}, 0x4000) fadvise64(r8, 0xb2, 0xef7, 0x5) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000001c0)={r6, 0x3c4, 0x4, [0x0, 0x81, 0x1000, 0x294b]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={0x0, 0xffff, 0x10}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000240)={r10, 0xca, "5db8a1b058ef74e3860db4010ba428f6d323735eba7cc0bb5d324a44258a8db2ebaac55f8b13af91f50438631c983741f699a98bc72877c3dec329d6199d2f5e6da84d256ba87d5371d875fa1da4afc452316c22c3d29e307b14e97dc0ea93113b50a1d973abfa5b119721aaae82bf75d06e3bd4512556c0b29f85a6c5f1385a3b140daf4009dfae6395c22a560b46bd7eca37e27d813bc382523547585ed03fe1cf304abf04d4ee87eb1598d3aa1964ba5f2fee9d4ecf9158d0ac44d2274924ffb21b05c951f475abcd"}, &(0x7f0000000340)=0xd2) 1.973661556s ago: executing program 1 (id=4701): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x7, 0xfffffffffffffffe}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0xe4}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @remote, @local, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x190da) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x8}, 0x8) 590.334039ms ago: executing program 5 (id=4702): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @remote}}, 0x2, 0xfffe, 0x203fd, 0x0, 0x8d}, 0x9c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x2, 0x3b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x111203, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f9151d08480b0910f7870102030109021200010000000009043000002503aa00"], 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x6) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r7}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x4, &(0x7f0000a00000/0x600000)=nil) signalfd(r6, &(0x7f0000000100)={[0xfffffffffffffffe]}, 0x8) 529.250905ms ago: executing program 1 (id=4703): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x240, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES8=r3], 0x2b) syz_genetlink_get_family_id$tipc(0x0, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = gettid() kcmp(r8, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(r6, 0x4, &(0x7f0000000000)={0x5d, 0x6}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0) r9 = fsmount(r5, 0x1, 0x0) fchdir(r9) r10 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r10, r10, &(0x7f0000000080), 0x7f03) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x21}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 449.974261ms ago: executing program 4 (id=4704): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 0s ago: executing program 2 (id=4705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x54000844) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000004000000bb7f1a007600feff000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x400000001, 0x648441) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, 0x0) setreuid(0x0, 0xee00) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000480)={0x2, @sdr={0x3234564e, 0xc08e}}) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r8, 0x0, 0x0, 0xe, 0xfffff023) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r8, @ANYRES8=r6, @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) kernel console output (not intermixed with test programs): sys_write+0x1ac/0x250 [ 1582.680481][T24045] ? __pfx_ksys_write+0x10/0x10 [ 1582.680499][T24045] __x64_sys_sendmmsg+0x9c/0x100 [ 1582.680517][T24045] ? lockdep_hardirqs_on+0x7c/0x110 [ 1582.680538][T24045] do_syscall_64+0xcd/0xfa0 [ 1582.680562][T24045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.680584][T24045] RIP: 0033:0x7f4ef5f8efc9 [ 1582.680598][T24045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1582.680612][T24045] RSP: 002b:00007f4ef6e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1582.680626][T24045] RAX: ffffffffffffffda RBX: 00007f4ef61e5fa0 RCX: 00007f4ef5f8efc9 [ 1582.680637][T24045] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 1582.680646][T24045] RBP: 00007f4ef6e05090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.680654][T24045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.680663][T24045] R13: 00007f4ef61e6038 R14: 00007f4ef61e5fa0 R15: 00007ffed2d749d8 [ 1582.680685][T24045] [ 1583.131575][ T24] usb 4-1: SerialNumber: syz [ 1583.162185][ T24] usb 4-1: config 0 descriptor?? [ 1583.297970][T24053] FAULT_INJECTION: forcing a failure. [ 1583.297970][T24053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.430355][ T24] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1583.476694][ T24] usb 4-1: USB disconnect, device number 114 [ 1583.696363][T20072] Bluetooth: hci3: unexpected event for opcode 0x043d [ 1583.793438][T24053] CPU: 0 UID: 0 PID: 24053 Comm: syz.5.4431 Not tainted syzkaller #0 PREEMPT(full) [ 1583.793455][T24053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1583.793462][T24053] Call Trace: [ 1583.793466][T24053] [ 1583.793470][T24053] dump_stack_lvl+0x16c/0x1f0 [ 1583.793490][T24053] should_fail_ex+0x512/0x640 [ 1583.793506][T24053] _copy_from_user+0x2e/0xd0 [ 1583.793520][T24053] ucma_resolve_addr+0x9e/0x270 [ 1583.793534][T24053] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 1583.793565][T24053] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 1583.793578][T24053] ucma_write+0x1fb/0x330 [ 1583.793589][T24053] ? __pfx_ucma_write+0x10/0x10 [ 1583.793600][T24053] ? bpf_lsm_file_permission+0x9/0x10 [ 1583.793611][T24053] ? security_file_permission+0x71/0x210 [ 1583.793624][T24053] ? rw_verify_area+0xcf/0x6c0 [ 1583.793640][T24053] ? __pfx_ucma_write+0x10/0x10 [ 1583.793651][T24053] vfs_write+0x2a0/0x11d0 [ 1583.793663][T24053] ? __pfx_vfs_write+0x10/0x10 [ 1583.793672][T24053] ? find_held_lock+0x2b/0x80 [ 1583.793686][T24053] ? __fget_files+0x204/0x3c0 [ 1583.793699][T24053] ? __fget_files+0x20e/0x3c0 [ 1583.793715][T24053] ksys_write+0x1f8/0x250 [ 1583.793725][T24053] ? __pfx_ksys_write+0x10/0x10 [ 1583.793738][T24053] do_syscall_64+0xcd/0xfa0 [ 1583.793755][T24053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.793766][T24053] RIP: 0033:0x7f4ef5f8efc9 [ 1583.793776][T24053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.793787][T24053] RSP: 002b:00007f4ef6e05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1583.793797][T24053] RAX: ffffffffffffffda RBX: 00007f4ef61e5fa0 RCX: 00007f4ef5f8efc9 [ 1583.793804][T24053] RDX: 0000000000000118 RSI: 0000200000000680 RDI: 0000000000000003 [ 1583.793810][T24053] RBP: 00007f4ef6e05090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.793816][T24053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.793823][T24053] R13: 00007f4ef61e6038 R14: 00007f4ef61e5fa0 R15: 00007ffed2d749d8 [ 1583.793837][T24053] [ 1583.998412][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1583.998427][ T30] audit: type=1400 audit(2000001239.356:2380): avc: denied { read append } for pid=24049 comm="syz.4.4432" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1584.161163][T24057] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4433'. [ 1584.558612][T24047] SELinux: failed to load policy [ 1584.585977][T24055] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1584.646194][ T30] audit: type=1400 audit(2000001240.296:2381): avc: denied { read write } for pid=18995 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1584.951265][ T30] audit: type=1400 audit(2000001240.296:2382): avc: denied { open } for pid=18995 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1585.006798][ T30] audit: type=1400 audit(2000001240.296:2383): avc: denied { ioctl } for pid=18995 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1585.091092][ T30] audit: type=1400 audit(2000001240.306:2384): avc: denied { read } for pid=24061 comm="syz.5.4434" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1585.168680][T24076] FAULT_INJECTION: forcing a failure. [ 1585.168680][T24076] name failslab, interval 1, probability 0, space 0, times 0 [ 1585.181856][T24076] CPU: 0 UID: 0 PID: 24076 Comm: syz.2.4438 Not tainted syzkaller #0 PREEMPT(full) [ 1585.181873][T24076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1585.181880][T24076] Call Trace: [ 1585.181884][T24076] [ 1585.181888][T24076] dump_stack_lvl+0x16c/0x1f0 [ 1585.181907][T24076] should_fail_ex+0x512/0x640 [ 1585.181921][T24076] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1585.181939][T24076] should_failslab+0xc2/0x120 [ 1585.181952][T24076] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1585.181966][T24076] ? find_held_lock+0x2b/0x80 [ 1585.181979][T24076] ? do_epoll_ctl+0x1170/0x3790 [ 1585.181994][T24076] ? do_epoll_ctl+0x1170/0x3790 [ 1585.182004][T24076] do_epoll_ctl+0x1170/0x3790 [ 1585.182017][T24076] ? ksys_write+0x190/0x250 [ 1585.182031][T24076] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1585.182041][T24076] ? find_held_lock+0x2b/0x80 [ 1585.182053][T24076] ? __might_fault+0xe3/0x190 [ 1585.182068][T24076] ? __might_fault+0xe3/0x190 [ 1585.182087][T24076] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1585.182098][T24076] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1585.182110][T24076] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1585.182126][T24076] do_syscall_64+0xcd/0xfa0 [ 1585.182143][T24076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.182155][T24076] RIP: 0033:0x7f1d1078efc9 [ 1585.182165][T24076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1585.182175][T24076] RSP: 002b:00007f1d116b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1585.182186][T24076] RAX: ffffffffffffffda RBX: 00007f1d109e6180 RCX: 00007f1d1078efc9 [ 1585.182193][T24076] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000009 [ 1585.182199][T24076] RBP: 00007f1d116b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.182205][T24076] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1585.182211][T24076] R13: 00007f1d109e6218 R14: 00007f1d109e6180 R15: 00007ffc8f1d23c8 [ 1585.182226][T24076] [ 1585.389343][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1585.520031][ T30] audit: type=1400 audit(2000001240.306:2385): avc: denied { open } for pid=24061 comm="syz.5.4434" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1585.544170][ T30] audit: type=1400 audit(2000001240.316:2386): avc: denied { ioctl } for pid=24061 comm="syz.5.4434" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1585.569032][ T5875] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1585.582555][ T30] audit: type=1400 audit(2000001240.366:2387): avc: denied { read } for pid=24061 comm="syz.5.4434" dev="nsfs" ino=4026533459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1585.723288][ T30] audit: type=1400 audit(2000001240.366:2388): avc: denied { open } for pid=24061 comm="syz.5.4434" path="net:[4026533459]" dev="nsfs" ino=4026533459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1585.971201][ T30] audit: type=1400 audit(2000001240.366:2389): avc: denied { create } for pid=24061 comm="syz.5.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1586.017007][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 1586.046248][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1586.063362][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.071508][ T24] usb 5-1: Product: syz [ 1586.075954][ T24] usb 5-1: Manufacturer: syz [ 1586.081629][ T24] usb 5-1: SerialNumber: syz [ 1586.089555][ T24] usb 5-1: config 0 descriptor?? [ 1586.096876][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 1586.102837][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1586.206172][ T5875] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1586.303114][ T5875] usb 4-1: config 0 has no interface number 0 [ 1586.303237][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1586.309227][ T5875] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1586.360524][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1586.400721][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.409197][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1586.409238][ T24] usb 5-1: media controller created [ 1586.457555][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1586.494279][ T5875] usb 4-1: config 0 descriptor?? [ 1586.653679][ T5875] viperboard 4-1:0.143: version 0.00 found at bus 004 address 115 [ 1586.666373][ T24] DVB: Unable to find symbol dib7000p_attach() [ 1586.706306][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1586.738638][ T5875] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1586.793172][ T5875] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1586.864915][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 1586.884550][ T5875] usb 4-1: USB disconnect, device number 115 [ 1586.901583][ T24] Registered IR keymap rc-empty [ 1586.994760][ T24] dvb-usb: could not initialize remote control. [ 1587.001028][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1587.249659][ T24] usb 5-1: USB disconnect, device number 104 [ 1587.324510][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1589.064750][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1589.064802][ T30] audit: type=1400 audit(2000001244.676:2413): avc: denied { shutdown } for pid=24106 comm="syz.1.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1589.171554][T24113] syzkaller1: entered promiscuous mode [ 1589.177212][T24113] syzkaller1: entered allmulticast mode [ 1589.995679][ T30] audit: type=1400 audit(2000001244.746:2414): avc: denied { read } for pid=24106 comm="syz.1.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1590.331652][ T30] audit: type=1400 audit(2000001244.816:2415): avc: denied { create } for pid=24106 comm="syz.1.4445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1590.663450][ T30] audit: type=1400 audit(2000001244.816:2416): avc: denied { ioctl } for pid=24106 comm="syz.1.4445" path="socket:[87022]" dev="sockfs" ino=87022 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1590.718824][T24119] fuse: Bad value for 'fd' [ 1590.807065][ T30] audit: type=1400 audit(2000001245.976:2417): avc: denied { read } for pid=24114 comm="syz.3.4446" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1590.927253][ T30] audit: type=1400 audit(2000001245.976:2418): avc: denied { open } for pid=24114 comm="syz.3.4446" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1590.975304][T24123] FAULT_INJECTION: forcing a failure. [ 1590.975304][T24123] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.991511][ T30] audit: type=1400 audit(2000001246.336:2419): avc: denied { sys_module } for pid=24106 comm="syz.1.4445" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1591.016621][ T30] audit: type=1400 audit(2000001246.366:2420): avc: denied { mounton } for pid=24118 comm="syz.5.4447" path="/19/file0" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1591.081537][T24129] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4448'. [ 1591.173273][ T30] audit: type=1400 audit(2000001246.386:2421): avc: denied { read write } for pid=24096 comm="syz.2.4444" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1591.241695][T24123] CPU: 1 UID: 0 PID: 24123 Comm: syz.3.4451 Not tainted syzkaller #0 PREEMPT(full) [ 1591.241721][T24123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1591.241732][T24123] Call Trace: [ 1591.241737][T24123] [ 1591.241744][T24123] dump_stack_lvl+0x16c/0x1f0 [ 1591.241774][T24123] should_fail_ex+0x512/0x640 [ 1591.241794][T24123] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1591.241823][T24123] should_failslab+0xc2/0x120 [ 1591.241844][T24123] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1591.241869][T24123] ? io_submit_one+0x122/0x1df0 [ 1591.241894][T24123] ? io_submit_one+0x122/0x1df0 [ 1591.241912][T24123] io_submit_one+0x122/0x1df0 [ 1591.241936][T24123] ? __lock_acquire+0xb8a/0x1c90 [ 1591.241967][T24123] ? __pfx_io_submit_one+0x10/0x10 [ 1591.241996][T24123] ? __might_fault+0xe3/0x190 [ 1591.242020][T24123] ? __might_fault+0x13b/0x190 [ 1591.242050][T24123] ? __x64_sys_io_submit+0x1a9/0x350 [ 1591.242070][T24123] __x64_sys_io_submit+0x1a9/0x350 [ 1591.242094][T24123] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1591.242128][T24123] do_syscall_64+0xcd/0xfa0 [ 1591.242156][T24123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.242173][T24123] RIP: 0033:0x7f083e78efc9 [ 1591.242187][T24123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1591.242202][T24123] RSP: 002b:00007f083f5ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1591.242219][T24123] RAX: ffffffffffffffda RBX: 00007f083e9e5fa0 RCX: 00007f083e78efc9 [ 1591.242229][T24123] RDX: 0000200000000100 RSI: 0000000000000001 RDI: 00007f083f559000 [ 1591.242239][T24123] RBP: 00007f083f5ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.242255][T24123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.242265][T24123] R13: 00007f083e9e6038 R14: 00007f083e9e5fa0 R15: 00007ffe34ae6348 [ 1591.242289][T24123] [ 1591.539226][ T30] audit: type=1400 audit(2000001246.386:2422): avc: denied { open } for pid=24096 comm="syz.2.4444" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1591.813495][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1591.990343][ T24] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1592.033340][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.062224][ T24] usb 5-1: Product: syz [ 1592.083940][ T24] usb 5-1: Manufacturer: syz [ 1592.110665][ T24] usb 5-1: SerialNumber: syz [ 1592.168623][ T24] usb 5-1: config 0 descriptor?? [ 1592.228322][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 1592.271557][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1592.418472][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1592.498780][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1592.546425][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1592.588495][ T24] usb 5-1: media controller created [ 1592.668232][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1592.847333][ T24] DVB: Unable to find symbol dib7000p_attach() [ 1592.867482][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1592.984047][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 1592.991374][ T24] Registered IR keymap rc-empty [ 1592.998738][ T24] dvb-usb: could not initialize remote control. [ 1593.020764][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1593.034764][T24150] 9pnet_fd: p9_fd_create_unix (24150): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1593.251472][ T24] usb 5-1: USB disconnect, device number 105 [ 1593.618799][T24155] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4456'. [ 1593.903374][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1593.972203][T24160] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4459'. [ 1594.001629][T24160] net_ratelimit: 44 callbacks suppressed [ 1594.001647][T24160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1594.044379][T24167] fuse: Bad value for 'fd' [ 1594.208756][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1594.208769][ T30] audit: type=1400 audit(2000001249.856:2450): avc: denied { read write } for pid=24170 comm="syz.2.4462" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1594.283371][ T30] audit: type=1400 audit(2000001249.856:2451): avc: denied { open } for pid=24170 comm="syz.2.4462" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1594.323471][ T30] audit: type=1400 audit(2000001249.896:2452): avc: denied { ioctl } for pid=24170 comm="syz.2.4462" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1594.703113][ T30] audit: type=1400 audit(2000001249.956:2453): avc: denied { create } for pid=24170 comm="syz.2.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1594.722801][ T5896] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1594.740981][ T30] audit: type=1400 audit(2000001250.006:2454): avc: denied { create } for pid=24170 comm="syz.2.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1594.761378][ T30] audit: type=1400 audit(2000001250.026:2455): avc: denied { getopt } for pid=24170 comm="syz.2.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1594.783550][ T30] audit: type=1400 audit(2000001250.026:2456): avc: denied { connect } for pid=24170 comm="syz.2.4462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1594.837021][ T30] audit: type=1400 audit(2000001250.036:2457): avc: denied { name_connect } for pid=24170 comm="syz.2.4462" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1594.860560][ T30] audit: type=1400 audit(2000001250.066:2458): avc: denied { setopt } for pid=24170 comm="syz.2.4462" laddr=::ffff:172.20.20.10 lport=54100 faddr=::ffff:172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1594.900155][ T30] audit: type=1400 audit(2000001250.256:2459): avc: denied { bind } for pid=24173 comm="syz.5.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1595.019398][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 1595.026312][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1595.037654][ T5896] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1595.048890][ T5896] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1595.066762][ T5896] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1595.143418][ T5896] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1595.166841][ T5896] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1595.173803][ T5896] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1595.201697][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.223022][ T5896] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1595.333166][ T5875] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1595.479343][ T5896] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1595.513215][ T5875] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 1595.523624][ T5875] usb 2-1: config 0 has no interface number 0 [ 1595.544678][T20072] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1595.600873][T24189] fuse: Bad value for 'fd' [ 1595.609444][ T5896] usb 3-1: USB disconnect, device number 118 [ 1595.623371][ T5875] usb 2-1: config 0 interface 160 has no altsetting 0 [ 1595.639255][ T5875] usb 2-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1595.639281][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.639300][ T5875] usb 2-1: Product: syz [ 1595.639314][ T5875] usb 2-1: Manufacturer: syz [ 1595.639327][ T5875] usb 2-1: SerialNumber: syz [ 1595.640985][ T5875] usb 2-1: config 0 descriptor?? [ 1595.644232][ T5875] usb-storage 2-1:0.160: USB Mass Storage device detected [ 1596.536851][T24208] 9pnet_fd: p9_fd_create_unix (24208): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1597.307979][T24214] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1597.399078][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.763957][ T5875] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1597.934590][ T5875] usb 3-1: config 0 has no interfaces? [ 1597.945833][ T5875] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1597.988415][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.074835][ T8135] usb 2-1: USB disconnect, device number 124 [ 1598.103987][ T5875] usb 3-1: config 0 descriptor?? [ 1598.429449][T24240] ieee802154 phy1 wpan1: encryption failed: -22 [ 1598.798329][ T24] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 1598.851760][ T890] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 1598.899837][ T5875] usb 3-1: USB disconnect, device number 119 [ 1599.274292][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1599.282571][ T890] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1599.294240][ T24] usb 4-1: config 1 interface 0 altsetting 127 endpoint 0x1 is Bulk; changing to Interrupt [ 1599.313536][ T890] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1599.327691][ T24] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1599.391786][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1599.391804][ T890] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1599.432193][ T890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.446829][ T24] usb 4-1: string descriptor 0 read error: -22 [ 1599.470449][T24232] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1599.570153][T24243] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4483'. [ 1599.755873][T24232] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1599.794841][ T24] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1599.797653][ T890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1599.831209][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.856388][T24231] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1600.147062][T24231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.167085][T24231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.227212][ T890] usb 5-1: USB disconnect, device number 106 [ 1600.310995][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1600.311011][ T30] audit: type=1400 audit(2000001255.956:2474): avc: denied { append } for pid=24249 comm="syz.1.4485" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1600.409340][ T5875] usb 4-1: USB disconnect, device number 116 [ 1600.623644][ T30] audit: type=1400 audit(2000001256.266:2475): avc: denied { allowed } for pid=24223 comm="syz.4.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1600.915902][ T30] audit: type=1400 audit(2000001256.266:2476): avc: denied { create } for pid=24223 comm="syz.4.4478" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1601.057795][T24255] input: syz1 as /devices/virtual/input/input113 [ 1601.077228][ T30] audit: type=1400 audit(2000001256.266:2477): avc: denied { map } for pid=24223 comm="syz.4.4478" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1601.204310][T11782] kernel read not supported for file /cpu/0/msr (pid: 11782 comm: kworker/1:4) [ 1601.213697][ T30] audit: type=1400 audit(2000001256.266:2478): avc: denied { read write } for pid=24223 comm="syz.4.4478" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1601.253550][ T30] audit: type=1400 audit(2000001256.666:2479): avc: denied { connect } for pid=24257 comm="syz.1.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1601.315337][ T30] audit: type=1400 audit(2000001256.706:2480): avc: denied { ioctl } for pid=24254 comm="syz.5.4486" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1601.373211][ T30] audit: type=1400 audit(2000001256.816:2481): avc: denied { create } for pid=24254 comm="syz.5.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1601.437600][ T30] audit: type=1400 audit(2000001256.816:2482): avc: denied { connect } for pid=24254 comm="syz.5.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1601.488561][ T30] audit: type=1400 audit(2000001256.846:2483): avc: denied { read write } for pid=24257 comm="syz.1.4487" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1601.642616][T24270] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4490'. [ 1601.857724][T24273] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 1602.066353][T24276] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 1602.243321][ T24] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 1602.437752][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.456828][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1602.484064][ T24] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1602.524738][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1602.562520][ T24] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1602.573659][T11782] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1602.583233][ T8135] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 1602.743363][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.777982][T24273] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1602.814722][ T24] hub 4-1:1.0: bad descriptor, ignoring hub [ 1602.821764][ T24] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1603.218876][ T8135] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1603.229493][T11782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.244414][T24273] sctp: [Deprecated]: syz.3.4489 (pid 24273) Use of int in max_burst socket option. [ 1603.244414][T24273] Use struct sctp_assoc_value instead [ 1603.265278][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 1603.270841][ T8135] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1603.282896][T11782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.297460][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 1603.304258][ T8135] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1603.316689][ T24] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1603.325766][T11782] usb 5-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1603.361066][T11782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.433177][ T8135] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1603.454780][ T8135] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1603.465245][ T24] usb 4-1: USB disconnect, device number 117 [ 1603.478182][T11782] usb 5-1: config 0 descriptor?? [ 1603.510249][ T8135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.560165][T24276] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1603.587807][ T8135] hub 2-1:1.0: bad descriptor, ignoring hub [ 1603.599704][ T8135] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1603.828494][ T8135] cdc_wdm 2-1:1.0: skipping garbage [ 1603.944221][ T8135] cdc_wdm 2-1:1.0: skipping garbage [ 1603.962838][ T8135] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1603.963843][T24276] sctp: [Deprecated]: syz.1.4491 (pid 24276) Use of int in max_burst socket option. [ 1603.963843][T24276] Use struct sctp_assoc_value instead [ 1604.043938][ T5875] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1604.168422][T11782] usbhid 5-1:0.0: can't add hid device: -71 [ 1604.187783][T11782] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1604.224097][T11782] usb 5-1: USB disconnect, device number 107 [ 1604.230353][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 1604.262616][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1604.272347][ T5875] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1604.293150][ T5875] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1604.313772][ T8135] usb 2-1: USB disconnect, device number 125 [ 1604.322722][ T5875] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1604.389553][ T5875] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1604.400356][ T5875] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1604.423438][ T5875] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1604.440264][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.463566][ T5875] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1604.748317][ T5875] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1604.795021][ T5875] usb 3-1: USB disconnect, device number 120 [ 1605.505641][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1605.505658][ T30] audit: type=1400 audit(2000001261.156:2510): avc: denied { setopt } for pid=24305 comm="syz.1.4502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1605.507703][T24311] FAULT_INJECTION: forcing a failure. [ 1605.507703][T24311] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.733558][T24311] CPU: 0 UID: 0 PID: 24311 Comm: syz.3.4501 Not tainted syzkaller #0 PREEMPT(full) [ 1605.733583][T24311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1605.733593][T24311] Call Trace: [ 1605.733599][T24311] [ 1605.733606][T24311] dump_stack_lvl+0x16c/0x1f0 [ 1605.733638][T24311] should_fail_ex+0x512/0x640 [ 1605.733657][T24311] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1605.733686][T24311] should_failslab+0xc2/0x120 [ 1605.733708][T24311] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1605.733733][T24311] ? __alloc_skb+0x2b2/0x380 [ 1605.733760][T24311] ? __alloc_skb+0x2b2/0x380 [ 1605.733777][T24311] ? __pfx_netlink_insert+0x10/0x10 [ 1605.733798][T24311] __alloc_skb+0x2b2/0x380 [ 1605.733818][T24311] ? __pfx___alloc_skb+0x10/0x10 [ 1605.733838][T24311] ? netlink_autobind.isra.0+0x158/0x370 [ 1605.733868][T24311] netlink_alloc_large_skb+0x69/0x140 [ 1605.733893][T24311] netlink_sendmsg+0x698/0xdd0 [ 1605.733921][T24311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1605.733954][T24311] ____sys_sendmsg+0xa98/0xc70 [ 1605.733981][T24311] ? copy_msghdr_from_user+0x10a/0x160 [ 1605.734003][T24311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1605.734039][T24311] ___sys_sendmsg+0x134/0x1d0 [ 1605.734063][T24311] ? __pfx____sys_sendmsg+0x10/0x10 [ 1605.734081][T24311] ? __lock_acquire+0x622/0x1c90 [ 1605.734135][T24311] __sys_sendmsg+0x16d/0x220 [ 1605.734158][T24311] ? __pfx___sys_sendmsg+0x10/0x10 [ 1605.734197][T24311] do_syscall_64+0xcd/0xfa0 [ 1605.734224][T24311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.734243][T24311] RIP: 0033:0x7f083e78efc9 [ 1605.734264][T24311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1605.734282][T24311] RSP: 002b:00007f083f5ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1605.734299][T24311] RAX: ffffffffffffffda RBX: 00007f083e9e5fa0 RCX: 00007f083e78efc9 [ 1605.734311][T24311] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1605.734322][T24311] RBP: 00007f083f5ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.734332][T24311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.734342][T24311] R13: 00007f083e9e6038 R14: 00007f083e9e5fa0 R15: 00007ffe34ae6348 [ 1605.734367][T24311] [ 1606.423311][ T30] audit: type=1400 audit(2000001262.056:2511): avc: denied { unmount } for pid=18006 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1606.604345][ T30] audit: type=1400 audit(2000001262.256:2512): avc: denied { read } for pid=24323 comm="syz.1.4505" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1606.655560][ T30] audit: type=1400 audit(2000001262.276:2513): avc: denied { open } for pid=24323 comm="syz.1.4505" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1606.701266][ T30] audit: type=1400 audit(2000001262.286:2514): avc: denied { ioctl } for pid=24323 comm="syz.1.4505" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1606.731097][ T30] audit: type=1400 audit(2000001262.376:2515): avc: denied { read open } for pid=24328 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1606.930074][ T30] audit: type=1400 audit(2000001262.376:2516): avc: denied { getattr } for pid=24328 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1607.431782][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.502693][ T30] audit: type=1400 audit(2000001262.526:2517): avc: denied { bind } for pid=24322 comm="syz.4.4506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1607.522236][ T30] audit: type=1400 audit(2000001262.526:2518): avc: denied { name_bind } for pid=24322 comm="syz.4.4506" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1607.544570][ T30] audit: type=1400 audit(2000001262.526:2519): avc: denied { node_bind } for pid=24322 comm="syz.4.4506" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1608.159648][T24348] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 1608.208481][T24331] SELinux: failed to load policy [ 1609.033394][ T8135] usb 2-1: new low-speed USB device number 126 using dummy_hcd [ 1609.469119][ T8135] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.531149][ T8135] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1609.556220][ T8135] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1609.634741][ T5875] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1609.693925][ T8135] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1609.710126][T24374] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1609.729567][ T5896] IPVS: starting estimator thread 0... [ 1609.740579][ T8135] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1609.796017][ T8135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.823177][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 1609.830173][T24348] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1609.837528][T24376] IPVS: using max 53 ests per chain, 127200 per kthread [ 1609.841514][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1609.924756][ T8135] hub 2-1:1.0: bad descriptor, ignoring hub [ 1609.928936][ T5875] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1609.930685][ T8135] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1609.982921][ T8135] cdc_wdm 2-1:1.0: skipping garbage [ 1609.990288][ T5875] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1609.994517][ T8135] cdc_wdm 2-1:1.0: skipping garbage [ 1610.008393][ T8135] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1610.037377][ T5875] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1610.058128][ T5875] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1610.134323][T24348] sctp: [Deprecated]: syz.1.4509 (pid 24348) Use of int in max_burst socket option. [ 1610.134323][T24348] Use struct sctp_assoc_value instead [ 1610.243891][T11782] usb 5-1: new low-speed USB device number 108 using dummy_hcd [ 1610.424249][T11782] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1610.429874][ T5875] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1610.461532][T11782] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1610.480284][T11782] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1610.491627][ T8135] usb 2-1: USB disconnect, device number 126 [ 1610.526628][ T5875] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1610.559611][T11782] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1610.581266][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.589738][T11782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1610.674266][T11782] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1610.730458][T11782] usb 5-1: string descriptor 0 read error: -22 [ 1610.732440][ T5875] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1610.771061][T11782] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1610.843230][T11782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.963935][T11782] usb 5-1: config 0 descriptor?? [ 1611.033729][T24383] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1611.092896][T11782] hub 5-1:0.0: bad descriptor, ignoring hub [ 1611.118454][T11782] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1611.211320][T24399] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1611.256762][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1611.265969][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1611.265981][ T30] audit: type=1400 audit(2000001266.876:2540): avc: denied { setopt } for pid=24397 comm="syz.3.4517" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1611.319082][ T5875] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1611.319805][T11782] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input114 [ 1611.380764][ T5875] usb 3-1: USB disconnect, device number 121 [ 1611.482178][ T30] audit: type=1400 audit(2000001267.126:2541): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=4484 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1611.526056][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -1 [ 1611.546892][T11782] usb 5-1: USB disconnect, device number 108 [ 1611.553046][ C1] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 1611.563153][ T890] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1611.640596][ T30] audit: type=1400 audit(2000001267.126:2542): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4484 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1611.860299][ T30] audit: type=1400 audit(2000001267.126:2543): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4484 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1612.167103][ T890] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1612.176425][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.184535][ T890] usb 4-1: Product: syz [ 1612.193178][ T890] usb 4-1: Manufacturer: syz [ 1612.197923][ T890] usb 4-1: SerialNumber: syz [ 1612.212517][ T890] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1612.222333][ T30] audit: type=1400 audit(2000001267.876:2544): avc: denied { firmware_load } for pid=5842 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1612.271478][ T5842] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1612.383181][ T5875] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1612.627208][ T30] audit: type=1400 audit(2000001268.156:2545): avc: denied { connect } for pid=24407 comm="syz.2.4520" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1612.729421][T24410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4520'. [ 1612.738829][T24410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4520'. [ 1612.805581][ T5875] usb 6-1: Using ep0 maxpacket: 16 [ 1612.811026][ T30] audit: type=1400 audit(2000001268.166:2546): avc: denied { write } for pid=24407 comm="syz.2.4520" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff01::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1612.840640][ T5875] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1612.850000][ T5875] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1612.888681][ T5875] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1612.987517][ T5875] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1613.055491][ T5875] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1613.079631][ T5875] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1613.086796][ T5875] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1613.146032][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.235421][ T5875] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1613.363280][ T5842] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1613.371190][ T5842] ath9k_htc: Failed to initialize the device [ 1613.406342][ T30] audit: type=1400 audit(2000001269.056:2547): avc: denied { create } for pid=24412 comm="syz.4.4521" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1613.435810][ T5842] usb 4-1: ath9k_htc: USB layer deinitialized [ 1613.444272][ T30] audit: type=1400 audit(2000001269.056:2548): avc: denied { mounton } for pid=24412 comm="syz.4.4521" path="/272/file0" dev="tmpfs" ino=1456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1613.544433][ T890] usb 4-1: USB disconnect, device number 118 [ 1613.591947][ T5875] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1613.607487][ T5875] usb 6-1: USB disconnect, device number 4 [ 1613.751259][ T8135] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1613.933303][ T8135] usb 3-1: Using ep0 maxpacket: 8 [ 1614.044920][ T30] audit: type=1400 audit(2000001269.696:2549): avc: denied { read } for pid=24425 comm="syz.5.4525" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1614.068842][ T5875] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1614.186224][ T8135] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1614.207186][ T8135] usb 3-1: config 0 has no interface number 0 [ 1614.631940][ T8135] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1614.654249][ T8135] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1614.688659][ T8135] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1614.700260][ T8135] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1614.725875][ T5875] usb 5-1: config 0 has an invalid interface number: 160 but max is 0 [ 1614.734451][ T5875] usb 5-1: config 0 has no interface number 0 [ 1614.752825][ T5875] usb 5-1: config 0 interface 160 has no altsetting 0 [ 1614.761143][ T8135] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1614.781420][ T8135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.822873][ T8135] usb 3-1: config 0 descriptor?? [ 1614.847851][ T5875] usb 5-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1614.857737][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.863609][ T8135] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1614.897547][ T5875] usb 5-1: Product: syz [ 1614.901734][ T5875] usb 5-1: Manufacturer: syz [ 1614.933101][ T5875] usb 5-1: SerialNumber: syz [ 1614.991478][ T5875] usb 5-1: config 0 descriptor?? [ 1615.072452][ T5875] usb-storage 5-1:0.160: USB Mass Storage device detected [ 1615.919061][ T8135] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1616.190180][ T8135] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.201832][ T8135] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1616.485164][ T8135] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1616.497594][T24441] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32 [ 1616.505894][ T8135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.519655][ T8135] usb 4-1: Product: syz [ 1616.524360][ T8135] usb 4-1: Manufacturer: syz [ 1616.529034][ T8135] usb 4-1: SerialNumber: syz [ 1616.538765][ T8135] cdc_mbim 4-1:1.0: skipping garbage [ 1616.742387][T24430] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1616.823434][ T5868] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1617.077114][ T5868] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.087580][ T5868] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1617.137248][ T5875] usb 5-1: USB disconnect, device number 109 [ 1617.223004][ T5868] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1617.301798][ T5868] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1617.313580][ T5868] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1617.323958][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.341135][T24441] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1617.355837][ T5868] hub 6-1:1.0: bad descriptor, ignoring hub [ 1617.373716][ T5868] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1617.387463][ T5868] cdc_wdm 6-1:1.0: skipping garbage [ 1617.393758][ T5868] cdc_wdm 6-1:1.0: skipping garbage [ 1617.399448][ T5868] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1617.538621][T24430] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1617.550572][T24441] sctp: [Deprecated]: syz.5.4528 (pid 24441) Use of int in max_burst socket option. [ 1617.550572][T24441] Use struct sctp_assoc_value instead [ 1617.567857][ T8135] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 1617.663140][ T5842] usb 3-1: USB disconnect, device number 122 [ 1617.675155][ T5868] usb 6-1: USB disconnect, device number 5 [ 1617.684315][ T5842] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1617.812212][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1617.812252][ T30] audit: type=1400 audit(2000001273.456:2554): avc: denied { create } for pid=24429 comm="syz.3.4526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1618.619077][ T30] audit: type=1400 audit(2000001273.456:2555): avc: denied { mount } for pid=24448 comm="syz.4.4531" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1618.693914][ T30] audit: type=1400 audit(2000001274.346:2556): avc: denied { unmount } for pid=18995 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1619.005679][ T8135] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 1619.127247][ T8135] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1619.143642][ T8135] wwan wwan0: port wwan0mbim0 attached [ 1619.180675][ T8135] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 7e:84:c6:73:42:02 [ 1619.215191][ T8135] usb 4-1: USB disconnect, device number 119 [ 1619.222420][ T8135] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1619.503416][ T5868] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 1619.913350][T24459] SELinux: failed to load policy [ 1620.589144][ T5868] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1620.614154][ T5868] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1620.622273][ T5868] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1620.632013][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1620.643814][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1620.653729][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1620.674251][ T5868] usb 3-1: string descriptor 0 read error: -22 [ 1620.682959][ T5868] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1620.702930][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.154733][ T5842] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1621.193430][ T5868] usb 3-1: config 0 descriptor?? [ 1621.435888][ T30] audit: type=1400 audit(2000001276.866:2557): avc: denied { read } for pid=24471 comm="syz.1.4538" lport=43804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1621.496227][T24461] SELinux: failed to load policy [ 1621.662158][ T8135] wwan wwan0: port wwan0mbim0 disconnected [ 1621.848183][ T890] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1621.929116][ T5842] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1621.985609][ T5842] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1622.027652][ T5842] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1622.076705][ T5868] usb 3-1: can't set config #0, error -71 [ 1622.088067][ T5868] usb 3-1: USB disconnect, device number 123 [ 1622.093234][ T5842] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1622.178084][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.234894][ T890] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1622.254657][ T30] audit: type=1400 audit(2000001277.906:2558): avc: denied { bind } for pid=24477 comm="syz.3.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1622.301767][ T890] usb 2-1: config 1 has no interface number 0 [ 1622.318637][ T890] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 32 [ 1622.333724][ T5842] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1622.341341][ T5842] usb 6-1: invalid MIDI out EP 0 [ 1622.358014][ T890] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1622.404971][ T890] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1622.435491][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.458942][ T890] usb 2-1: Product: syz [ 1622.475422][ T890] usb 2-1: Manufacturer: syz [ 1622.488103][ T890] usb 2-1: SerialNumber: syz [ 1622.500414][ T5842] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1622.556553][T24472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1622.580849][T24472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1622.652895][ T890] usb 2-1: Error in usbnet_get_endpoints (-22) [ 1622.678172][T24482] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1622.691084][T24482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1622.703898][T24482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4541'. [ 1622.733361][ T30] audit: type=1400 audit(2000001278.326:2559): avc: denied { append } for pid=24479 comm="syz.3.4541" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1622.926569][ T890] usb 2-1: USB disconnect, device number 127 [ 1623.771931][T14235] Bluetooth: hci6: Frame reassembly failed (-84) [ 1624.618697][T24499] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1624.632206][T24499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1624.663540][T24499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4542'. [ 1624.881601][ T30] audit: type=1400 audit(2000001280.516:2560): avc: denied { mounton } for pid=24489 comm="syz.3.4544" path="/proc/934/task" dev="proc" ino=88702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1624.953262][ T30] audit: type=1400 audit(2000001280.516:2561): avc: denied { mount } for pid=24489 comm="syz.3.4544" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1625.164851][ T5896] usb 6-1: USB disconnect, device number 6 [ 1625.485999][T24503] FAULT_INJECTION: forcing a failure. [ 1625.485999][T24503] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.498935][T24503] CPU: 0 UID: 0 PID: 24503 Comm: syz.2.4547 Not tainted syzkaller #0 PREEMPT(full) [ 1625.498960][T24503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1625.498971][T24503] Call Trace: [ 1625.498977][T24503] [ 1625.498984][T24503] dump_stack_lvl+0x16c/0x1f0 [ 1625.499014][T24503] should_fail_ex+0x512/0x640 [ 1625.499032][T24503] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1625.499060][T24503] should_failslab+0xc2/0x120 [ 1625.499079][T24503] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1625.499102][T24503] ? __alloc_skb+0x2b2/0x380 [ 1625.499126][T24503] ? __alloc_skb+0x2b2/0x380 [ 1625.499144][T24503] ? __pfx_netlink_insert+0x10/0x10 [ 1625.499166][T24503] __alloc_skb+0x2b2/0x380 [ 1625.499186][T24503] ? __pfx___alloc_skb+0x10/0x10 [ 1625.499206][T24503] ? netlink_autobind.isra.0+0x158/0x370 [ 1625.499236][T24503] netlink_alloc_large_skb+0x69/0x140 [ 1625.499259][T24503] netlink_sendmsg+0x698/0xdd0 [ 1625.499284][T24503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1625.499305][T24503] ____sys_sendmsg+0xa98/0xc70 [ 1625.499322][T24503] ? copy_msghdr_from_user+0x10a/0x160 [ 1625.499336][T24503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1625.499359][T24503] ___sys_sendmsg+0x134/0x1d0 [ 1625.499373][T24503] ? __pfx____sys_sendmsg+0x10/0x10 [ 1625.499385][T24503] ? __lock_acquire+0x622/0x1c90 [ 1625.499418][T24503] __sys_sendmsg+0x16d/0x220 [ 1625.499432][T24503] ? __pfx___sys_sendmsg+0x10/0x10 [ 1625.499456][T24503] do_syscall_64+0xcd/0xfa0 [ 1625.499473][T24503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1625.499485][T24503] RIP: 0033:0x7f1d1078efc9 [ 1625.499495][T24503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1625.499505][T24503] RSP: 002b:00007f1d116f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1625.499516][T24503] RAX: ffffffffffffffda RBX: 00007f1d109e5fa0 RCX: 00007f1d1078efc9 [ 1625.499522][T24503] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1625.499529][T24503] RBP: 00007f1d116f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1625.499535][T24503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1625.499542][T24503] R13: 00007f1d109e6038 R14: 00007f1d109e5fa0 R15: 00007ffc8f1d23c8 [ 1625.499556][T24503] [ 1625.713127][ T5868] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1625.847964][T20072] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1626.270120][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.287252][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1626.986796][ T30] audit: type=1400 audit(2000001282.146:2562): avc: denied { create } for pid=24515 comm="syz.4.4552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1627.083850][ T5868] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1627.244006][ T30] audit: type=1326 audit(2000001282.896:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24512 comm="syz.3.4551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f083e78efc9 code=0x0 [ 1627.419537][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.443227][ T30] audit: type=1400 audit(2000001283.086:2564): avc: denied { read } for pid=24530 comm="syz.2.4554" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1627.546413][ T5868] usb 6-1: config 0 descriptor?? [ 1627.775556][ T5868] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1628.308659][T24541] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1630.033278][ T5868] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1630.278807][T24549] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 1630.288591][T24549] SELinux: failed to load policy [ 1630.551070][ T5868] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 1630.958579][ T5868] usb 3-1: config 0 has no interface number 0 [ 1630.968744][ T5868] usb 3-1: config 0 interface 160 has no altsetting 0 [ 1630.989194][ T5868] usb 3-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1631.016320][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.024892][ T5868] usb 3-1: Product: syz [ 1631.029221][ T5868] usb 3-1: Manufacturer: syz [ 1631.034034][ T5868] usb 3-1: SerialNumber: syz [ 1631.041156][ T5868] usb 3-1: config 0 descriptor?? [ 1631.050064][ T5868] usb-storage 3-1:0.160: USB Mass Storage device detected [ 1631.064982][ T5896] usb 6-1: USB disconnect, device number 7 [ 1631.125196][T24553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=24553 comm=syz.5.4560 [ 1631.284177][ T30] audit: type=1400 audit(2000001286.806:2565): avc: denied { map } for pid=24552 comm="syz.5.4560" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1631.308970][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 1631.320063][ T30] audit: type=1400 audit(2000001286.806:2566): avc: denied { execute } for pid=24552 comm="syz.5.4560" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1632.099991][T24546] SELinux: failed to load policy [ 1632.842903][ T5868] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1633.330147][ T5896] usb 3-1: USB disconnect, device number 124 [ 1633.373582][T20072] Bluetooth: hci6: command 0x1003 tx timeout [ 1633.380190][ T5135] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1633.460686][ T5868] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1633.557347][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1633.703224][ T5868] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1633.723363][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1633.731563][ T5868] usb 2-1: Product: syz [ 1633.736051][ T5868] usb 2-1: Manufacturer: syz [ 1633.740755][ T5868] usb 2-1: SerialNumber: syz [ 1633.772865][ T5868] usb 2-1: config 0 descriptor?? [ 1634.274631][ T5868] usb 2-1: selecting invalid altsetting 0 [ 1634.443673][ T30] audit: type=1326 audit(2000001290.076:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24578 comm="syz.5.4568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ef5f8efc9 code=0x0 [ 1634.871884][T24599] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4571'. [ 1635.088767][T24605] FAULT_INJECTION: forcing a failure. [ 1635.088767][T24605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1635.102257][T24605] CPU: 1 UID: 0 PID: 24605 Comm: syz.1.4565 Not tainted syzkaller #0 PREEMPT(full) [ 1635.102281][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1635.102291][T24605] Call Trace: [ 1635.102299][T24605] [ 1635.102307][T24605] dump_stack_lvl+0x16c/0x1f0 [ 1635.102340][T24605] should_fail_ex+0x512/0x640 [ 1635.102365][T24605] strncpy_from_user+0x3b/0x2e0 [ 1635.102388][T24605] getname_flags.part.0+0x8f/0x550 [ 1635.102417][T24605] getname_flags+0x93/0xf0 [ 1635.102434][T24605] do_sys_openat2+0xb8/0x1d0 [ 1635.102457][T24605] ? __pfx_do_sys_openat2+0x10/0x10 [ 1635.102484][T24605] ? __pfx___schedule+0x10/0x10 [ 1635.102511][T24605] __x64_sys_openat+0x174/0x210 [ 1635.102539][T24605] ? __pfx___x64_sys_openat+0x10/0x10 [ 1635.102572][T24605] do_syscall_64+0xcd/0xfa0 [ 1635.102603][T24605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.102622][T24605] RIP: 0033:0x7fbe55f8d810 [ 1635.102636][T24605] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1635.102657][T24605] RSP: 002b:00007fbe541f5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1635.102675][T24605] RAX: ffffffffffffffda RBX: 00000000008c4201 RCX: 00007fbe55f8d810 [ 1635.102687][T24605] RDX: 00000000008c4201 RSI: 00007fbe541f5c10 RDI: 00000000ffffff9c [ 1635.102698][T24605] RBP: 00007fbe541f5c10 R08: 0000000000000000 R09: 00236f696475612f [ 1635.102709][T24605] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1635.102720][T24605] R13: 00007fbe561e6218 R14: 00007fbe561e6180 R15: 00007ffe2ecfd998 [ 1635.102746][T24605] [ 1636.050837][ T30] audit: type=1400 audit(2000001291.696:2568): avc: denied { create } for pid=24614 comm="syz.3.4574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1636.129827][ T30] audit: type=1400 audit(2000001291.696:2569): avc: denied { write } for pid=24614 comm="syz.3.4574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1636.154797][ T30] audit: type=1400 audit(2000001291.726:2570): avc: denied { create } for pid=24610 comm="syz.5.4575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1636.321782][ T24] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1636.330661][ T5868] usb 2-1: USB disconnect, device number 2 [ 1636.341961][ T30] audit: type=1400 audit(2000001291.726:2571): avc: denied { ioctl } for pid=24610 comm="syz.5.4575" path="socket:[88992]" dev="sockfs" ino=88992 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1636.392855][ T30] audit: type=1400 audit(2000001291.726:2572): avc: denied { write } for pid=24610 comm="syz.5.4575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1636.497198][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1636.507939][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.554811][ T24] usb 4-1: Product: syz [ 1636.562448][ T30] audit: type=1326 audit(2000001292.206:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24619 comm="syz.2.4576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d1078efc9 code=0x0 [ 1636.645999][ T24] usb 4-1: Manufacturer: syz [ 1636.769157][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 1636.775706][ T24] usb 4-1: SerialNumber: syz [ 1638.803171][ T5135] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1638.929561][ T30] audit: type=1400 audit(2000001294.576:2574): avc: denied { name_bind } for pid=24614 comm="syz.3.4574" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1639.683694][ T30] audit: type=1400 audit(2000001294.576:2575): avc: denied { ioctl } for pid=24614 comm="syz.3.4574" path="socket:[89063]" dev="sockfs" ino=89063 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1639.708797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.756097][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1639.810830][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1640.353959][T24647] SELinux: failed to load policy [ 1640.712692][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1640.738685][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1640.754712][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1640.828363][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1640.910949][ T24] usb 4-1: USB disconnect, device number 120 [ 1641.043127][ T30] audit: type=1400 audit(2000001296.666:2576): avc: denied { append } for pid=24652 comm="syz.3.4587" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1641.353448][ T24] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1641.524200][ T30] audit: type=1326 audit(2000001297.156:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24648 comm="syz.1.4584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe55f8efc9 code=0x0 [ 1641.604770][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1641.619603][ T24] usb 4-1: config 0 has no interface number 0 [ 1641.650010][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.670269][ T30] audit: type=1326 audit(2000001297.306:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24651 comm="syz.5.4585" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ef5f8efc9 code=0x0 [ 1641.704200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1641.716241][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.802120][ T24] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1641.848284][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.876939][ T24] usb 4-1: config 0 descriptor?? [ 1642.393178][T11782] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1642.415153][T24656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.487252][T24656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.577450][T11782] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1642.587575][T11782] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1642.596065][ T24] usbhid 4-1:0.1: can't add hid device: -71 [ 1642.602222][ T24] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1642.619994][T11782] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1642.649683][T11782] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1642.663274][ T24] usb 4-1: USB disconnect, device number 121 [ 1642.714411][T11782] usb 5-1: Product: syz [ 1642.759572][T11782] usb 5-1: Manufacturer: syz [ 1642.781515][T11782] usb 5-1: SerialNumber: syz [ 1642.810669][T11782] usb 5-1: config 0 descriptor?? [ 1642.821573][T11782] usb 5-1: selecting invalid altsetting 0 [ 1642.993144][ T890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1643.297659][ T30] audit: type=1400 audit(2000001298.686:2579): avc: denied { sqpoll } for pid=24667 comm="syz.4.4588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1643.353441][T24667] mmap: syz.4.4588 (24667): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1643.393140][ T890] usb 2-1: Using ep0 maxpacket: 8 [ 1643.399715][ T890] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1643.407980][ T890] usb 2-1: config 0 has no interface number 0 [ 1643.419434][ T890] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1643.672559][ T890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.697050][ T890] usb 2-1: config 0 descriptor?? [ 1643.813680][ T890] viperboard 2-1:0.143: version 0.00 found at bus 002 address 003 [ 1643.833204][ T890] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1643.856432][ T890] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1643.972351][ T5875] usb 2-1: USB disconnect, device number 3 [ 1644.203329][ T890] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1644.823110][ T890] usb 4-1: Using ep0 maxpacket: 8 [ 1644.838750][ T890] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1644.853064][ T890] usb 4-1: config 0 has no interface number 0 [ 1644.883229][ T890] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1644.931952][ T890] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1644.965725][ T890] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1644.993259][ T890] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1645.200909][ T890] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1645.210335][ T890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.226740][ T890] usb 4-1: config 0 descriptor?? [ 1645.242188][ T890] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1645.823826][T24701] SELinux: failed to load policy [ 1646.161662][ T30] audit: type=1400 audit(2000001301.806:2580): avc: denied { create } for pid=24702 comm="syz.1.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1646.210159][T24706] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 1646.510538][T24706] audit: out of memory in audit_log_start [ 1646.730045][T11782] usb 4-1: USB disconnect, device number 122 [ 1647.048267][T11782] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1647.114934][ T24] usb 5-1: USB disconnect, device number 110 [ 1647.939580][T24731] SELinux: failed to load policy [ 1648.163112][ T30] audit: type=1400 audit(2000001303.676:2581): avc: denied { create } for pid=24717 comm="syz.4.4600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1648.328637][ T30] audit: type=1400 audit(2000001303.686:2582): avc: denied { getopt } for pid=24717 comm="syz.4.4600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1648.664899][ T5896] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1648.903134][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1648.934582][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1648.964547][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1648.993126][ T5896] usb 4-1: can't read configurations, error -61 [ 1649.073803][ T30] audit: type=1400 audit(2000001304.716:2583): avc: denied { set_context_mgr } for pid=24739 comm="syz.5.4606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1649.124382][T24740] binder: 24739:24740 ioctl 3b82 200000000100 returned -22 [ 1649.133169][ T5896] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1649.353092][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1649.359791][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1649.374345][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1649.383203][ T5896] usb 4-1: can't read configurations, error -61 [ 1649.402407][ T5896] usb usb4-port1: attempt power cycle [ 1649.473284][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1649.653905][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1649.670120][ T24] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1649.787298][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1649.818049][ T5896] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1649.856185][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.863721][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1649.910623][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1649.915340][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1649.927829][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1649.931484][ T24] usb 6-1: invalid MIDI out EP 0 [ 1650.052048][ T24] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1650.142226][ T5896] usb 4-1: can't read configurations, error -61 [ 1650.333199][ T5896] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1650.385239][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 1650.395217][ T5896] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1650.412967][ T5896] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1650.443123][ T5896] usb 4-1: can't read configurations, error -61 [ 1650.459517][ T5896] usb usb4-port1: unable to enumerate USB device [ 1650.684373][T24744] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4607'. [ 1650.984946][T24757] Bluetooth: MGMT ver 1.23 [ 1651.543175][ T24] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1651.566825][ T30] audit: type=1400 audit(2000001307.216:2584): avc: denied { watch watch_reads } for pid=24763 comm="syz.4.4613" path="/293" dev="tmpfs" ino=1566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1651.744629][ T24] usb 3-1: config 0 has an invalid interface number: 160 but max is 0 [ 1651.766042][ T24] usb 3-1: config 0 has no interface number 0 [ 1651.798409][ T24] usb 3-1: config 0 interface 160 has no altsetting 0 [ 1651.822885][ T24] usb 3-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1651.874897][T24773] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1651.875973][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.901914][ T24] usb 3-1: Product: syz [ 1651.912443][ T24] usb 3-1: Manufacturer: syz [ 1651.919780][ T24] usb 3-1: SerialNumber: syz [ 1651.997102][ T24] usb 3-1: config 0 descriptor?? [ 1652.099062][T24776] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4617'. [ 1652.317784][ T24] usb-storage 3-1:0.160: USB Mass Storage device detected [ 1652.438758][ T5875] usb 6-1: USB disconnect, device number 8 [ 1653.057667][ T30] audit: type=1400 audit(2000001308.336:2585): avc: denied { write } for pid=24782 comm="syz.5.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1653.082119][T24786] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1653.112158][ T30] audit: type=1400 audit(2000001308.336:2586): avc: denied { write } for pid=24782 comm="syz.5.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1653.147708][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'. [ 1653.281373][ T30] audit: type=1400 audit(2000001308.926:2587): avc: denied { read write } for pid=24770 comm="syz.1.4615" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1653.338307][ T30] audit: type=1400 audit(2000001308.926:2588): avc: denied { open } for pid=24770 comm="syz.1.4615" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1653.408853][ T30] audit: type=1400 audit(2000001309.016:2589): avc: denied { read write } for pid=24791 comm="syz.4.4620" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1653.463396][ T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1653.477670][ T30] audit: type=1400 audit(2000001309.016:2590): avc: denied { open } for pid=24791 comm="syz.4.4620" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1653.547913][ T30] audit: type=1400 audit(2000001309.016:2591): avc: denied { ioctl } for pid=24791 comm="syz.4.4620" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1653.585680][ T30] audit: type=1400 audit(2000001309.056:2592): avc: denied { read write } for pid=23645 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1653.615734][ T30] audit: type=1400 audit(2000001309.056:2593): avc: denied { open } for pid=23645 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1653.640583][ T30] audit: type=1400 audit(2000001309.056:2594): avc: denied { ioctl } for pid=23645 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1653.676502][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1653.956775][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.003398][ T30] audit: type=1400 audit(2000001309.056:2595): avc: denied { ioctl } for pid=24785 comm="syz.3.4618" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1654.016831][ T24] usb 4-1: Product: syz [ 1654.054467][ T24] usb 4-1: Manufacturer: syz [ 1654.055043][ T5896] usb 3-1: USB disconnect, device number 125 [ 1654.059098][ T24] usb 4-1: SerialNumber: syz [ 1654.078419][ T30] audit: type=1400 audit(2000001309.116:2596): avc: denied { prog_load } for pid=24793 comm="syz.5.4621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1654.107227][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1654.157362][T11782] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1654.232025][T24805] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4624'. [ 1654.323342][ T5868] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1654.916830][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 1654.927891][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1655.143974][ T5868] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1655.660085][T11782] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1655.671797][ T24] usb 4-1: USB disconnect, device number 127 [ 1655.709469][T11782] ath9k_htc: Failed to initialize the device [ 1655.715846][ T5868] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1655.749325][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 1655.759182][ T5868] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1655.787930][ T5868] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1655.815541][ T5868] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1655.894660][T24812] SELinux: failed to load policy [ 1656.527891][ T5868] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1656.540372][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.833176][ T5868] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1657.023171][ T5896] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1657.041080][ T5868] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1657.189333][ T5868] usb 2-1: USB disconnect, device number 4 [ 1657.203393][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 1657.212161][ T5896] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1657.232811][ T5896] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1657.289771][ T5896] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1657.308959][ T5896] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1657.319043][ T5896] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1657.329101][ T5896] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1657.351589][ T5896] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1657.413477][T11782] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1657.416395][T24834] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4630'. [ 1657.727707][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.785180][ T5896] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1657.894465][T11782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.924711][T11782] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1658.054002][T11782] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1658.068073][T11782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.098250][ T5896] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1658.102819][T11782] usb 4-1: config 0 descriptor?? [ 1658.123844][T11782] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1658.182861][ T5896] usb 5-1: USB disconnect, device number 111 [ 1658.490429][T24844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4632'. [ 1658.563674][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 1658.563708][ T30] audit: type=1400 audit(2000001314.156:2652): avc: denied { ioctl } for pid=24841 comm="syz.1.4632" path="/dev/sg0" dev="devtmpfs" ino=761 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1658.800267][T24846] fuse: Bad value for 'fd' [ 1659.901200][ T30] audit: type=1400 audit(2000001314.176:2653): avc: denied { read write } for pid=24841 comm="syz.1.4632" name="vbi4" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1659.933865][ T30] audit: type=1400 audit(2000001314.176:2654): avc: denied { open } for pid=24841 comm="syz.1.4632" path="/dev/vbi4" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1659.959272][ T30] audit: type=1400 audit(2000001314.186:2655): avc: denied { ioctl } for pid=24841 comm="syz.1.4632" path="/dev/vbi4" dev="devtmpfs" ino=980 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1659.984545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1659.992421][ T30] audit: type=1400 audit(2000001314.446:2656): avc: denied { mounton } for pid=24829 comm="syz.3.4631" path="/289/file0" dev="tmpfs" ino=1543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1660.017192][ T30] audit: type=1400 audit(2000001314.516:2657): avc: denied { read write } for pid=24829 comm="syz.3.4631" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1660.076460][ T30] audit: type=1400 audit(2000001314.516:2658): avc: denied { open } for pid=24829 comm="syz.3.4631" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1660.101898][ C1] vkms_vblank_simulate: vblank timer overrun [ 1660.206298][ T30] audit: type=1400 audit(2000001315.576:2659): avc: denied { unmount } for pid=18648 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1660.228326][ T30] audit: type=1400 audit(2000001315.856:2660): avc: denied { write } for pid=24849 comm="syz.1.4633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1660.310957][T24854] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4634'. [ 1660.573173][T11782] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1660.778298][ T30] audit: type=1400 audit(2000001316.366:2661): avc: denied { getopt } for pid=24856 comm="syz.5.4636" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1660.799268][T11782] usb 5-1: Using ep0 maxpacket: 8 [ 1660.819354][T11782] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1661.051676][T11782] usb 5-1: config 0 has no interface number 0 [ 1661.076190][T11782] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1661.114855][T11782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.162680][T11782] usb 5-1: config 0 descriptor?? [ 1661.245412][ T24] usb 4-1: USB disconnect, device number 2 [ 1661.316012][T11782] viperboard 5-1:0.143: version 0.00 found at bus 005 address 112 [ 1661.333301][ T5868] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1661.409954][T11782] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1661.421742][T24857] SELinux: failed to load policy [ 1661.429162][T11782] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1661.463475][ T5868] usb 6-1: device descriptor read/64, error -71 [ 1661.480108][T11782] usb 5-1: USB disconnect, device number 112 [ 1661.651716][T24871] SELinux: failed to load policy [ 1661.713234][ T5868] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1661.714876][ T5896] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1661.783145][ T890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1661.853124][ T5868] usb 6-1: device descriptor read/64, error -71 [ 1661.883266][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 1661.890431][ T5896] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 1661.898701][ T5896] usb 3-1: config 0 has no interface number 0 [ 1661.904882][ T5896] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1661.914019][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.924930][ T5896] usb 3-1: config 0 descriptor?? [ 1661.943440][ T890] usb 4-1: Using ep0 maxpacket: 8 [ 1661.963606][ T5868] usb usb6-port1: attempt power cycle [ 1661.981643][ T890] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1662.000218][ T890] usb 4-1: config 0 has no interface number 0 [ 1662.007032][ T890] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1662.016196][ T890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.036375][ T890] usb 4-1: config 0 descriptor?? [ 1662.043639][ T5896] viperboard 3-1:0.143: version 0.00 found at bus 003 address 126 [ 1662.053110][T11782] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1662.103871][ T5896] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1662.119010][ T5896] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1662.167447][ T5896] usb 3-1: USB disconnect, device number 126 [ 1662.202971][ T890] viperboard 4-1:0.143: version 0.00 found at bus 004 address 003 [ 1662.318404][ T5868] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1662.327022][T11782] usb 2-1: Using ep0 maxpacket: 8 [ 1662.339779][ T890] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1662.344027][T11782] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1662.354459][ T890] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 1662.382783][ T5868] usb 6-1: device descriptor read/8, error -71 [ 1662.387163][ T890] usb 4-1: USB disconnect, device number 3 [ 1662.420877][T11782] usb 2-1: config 0 has no interface number 0 [ 1662.427957][T11782] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1662.440528][T11782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.517136][T11782] usb 2-1: config 0 descriptor?? [ 1662.663528][ T5868] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1662.708239][T11782] viperboard 2-1:0.143: version 0.00 found at bus 002 address 005 [ 1662.734024][ T5868] usb 6-1: device descriptor read/8, error -71 [ 1662.755087][T11782] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1662.773147][T11782] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1662.801877][T11782] usb 2-1: USB disconnect, device number 5 [ 1662.864637][ T5868] usb usb6-port1: unable to enumerate USB device [ 1663.701991][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1663.702007][ T30] audit: type=1400 audit(2000001319.346:2671): avc: denied { create } for pid=24901 comm="syz.4.4650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1664.053524][ T30] audit: type=1400 audit(2000001319.596:2672): avc: denied { execute } for pid=24901 comm="syz.4.4650" name="file0" dev="tmpfs" ino=1631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1664.331797][T24906] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1664.475729][T24906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4649'. [ 1664.484883][ T30] audit: type=1400 audit(2000001319.596:2673): avc: denied { execute_no_trans } for pid=24901 comm="syz.4.4650" path="/305/file0" dev="tmpfs" ino=1631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1664.607212][ T30] audit: type=1400 audit(2000001320.116:2674): avc: denied { setopt } for pid=24904 comm="syz.1.4649" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1664.863134][ T5896] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1665.053413][ T30] audit: type=1326 audit(2000001320.616:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24907 comm="syz.5.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef5f8efc9 code=0x7fc00000 [ 1665.127440][ T5896] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1665.155668][ T30] audit: type=1400 audit(2000001320.696:2676): avc: denied { ioctl } for pid=24918 comm="syz.3.4655" path="socket:[89969]" dev="sockfs" ino=89969 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1665.193514][ T30] audit: type=1400 audit(2000001320.696:2677): avc: denied { bind } for pid=24918 comm="syz.3.4655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1665.465689][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.552996][ T30] audit: type=1400 audit(2000001320.696:2678): avc: denied { write } for pid=24918 comm="syz.3.4655" path="socket:[89969]" dev="sockfs" ino=89969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1665.582833][ T5896] usb 2-1: Product: syz [ 1665.613370][ T30] audit: type=1400 audit(2000001320.696:2679): avc: denied { map } for pid=24916 comm="syz.4.4653" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1665.640547][ T30] audit: type=1400 audit(2000001320.696:2680): avc: denied { execute } for pid=24916 comm="syz.4.4653" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1665.682224][ T5896] usb 2-1: Manufacturer: syz [ 1665.763446][ T5875] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1665.793966][ T5896] usb 2-1: SerialNumber: syz [ 1665.875623][ T5896] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1666.011046][T15812] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1666.053165][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 1666.114742][T24932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1666.123811][T24932] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1666.399829][ T5896] usb 2-1: USB disconnect, device number 6 [ 1666.415327][T15812] usb 2-1: ath9k_htc: Unable to allocate URBs [ 1666.422787][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1666.445423][ T5875] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1666.456008][ T5875] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1666.466451][ T5896] usb 2-1: ath9k_htc: USB layer deinitialized [ 1666.483964][ T5875] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1666.498915][ T5875] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1666.510528][ T5875] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1666.517345][ T5875] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1666.537678][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.579132][ T5875] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1667.401713][ T5875] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1667.423339][ T5896] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1667.444982][ T5875] usb 3-1: USB disconnect, device number 127 [ 1667.603851][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 1667.674051][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1667.675579][T24945] overlayfs: failed to resolve './file0': -2 [ 1667.693097][ T5896] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1667.816033][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4662'. [ 1667.838582][T11782] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1668.128134][ T5896] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1668.138022][ T5896] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1668.147916][ T5896] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1668.213271][ T5896] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1668.231857][ T5896] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1668.241972][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.264341][ T5896] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1668.455108][T11782] usb 4-1: Using ep0 maxpacket: 16 [ 1668.504521][T11782] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1668.561961][T11782] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1668.584646][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.603308][T11782] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1668.623162][T11782] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1668.635879][T11782] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1668.653733][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4665'. [ 1668.672313][T11782] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1668.723242][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1668.723259][ T30] audit: type=1326 audit(2000001324.336:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24950 comm="syz.2.4663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d1078efc9 code=0x0 [ 1668.760735][ T5896] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1668.771240][T11782] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1668.782846][T11782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.821914][ T30] audit: type=1400 audit(2000001324.396:2746): avc: denied { write } for pid=24959 comm="syz.1.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1668.880747][T11782] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1669.167844][ T30] audit: type=1400 audit(2000001324.806:2747): avc: denied { name_connect } for pid=24959 comm="syz.1.4664" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1669.186848][ T5896] usb 6-1: USB disconnect, device number 13 [ 1669.188145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.349924][T11782] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1669.494229][T11782] usb 4-1: USB disconnect, device number 4 [ 1670.297478][ T30] audit: type=1400 audit(2000001325.946:2748): avc: denied { ioctl } for pid=24980 comm="syz.5.4669" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=90864 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1670.323527][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.031937][ T30] audit: type=1400 audit(2000001326.616:2749): avc: denied { setopt } for pid=24985 comm="syz.2.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1671.052166][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.143166][T11782] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1671.256150][ T30] audit: type=1400 audit(2000001326.736:2750): avc: denied { create } for pid=24985 comm="syz.2.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1671.277386][ T30] audit: type=1400 audit(2000001326.736:2751): avc: denied { connect } for pid=24985 comm="syz.2.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1671.321316][ T30] audit: type=1400 audit(2000001326.736:2752): avc: denied { write } for pid=24985 comm="syz.2.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1671.354492][T11782] usb 4-1: Using ep0 maxpacket: 16 [ 1671.362513][T11782] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1671.372679][T11782] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1671.383622][T11782] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1671.397043][T11782] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1671.408031][T11782] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1671.420264][T11782] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1671.427965][T11782] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1671.437575][T11782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.461844][T11782] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1671.652838][T24995] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1671.720928][T24995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1671.849998][T11782] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1671.888013][T11782] usb 4-1: USB disconnect, device number 5 [ 1671.901378][ T30] audit: type=1400 audit(2000001327.536:2753): avc: denied { create } for pid=24996 comm="syz.5.4673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1672.023138][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1672.178856][ T5896] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1672.222031][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.259849][ T5896] usb 2-1: Product: syz [ 1672.281378][ T5896] usb 2-1: Manufacturer: syz [ 1672.302109][ T5896] usb 2-1: SerialNumber: syz [ 1672.371641][ T5896] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1672.392352][ T30] audit: type=1400 audit(2000001328.036:2754): avc: denied { block_suspend } for pid=25001 comm="syz.2.4674" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1672.568678][ T5875] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1672.857748][T11782] usb 2-1: USB disconnect, device number 7 [ 1673.013100][ T5896] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1673.203360][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 1673.213554][ T5896] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 1673.335699][ T5896] usb 4-1: config 0 has no interface number 0 [ 1673.355945][ T5896] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1673.438966][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.532009][ T5896] usb 4-1: config 0 descriptor?? [ 1673.621182][ T5875] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1673.764342][ T5875] ath9k_htc: Failed to initialize the device [ 1673.824167][T11782] usb 2-1: ath9k_htc: USB layer deinitialized [ 1673.865843][ T5896] viperboard 4-1:0.143: version 0.00 found at bus 004 address 006 [ 1673.922381][ T5896] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1673.974389][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1673.974403][ T30] audit: type=1400 audit(2000001329.596:2756): avc: denied { read } for pid=25017 comm="syz.1.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1674.073103][ T5868] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1674.081319][ T5896] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1674.099654][ T30] audit: type=1400 audit(2000001329.716:2757): avc: denied { write } for pid=25017 comm="syz.1.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1674.119051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.154762][ T30] audit: type=1400 audit(2000001329.716:2758): avc: denied { getopt } for pid=25017 comm="syz.1.4678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1674.300201][ T5868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.317383][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1674.415506][ T5868] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1674.434091][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.449149][ T5868] usb 5-1: config 0 descriptor?? [ 1674.462011][ T5868] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1674.504161][ T5896] usb 4-1: USB disconnect, device number 6 [ 1674.593930][ T30] audit: type=1400 audit(2000001330.236:2759): avc: denied { connect } for pid=25027 comm="syz.5.4682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1674.791129][T25036] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 1674.808598][ T30] audit: type=1400 audit(2000001330.276:2760): avc: denied { bind } for pid=25027 comm="syz.5.4682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1674.841482][ T30] audit: type=1400 audit(2000001330.276:2761): avc: denied { name_bind } for pid=25027 comm="syz.5.4682" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1674.899384][ T30] audit: type=1400 audit(2000001330.276:2762): avc: denied { node_bind } for pid=25027 comm="syz.5.4682" saddr=ff01::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1674.921202][ C1] vkms_vblank_simulate: vblank timer overrun [ 1674.943411][ T30] audit: type=1400 audit(2000001330.456:2763): avc: denied { create } for pid=25030 comm="syz.3.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1674.965102][ T30] audit: type=1400 audit(2000001330.546:2764): avc: denied { bind } for pid=25030 comm="syz.3.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1674.965145][ T30] audit: type=1400 audit(2000001330.576:2765): avc: denied { setopt } for pid=25030 comm="syz.3.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1675.143162][ T5875] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1675.167977][T25040] fuse: Bad value for 'fd' [ 1675.273166][ T5896] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1675.353124][ T5842] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 1675.413202][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 1675.427841][ T5875] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 1675.445465][ T5875] usb 6-1: config 0 has no interface number 0 [ 1675.451993][ T5875] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1675.462623][ T5896] usb 4-1: config 0 has an invalid interface number: 160 but max is 0 [ 1675.470927][ T5896] usb 4-1: config 0 has no interface number 0 [ 1675.477302][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.485572][ T5896] usb 4-1: config 0 interface 160 has no altsetting 0 [ 1675.500482][ T5875] usb 6-1: config 0 descriptor?? [ 1675.508460][ T5896] usb 4-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4 [ 1675.522598][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.531595][ T5896] usb 4-1: Product: syz [ 1675.536865][ T5896] usb 4-1: Manufacturer: syz [ 1675.541935][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.552923][ T5842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1675.562148][ T5896] usb 4-1: SerialNumber: syz [ 1675.582565][ T5896] usb 4-1: config 0 descriptor?? [ 1675.591905][ T5842] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1675.604247][ T5842] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1675.616250][ T5896] usb-storage 4-1:0.160: USB Mass Storage device detected [ 1675.626590][ T5842] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1675.635866][ T5875] viperboard 6-1:0.143: version 0.00 found at bus 006 address 014 [ 1675.672396][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.709785][ T5875] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1675.721744][T25039] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1675.744134][ T5842] hub 2-1:1.0: bad descriptor, ignoring hub [ 1675.756893][ T5875] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1675.773053][ T5842] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1675.793655][ T5842] cdc_wdm 2-1:1.0: skipping garbage [ 1675.801068][ T5875] usb 6-1: USB disconnect, device number 14 [ 1675.808154][ T5842] cdc_wdm 2-1:1.0: skipping garbage [ 1675.826615][ T5842] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1675.995873][T25036] sctp: [Deprecated]: syz.1.4685 (pid 25036) Use of int in max_burst socket option. [ 1675.995873][T25036] Use struct sctp_assoc_value instead [ 1676.214793][T25046] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1676.223782][T25046] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1676.528555][ T5875] usb 2-1: USB disconnect, device number 8 [ 1677.088209][ T5868] usb 5-1: USB disconnect, device number 113 [ 1677.141574][T25049] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4688'. [ 1677.492766][T25063] FAULT_INJECTION: forcing a failure. [ 1677.492766][T25063] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.506165][T25063] CPU: 0 UID: 0 PID: 25063 Comm: syz.4.4689 Not tainted syzkaller #0 PREEMPT(full) [ 1677.506189][T25063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1677.506201][T25063] Call Trace: [ 1677.506207][T25063] [ 1677.506215][T25063] dump_stack_lvl+0x16c/0x1f0 [ 1677.506245][T25063] should_fail_ex+0x512/0x640 [ 1677.506276][T25063] should_failslab+0xc2/0x120 [ 1677.506297][T25063] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1677.506323][T25063] ? dst_alloc+0x99/0x1a0 [ 1677.506348][T25063] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1677.506370][T25063] ? dst_alloc+0x99/0x1a0 [ 1677.506387][T25063] dst_alloc+0x99/0x1a0 [ 1677.506409][T25063] ip6_create_rt_rcu+0x29e/0x590 [ 1677.506429][T25063] ? __pfx_ip6_create_rt_rcu+0x10/0x10 [ 1677.506449][T25063] ? fib6_select_path+0x7a3/0x1180 [ 1677.506474][T25063] ip6_pol_route_lookup+0xbfb/0x1e10 [ 1677.506506][T25063] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 1677.506533][T25063] ? finish_task_switch.isra.0+0x221/0xc10 [ 1677.506556][T25063] ? lockdep_hardirqs_on+0x7c/0x110 [ 1677.506581][T25063] ? finish_task_switch.isra.0+0x221/0xc10 [ 1677.506604][T25063] ? rcu_is_watching+0x12/0xc0 [ 1677.506631][T25063] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 1677.506650][T25063] fib6_rule_lookup+0x56a/0x720 [ 1677.506672][T25063] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1677.506700][T25063] ? __pfx___schedule+0x10/0x10 [ 1677.506731][T25063] rt6_lookup+0x16b/0x220 [ 1677.506755][T25063] ? __pfx_rt6_lookup+0x10/0x10 [ 1677.506794][T25063] ip6_mc_find_dev.part.0+0x6c/0x360 [ 1677.506818][T25063] ip6_mc_find_idev+0x34/0xe0 [ 1677.506841][T25063] ip6_mc_source+0x1a4/0x15c0 [ 1677.506865][T25063] ? __ipv6_sock_mc_join+0x2eb/0x8e0 [ 1677.506896][T25063] do_ipv6_mcast_group_source+0x183/0x260 [ 1677.506918][T25063] ? __pfx_do_ipv6_mcast_group_source+0x10/0x10 [ 1677.506962][T25063] ? preempt_schedule_thunk+0x16/0x30 [ 1677.506998][T25063] do_ipv6_setsockopt+0x26b8/0x44b0 [ 1677.507017][T25063] ? rcu_is_watching+0x10/0xc0 [ 1677.507042][T25063] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1677.507059][T25063] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1677.507097][T25063] ? __pfx___schedule+0x10/0x10 [ 1677.507134][T25063] ? rcu_is_watching+0x12/0xc0 [ 1677.507155][T25063] ? irqentry_exit+0x3b/0x90 [ 1677.507179][T25063] ? lockdep_hardirqs_on+0x7c/0x110 [ 1677.507214][T25063] ? ipv6_setsockopt+0xcb/0x170 [ 1677.507230][T25063] ipv6_setsockopt+0xcb/0x170 [ 1677.507252][T25063] udpv6_setsockopt+0x7d/0xd0 [ 1677.507280][T25063] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1677.507309][T25063] do_sock_setsockopt+0xf3/0x1d0 [ 1677.507338][T25063] __sys_setsockopt+0x1a0/0x230 [ 1677.507363][T25063] __x64_sys_setsockopt+0xbd/0x160 [ 1677.507383][T25063] ? do_syscall_64+0x91/0xfa0 [ 1677.507408][T25063] ? lockdep_hardirqs_on+0x7c/0x110 [ 1677.507432][T25063] do_syscall_64+0xcd/0xfa0 [ 1677.507459][T25063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.507476][T25063] RIP: 0033:0x7f4f04f8efc9 [ 1677.507491][T25063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.507507][T25063] RSP: 002b:00007f4f05db9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1677.507525][T25063] RAX: ffffffffffffffda RBX: 00007f4f051e6180 RCX: 00007f4f04f8efc9 [ 1677.507537][T25063] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000009 [ 1677.507547][T25063] RBP: 00007f4f05db9090 R08: 0000000000000108 R09: 0000000000000000 [ 1677.507558][T25063] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1677.507568][T25063] R13: 00007f4f051e6218 R14: 00007f4f051e6180 R15: 00007ffebf193d58 [ 1677.507594][T25063] [ 1677.995692][ T5842] usb 4-1: USB disconnect, device number 7 [ 1678.843322][T25079] overlayfs: missing 'lowerdir' [ 1679.349496][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1679.349514][ T30] audit: type=1400 audit(2000001334.596:2771): avc: denied { create } for pid=25077 comm="syz.1.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1679.613949][ T5842] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1679.614976][ T30] audit: type=1400 audit(2000001334.606:2772): avc: denied { write } for pid=25077 comm="syz.1.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1679.650385][ T30] audit: type=1400 audit(2000001334.606:2773): avc: denied { nlmsg_write } for pid=25077 comm="syz.1.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1680.136718][ T30] audit: type=1400 audit(2000001335.776:2774): avc: denied { read } for pid=25051 comm="syz.2.4687" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1680.285063][T25091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4695'. [ 1680.613074][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 1680.619534][ T5842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1680.628605][ T5842] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1680.638548][ T5842] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1680.649107][ T30] audit: type=1400 audit(2000001335.776:2775): avc: denied { open } for pid=25051 comm="syz.2.4687" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1680.696235][ T5842] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1680.744912][ T5842] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1680.755582][ T5842] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1680.758943][ T30] audit: type=1400 audit(2000001335.776:2776): avc: denied { ioctl } for pid=25051 comm="syz.2.4687" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1680.799847][ T5842] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1680.915679][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.930740][ T5842] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1680.973462][ T890] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 1681.116309][ T30] audit: type=1400 audit(2000001336.766:2777): avc: denied { mounton } for pid=25100 comm="syz.2.4700" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1681.116729][T25101] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 1681.185779][ T890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.213316][T11782] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1681.226303][ T890] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1681.272574][ T890] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1681.291823][ T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.304010][ T5842] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1681.323647][ T890] usb 5-1: Product: syz [ 1681.342531][ T890] usb 5-1: Manufacturer: syz [ 1681.358080][ T5842] usb 6-1: USB disconnect, device number 15 [ 1681.374615][T11782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.385311][T11782] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1681.414016][T11782] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1681.423319][T11782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.533340][ T890] usb 5-1: SerialNumber: syz [ 1681.555220][T11782] usb 4-1: config 0 descriptor?? [ 1681.562895][ T890] usb 5-1: config 0 descriptor?? [ 1681.566534][T11782] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1681.593576][ T5868] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 1681.754474][ T5868] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.785772][ T5868] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1681.795539][ T5868] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1681.807608][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 1681.818672][ T5868] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1681.827906][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.844111][T25102] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1682.024491][ T5868] hub 3-1:1.0: bad descriptor, ignoring hub [ 1682.030414][ T5868] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1682.044020][ T5868] cdc_wdm 3-1:1.0: skipping garbage [ 1682.049566][ T5868] cdc_wdm 3-1:1.0: skipping garbage [ 1682.063161][ T5868] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1682.065190][ T890] usb 5-1: USB disconnect, device number 114 [ 1682.077730][T25101] sctp: [Deprecated]: syz.2.4700 (pid 25101) Use of int in max_burst socket option. [ 1682.077730][T25101] Use struct sctp_assoc_value instead [ 1682.097478][ T30] audit: type=1400 audit(2000001337.706:2778): avc: denied { compute_member } for pid=25093 comm="syz.4.4698" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1682.645903][T25106] SELinux: failed to load policy [ 1682.987616][ T5842] usb 3-1: USB disconnect, device number 2 [ 1683.089676][T25108] fuse: Bad value for 'fd' [ 1683.583098][ T5868] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1683.928165][ T31] INFO: task syz.0.4286:23472 blocked for more than 143 seconds. [ 1684.337809][ T31] Not tainted syzkaller #0 [ 1684.365680][ T31] Blocked by coredump. [ 1684.380783][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1684.483975][ T30] audit: type=1400 audit(2000001340.126:2779): avc: denied { name_bind } for pid=25114 comm="syz.1.4703" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1684.506162][ T31] task:syz.0.4286 state:D stack:25912 pid:23472 tgid:23468 ppid:18324 task_flags:0x400548 flags:0x00080007 [ 1684.978166][ T31] Call Trace: [ 1684.982837][ T30] audit: type=1400 audit(2000001340.126:2780): avc: denied { node_bind } for pid=25114 comm="syz.1.4703" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1685.005386][ T31] [ 1685.008644][ T31] __schedule+0x1190/0x5de0 [ 1685.015151][ T5868] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 1685.023389][ T5868] usb 6-1: config 0 has no interface number 0 [ 1685.044486][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1685.051659][ T5868] usb 6-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 1685.060910][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.069869][ T5868] usb 6-1: Product: syz [ 1685.076958][ T31] ? __pfx___schedule+0x10/0x10 [ 1685.082235][ T5868] usb 6-1: Manufacturer: syz [ 1685.087513][ T31] ? find_held_lock+0x2b/0x80 [ 1685.092636][ T31] ? schedule+0x2d7/0x3a0 [ 1685.093125][ T5842] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1685.109783][ T5868] usb 6-1: SerialNumber: syz [ 1685.119770][ T31] schedule+0xe7/0x3a0 [ 1685.125238][ T31] schedule_timeout+0x257/0x290 [ 1685.184096][ T5868] usb 6-1: config 0 descriptor?? [ 1685.196018][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1685.214016][ T31] ? rcu_is_watching+0x12/0xc0 [ 1685.263094][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 1685.277374][ T5868] ttusb_dec_send_command: command bulk message failed: error -22 [ 1685.287019][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1685.292384][ T31] __wait_for_common+0x2fc/0x4e0 [ 1685.297585][ T5868] ttusb-dec 6-1:0.48: probe with driver ttusb-dec failed with error -22 [ 1685.306297][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1685.311810][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1685.319262][ T31] ? find_held_lock+0x2b/0x80 [ 1685.324031][ T31] ? io_wq_put_and_exit+0x22a/0x8a0 [ 1685.329283][ T31] io_wq_put_and_exit+0x271/0x8a0 [ 1685.334775][ T31] ? __pfx_xa_find_after+0x10/0x10 [ 1685.340010][ T31] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 1685.346350][ T31] ? __pfx___might_resched+0x10/0x10 [ 1685.352309][ T31] ? io_uring_del_tctx_node+0x279/0x350 [ 1685.358435][ T31] io_uring_clean_tctx+0x10d/0x190 [ 1685.359079][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.377544][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 1685.405434][ T31] ? percpu_counter_add_batch+0x180/0x200 [ 1685.434256][ T31] io_uring_cancel_generic+0x69c/0x9a0 [ 1685.444120][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1685.451311][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 1685.463285][ T31] ? __pfx___file_ref_put+0x10/0x10 [ 1685.483409][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1685.503327][ T31] ? fput+0xb8/0xd0 [ 1685.532268][ T31] ? io_uring_unreg_ringfd+0xbc/0x130 [ 1685.552887][ T31] do_exit+0x2ce/0x2bf0 [ 1685.563228][ T31] ? __pfx_do_exit+0x10/0x10 [ 1685.624131][ T5842] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1685.633319][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.641657][ T5842] usb 2-1: Product: syz [ 1685.650071][ T5842] usb 2-1: Manufacturer: syz [ 1685.653146][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1685.660920][ T31] ? find_held_lock+0x2b/0x80 [ 1685.666728][ T5842] usb 2-1: SerialNumber: syz [ 1685.671463][ T31] do_group_exit+0xd3/0x2a0 [ 1685.681267][ T31] get_signal+0x2671/0x26d0 [ 1685.689269][ T5842] usb 2-1: config 0 descriptor?? [ 1685.695512][ T31] ? __pfx_get_signal+0x10/0x10 [ 1685.704774][ T5842] CoreChips 2-1:0.0: probe with driver CoreChips failed with error -22 [ 1685.713833][ T31] ? do_futex+0x122/0x350 [ 1685.728489][ T31] ? __pfx_do_futex+0x10/0x10 [ 1685.744669][ T31] arch_do_signal_or_restart+0x8f/0x7c0 [ 1685.762829][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1685.783367][ T31] ? __do_sys_rt_sigreturn+0x1da/0x2c0 [ 1685.799506][ T31] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1685.815226][ T31] exit_to_user_mode_loop+0x85/0x130 [ 1685.831434][ T31] do_syscall_64+0x426/0xfa0 [ 1685.846374][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.865994][ T31] RIP: 0033:0x7f987f18efc9 [ 1685.883804][ T31] RSP: 002b:00007f987d3d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1685.965196][ T31] RAX: fffffffffffffe00 RBX: 00007f987f3e6098 RCX: 00007f987f18efc9 [ 1685.974466][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f987f3e6098 [ 1685.986301][ T31] RBP: 00007f987f3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1686.005759][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1686.021978][T25124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.030441][ T31] R13: 00007f987f3e6128 R14: 00007ffe4f9de020 R15: 00007ffe4f9de108 [ 1686.030478][ T31] [ 1686.030594][ T31] [ 1686.030594][ T31] Showing all locks held in the system: [ 1686.040720][T25124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.057702][ T31] 1 lock held by khungtaskd/31: [ 1686.062873][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1686.078271][ T31] 2 locks held by getty/5572: [ 1686.083517][ T31] #0: ffff88814cd330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1686.099804][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1686.120769][ T31] 1 lock held by syz-executor/5797: [ 1686.137703][ T31] 1 lock held by syz.1.4703/25117: [ 1686.154074][ T31] [ 1686.160423][ T31] ============================================= [ 1686.160423][ T31] [ 1686.184610][ T31] NMI backtrace for cpu 1 [ 1686.184626][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1686.184645][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1686.184654][ T31] Call Trace: [ 1686.184660][ T31] [ 1686.184667][ T31] dump_stack_lvl+0x116/0x1f0 [ 1686.184695][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1686.184714][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1686.184738][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1686.184757][ T31] watchdog+0xf3f/0x1170 [ 1686.184782][ T31] ? rcu_is_watching+0x12/0xc0 [ 1686.184804][ T31] ? __pfx_watchdog+0x10/0x10 [ 1686.184822][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1686.184846][ T31] ? __kthread_parkme+0x19e/0x250 [ 1686.184869][ T31] ? __pfx_watchdog+0x10/0x10 [ 1686.184888][ T31] kthread+0x3c5/0x780 [ 1686.184903][ T31] ? __pfx_kthread+0x10/0x10 [ 1686.184920][ T31] ? rcu_is_watching+0x12/0xc0 [ 1686.184939][ T31] ? __pfx_kthread+0x10/0x10 [ 1686.184955][ T31] ret_from_fork+0x675/0x7d0 [ 1686.184968][ T31] ? __pfx_kthread+0x10/0x10 [ 1686.184983][ T31] ret_from_fork_asm+0x1a/0x30 [ 1686.185015][ T31] [ 1686.185025][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1686.307078][ C0] NMI backtrace for cpu 0 [ 1686.307098][ C0] CPU: 0 UID: 0 PID: 25096 Comm: syz.3.4699 Not tainted syzkaller #0 PREEMPT(full) [ 1686.307115][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1686.307124][ C0] RIP: 0010:write_comp_data+0x3c/0x90 [ 1686.307146][ C0] Code: 8b 05 08 5b e4 11 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 7c 16 00 00 85 c0 74 4f <8b> 82 58 16 00 00 83 f8 03 75 44 48 8b 82 60 16 00 00 8b 92 5c 16 [ 1686.307159][ C0] RSP: 0018:ffffc9000c167598 EFLAGS: 00000246 [ 1686.307175][ C0] RAX: 0000000080000000 RBX: ffffea00009f17c0 RCX: ffffffff81f9f964 [ 1686.307190][ C0] RDX: ffff888027c0c900 RSI: 0000000000000000 RDI: 0000000000000001 [ 1686.307199][ C0] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000000 [ 1686.307207][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9000c1676e8 [ 1686.307216][ C0] R13: dffffc0000000000 R14: ffffc9000c167778 R15: 0000000000000000 [ 1686.307225][ C0] FS: 0000000000000000(0000) GS:ffff888124a0a000(0000) knlGS:0000000000000000 [ 1686.307240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1686.307256][ C0] CR2: 000020000028c030 CR3: 00000000558af000 CR4: 00000000003526f0 [ 1686.307265][ C0] Call Trace: [ 1686.307270][ C0] [ 1686.307275][ C0] folios_put_refs+0x204/0x750 [ 1686.307292][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1686.307313][ C0] free_pages_and_swap_cache+0x245/0x4a0 [ 1686.307334][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1686.307377][ C0] ? __pfx___might_resched+0x10/0x10 [ 1686.307403][ C0] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1686.307423][ C0] tlb_finish_mmu+0x168/0x7c0 [ 1686.307442][ C0] exit_mmap+0x3fc/0xb90 [ 1686.307457][ C0] ? exit_aio+0x287/0x350 [ 1686.307477][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1686.307503][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 1686.307519][ C0] __mmput+0x12a/0x410 [ 1686.307535][ C0] mmput+0x62/0x70 [ 1686.307553][ C0] do_exit+0x7c7/0x2bf0 [ 1686.307575][ C0] ? __pfx_do_exit+0x10/0x10 [ 1686.307597][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1686.307612][ C0] ? find_held_lock+0x2b/0x80 [ 1686.307630][ C0] do_group_exit+0xd3/0x2a0 [ 1686.307649][ C0] get_signal+0x2671/0x26d0 [ 1686.307668][ C0] ? __hrtimer_setup+0x176/0x280 [ 1686.307684][ C0] ? hrtimer_nanosleep+0x187/0x380 [ 1686.307701][ C0] ? __pfx_get_signal+0x10/0x10 [ 1686.307721][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1686.307737][ C0] arch_do_signal_or_restart+0x8f/0x7c0 [ 1686.307760][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1686.307779][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1686.307803][ C0] exit_to_user_mode_loop+0x85/0x130 [ 1686.307818][ C0] do_syscall_64+0x426/0xfa0 [ 1686.307838][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1686.307855][ C0] RIP: 0033:0x7f083e7c1885 [ 1686.307865][ C0] Code: Unable to access opcode bytes at 0x7f083e7c185b. [ 1686.307871][ C0] RSP: 002b:00007ffe34ae6440 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1686.307884][ C0] RAX: 0000000000000000 RBX: 00007f083e9e5fa0 RCX: 00007f083e7c1885 [ 1686.307893][ C0] RDX: 00007ffe34ae6480 RSI: 0000000000000000 RDI: 0000000000000000 [ 1686.307905][ C0] RBP: 00007f083e9e7da0 R08: 0000000000000000 R09: 00007f083f5bb000 [ 1686.307914][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000019ba92 [ 1686.307922][ C0] R13: 00007f083e9e6270 R14: ffffffffffffffff R15: 00007ffe34ae65c0 [ 1686.307937][ C0] [ 1686.865078][ T5842] usb 4-1: USB disconnect, device number 8 [ 1686.997605][ T24] usb 6-1: USB disconnect, device number 16 [ 1687.944145][ T24] usb 2-1: USB disconnect, device number 9