last executing test programs: 21m6.185472581s ago: executing program 4 (id=396): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/245, 0xf5}], 0x1, 0x8, 0x9f55, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) syz_io_uring_setup(0x3580, &(0x7f0000000280)={0x0, 0xfffffffd, 0x4, 0xfffffffd, 0x22d, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, 0x0, 0x0) 21m4.196240413s ago: executing program 4 (id=399): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r6) open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r8 = dup(r7) getpeername$packet(r8, 0x0, &(0x7f00000002c0)) r9 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="3b23d9c18b0d409620db2b72646d6120"], 0x6) 21m3.231926016s ago: executing program 4 (id=404): syz_open_dev$cec(0x0, 0x0, 0xd2ec0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x800, 0x1d33861c, 0x9, 0x8, 0x7, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x44, 0x3e8a) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e0000001028005000100000000002400028014000180080001000000"], 0x88}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000e0001006e657464657673696d0000000f00ee006e657464657673696d30000012ff998e000000000002008f0000000000000000000c00900000000000000000"], 0xa0}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40011) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0xffff, 0x2, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 20m59.917069921s ago: executing program 4 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x68, @buffer={0xfb, 0x0, 0x0}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10010, 0x4, 0x0}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002a40)='cpu.pressure\x00', 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40), 0x0, 0x40000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff0200000000000000000000000000013200001200000000020090780000000369c46dea0006ff0800000000000000000000000000000001ff0200000000000000000000000000011d00000000"], 0x0) r5 = signalfd4(r3, &(0x7f00000000c0)={[0xe6]}, 0x8, 0x80800) sendmsg$nl_generic(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000008380)=ANY=[@ANYBLOB="642300001100080026bd7000ffdbdf251800000035237f8008004900", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x2364}}, 0x10) gettid() sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ffffffff000000002100000008000300", @ANYRES32=r2, @ANYBLOB="38002d800a00000002020202020202020200000a00000001", @ANYRESDEC], 0x54}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r6, 0x0, 0x0, 0xfff}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x51, [0xd4, 0x25, 0xb, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x3ca, 0xa, 0x6, 0xf6f, 0x3, 0xe7, 0x7, 0x401, 0xbc60, 0x0, 0x1, 0x4, 0xffff, 0x300, 0xb, 0xf, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x477c2b8a, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000001, 0x401, 0x9, 0xbdc7, 0xb, 0xb1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x7fffffff, 0x9, 0x5, 0x4, 0x0, 0x3a26, 0x1000, 0x57f2, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x5, 0x5, 0xffffffff, 0xfffffffd, 0x557, 0x7, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x20000a, 0x1, 0x9, 0x3, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x5, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x800000, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0x10, 0x4, 0x0, 0x40, 0x10001, 0x8, 0x6, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0x6, 0x0, 0xffffffff, 0x1, 0x9, 0x6, 0xac, 0x0, 0x54, 0xcfb9], [0x6, 0x8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x105, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x5, 0x4ef, 0x69d, 0x8, 0xee, 0x0, 0x0, 0x9, 0x7, 0x4, 0x800, 0x7, 0x6, 0x0, 0x0, 0x1, 0xfffffffe, 0x7, 0x0, 0x9, 0x8c0, 0x9, 0x101, 0x9, 0x7, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0x8, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x81, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x801, 0x606, 0x4, 0x800005, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0xfffffffd, 0x80000000, 0x2, 0x7ff, 0x3ff, 0x0, 0x0, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x6, 0x0, 0x1ff, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x44000006, 0x7, 0x1, 0xc, 0x1, 0x4, 0x100009, 0x100, 0x5, 0x3c, 0xfffffffe, 0x1000, 0xfffffffe, 0x4, 0x8002, 0x7, 0xffffffff, 0x5, 0x7, 0xfffffffc, 0x4, 0x86, 0xeff]}, 0x45c) 20m55.733384091s ago: executing program 4 (id=418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x0, 0x6}, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2000000, 0x0) fstat(r3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000004c0)=0xc) r4 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66801, 0x19d) write$P9_RREADLINK(r4, &(0x7f0000000180)={0x10, 0x17, 0xbffd, {0x7, './file0'}}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 20m39.495324046s ago: executing program 32 (id=420): r0 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setregid(0xffffffffffffffff, 0x0) setuid(0xee01) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x66801, 0x19d) write$P9_RREADLINK(r4, &(0x7f0000000180)={0x10, 0x17, 0xbffd, {0x7, './file0'}}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11m35.092540864s ago: executing program 0 (id=2357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x10, 0x803, 0x0) 11m33.179548967s ago: executing program 0 (id=2360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x121342, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='rcu_utilization\x00', r3}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket(0x1, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) 11m31.25539797s ago: executing program 0 (id=2366): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0x1, @local, 0x1}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x9c, &(0x7f00000002c0)={0x0, 0x89ba, 0x80, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x880, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11m29.89348163s ago: executing program 0 (id=2368): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1ff, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) 11m28.487900772s ago: executing program 0 (id=2370): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r6, 0x0, 0xdf, 0x5f, &(0x7f0000000780)="40759bab43f530256ec6deb56b9fe5385ed7b12696da74d41024bcdb587860726870f01cf62507ad598f453dd7de21bbbdbe512a3eed45b503253162d8a96d93caf03d0e0e293180bbfc93a9dd00252edea5b18fe79d1b5b977630a8f57a3d7deef2ac5a2b594669c00a83fc9d094bec213a910eb45bef8955abcdc8e9d581f41e022b2c595e9809f1dbc83dd6b0bd8f22a60f4d83d99cee2a5ce7c7c3bc2ae7aa19c35833bf4293d4d5e8d3cd99cd6270d9c58c47c549f39491b2b68c5fd6e20938a61c84f796d0306eb9a6f4a57efe98b6575f2678c2f17183bea8082694", &(0x7f0000000880)=""/95, 0x83ec, 0x0, 0xb0, 0xff8, &(0x7f0000000900)="95e6e283edbd3cb122459ae381e10945f3092780f24a035eaa2f2c7564c2852e5cf59375054e0dad9c0b21cf84b92f30407f618c18468b5f246d4ef730ba90ccfface3ff956e5f66e89e0b4b18b94b4cd464af7e8a5253e0058b504a2fef833a547d7b892495a6a96c700e450db1e3f66b99fcc94f1690580e842dbc4b52a1ab06790daa8217eccdaea37bc3034501bf2a1c721c5e44209335882dc02a07e1184426c374d7f6c5bc27270e0b031ec8fd", &(0x7f00000009c0)="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", 0x0, 0x0, 0x42}, 0x50) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 11m27.608899716s ago: executing program 0 (id=2373): socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x2000, 0x0, "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"}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) read(r6, &(0x7f00000003c0)=""/84, 0x54) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r8, 0x0, 0xdf, 0x5f, &(0x7f0000000780)="40759bab43f530256ec6deb56b9fe5385ed7b12696da74d41024bcdb587860726870f01cf62507ad598f453dd7de21bbbdbe512a3eed45b503253162d8a96d93caf03d0e0e293180bbfc93a9dd00252edea5b18fe79d1b5b977630a8f57a3d7deef2ac5a2b594669c00a83fc9d094bec213a910eb45bef8955abcdc8e9d581f41e022b2c595e9809f1dbc83dd6b0bd8f22a60f4d83d99cee2a5ce7c7c3bc2ae7aa19c35833bf4293d4d5e8d3cd99cd6270d9c58c47c549f39491b2b68c5fd6e20938a61c84f796d0306eb9a6f4a57efe98b6575f2678c2f17183bea8082694", &(0x7f0000000880)=""/95, 0x83ec, 0x0, 0xb0, 0xff8, &(0x7f0000000900)="95e6e283edbd3cb122459ae381e10945f3092780f24a035eaa2f2c7564c2852e5cf59375054e0dad9c0b21cf84b92f30407f618c18468b5f246d4ef730ba90ccfface3ff956e5f66e89e0b4b18b94b4cd464af7e8a5253e0058b504a2fef833a547d7b892495a6a96c700e450db1e3f66b99fcc94f1690580e842dbc4b52a1ab06790daa8217eccdaea37bc3034501bf2a1c721c5e44209335882dc02a07e1184426c374d7f6c5bc27270e0b031ec8fd", &(0x7f00000009c0)="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", 0x0, 0x0, 0x42}, 0x50) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001a40)="8d5eae39b728f9b53d878117478d42863d9c039d61b9827ab2eddd105748f0dc093d460ca32d54c4b43cd54f42445ffedc3484c288816bf83e8f2aeeb5dd49f8b7f1cd1078bee7681f5303bae6a83c0aac3658bae9df122da4711cfa397eda1c934fe52fafeeba0fd7f39c24ef940d50d1eee8cb2ed3bb9fc0b6", 0x7a}, {&(0x7f0000000680)="1a8fc6b2990344922a7bff882dc527bf02de948de95b7671af5245b033a379eb2af1f608cbe7d6d5c252ee07761cd37b", 0x30}, {&(0x7f0000001ac0)="7181cc7078", 0x5}, {&(0x7f0000001b00)="a4e51da0c5c508dd14fa26b98f899e5a08c2bd652255f699502d7af774b5befad8854685eba4e6fc7a350357db527c7f216112183702032837c776bb33e6665abf976f71719e080e32309b1dea0dbf6394e9d41fcbb8c3539233b141bd03ec3aa99d79c01bffb2c6cc7371bf4cb8cc56381f5b06884d72eb49ed13", 0x7b}, {&(0x7f0000001b80)="dec6bd3ae1e9395cf81c0e3fe9a7e398b85d5aad66c6648166df723056560d4046f6d3d56627aa8d168d0ddbd5968ab6b3d54b7a7a38c3d365c4442eaccffd8785ffe98721fa02a4ef1264d12787882b3efa19f0391988bc0d60b3d9f0e40a6a6870c807d98d3513fa176ea5c2b25379ebefb8f1f8b785e91f5c1915cba37d5f4aa29828c0e8f9161c9e53b6e067fd3e5c9b0fadcc2856919fbf0cb38a70063492179cf51159a7d236e8d3aba3dec3730cd02c88f4de46610eef3efc9471ad099757a2f83c21c9ec0cccc3d2129e8e5a0a077f592e245466fbd3a95b006918b3ea", 0xe1}, {&(0x7f0000001c80)="b098a36074255f82fcba4024caf03fa14cefc22971e0e34bc4574e7bd2352aa77f34b44ddd83be7560c222a7250e7088786725dd20a829b40e9d4bf621cce8da3d33d580fbf43e216a0e7e07f6837e55", 0x50}], 0x6}, 0x400c0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 11m27.223999922s ago: executing program 33 (id=2373): socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x2000, 0x0, "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"}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) read(r6, &(0x7f00000003c0)=""/84, 0x54) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r8, 0x0, 0xdf, 0x5f, &(0x7f0000000780)="40759bab43f530256ec6deb56b9fe5385ed7b12696da74d41024bcdb587860726870f01cf62507ad598f453dd7de21bbbdbe512a3eed45b503253162d8a96d93caf03d0e0e293180bbfc93a9dd00252edea5b18fe79d1b5b977630a8f57a3d7deef2ac5a2b594669c00a83fc9d094bec213a910eb45bef8955abcdc8e9d581f41e022b2c595e9809f1dbc83dd6b0bd8f22a60f4d83d99cee2a5ce7c7c3bc2ae7aa19c35833bf4293d4d5e8d3cd99cd6270d9c58c47c549f39491b2b68c5fd6e20938a61c84f796d0306eb9a6f4a57efe98b6575f2678c2f17183bea8082694", &(0x7f0000000880)=""/95, 0x83ec, 0x0, 0xb0, 0xff8, &(0x7f0000000900)="95e6e283edbd3cb122459ae381e10945f3092780f24a035eaa2f2c7564c2852e5cf59375054e0dad9c0b21cf84b92f30407f618c18468b5f246d4ef730ba90ccfface3ff956e5f66e89e0b4b18b94b4cd464af7e8a5253e0058b504a2fef833a547d7b892495a6a96c700e450db1e3f66b99fcc94f1690580e842dbc4b52a1ab06790daa8217eccdaea37bc3034501bf2a1c721c5e44209335882dc02a07e1184426c374d7f6c5bc27270e0b031ec8fd", &(0x7f00000009c0)="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", 0x0, 0x0, 0x42}, 0x50) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001a40)="8d5eae39b728f9b53d878117478d42863d9c039d61b9827ab2eddd105748f0dc093d460ca32d54c4b43cd54f42445ffedc3484c288816bf83e8f2aeeb5dd49f8b7f1cd1078bee7681f5303bae6a83c0aac3658bae9df122da4711cfa397eda1c934fe52fafeeba0fd7f39c24ef940d50d1eee8cb2ed3bb9fc0b6", 0x7a}, {&(0x7f0000000680)="1a8fc6b2990344922a7bff882dc527bf02de948de95b7671af5245b033a379eb2af1f608cbe7d6d5c252ee07761cd37b", 0x30}, {&(0x7f0000001ac0)="7181cc7078", 0x5}, {&(0x7f0000001b00)="a4e51da0c5c508dd14fa26b98f899e5a08c2bd652255f699502d7af774b5befad8854685eba4e6fc7a350357db527c7f216112183702032837c776bb33e6665abf976f71719e080e32309b1dea0dbf6394e9d41fcbb8c3539233b141bd03ec3aa99d79c01bffb2c6cc7371bf4cb8cc56381f5b06884d72eb49ed13", 0x7b}, {&(0x7f0000001b80)="dec6bd3ae1e9395cf81c0e3fe9a7e398b85d5aad66c6648166df723056560d4046f6d3d56627aa8d168d0ddbd5968ab6b3d54b7a7a38c3d365c4442eaccffd8785ffe98721fa02a4ef1264d12787882b3efa19f0391988bc0d60b3d9f0e40a6a6870c807d98d3513fa176ea5c2b25379ebefb8f1f8b785e91f5c1915cba37d5f4aa29828c0e8f9161c9e53b6e067fd3e5c9b0fadcc2856919fbf0cb38a70063492179cf51159a7d236e8d3aba3dec3730cd02c88f4de46610eef3efc9471ad099757a2f83c21c9ec0cccc3d2129e8e5a0a077f592e245466fbd3a95b006918b3ea", 0xe1}, {&(0x7f0000001c80)="b098a36074255f82fcba4024caf03fa14cefc22971e0e34bc4574e7bd2352aa77f34b44ddd83be7560c222a7250e7088786725dd20a829b40e9d4bf621cce8da3d33d580fbf43e216a0e7e07f6837e55", 0x50}], 0x6}, 0x400c0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 8m47.589369767s ago: executing program 1 (id=2738): r0 = getpid() r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x22040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGETD(r6, 0x5424, 0x0) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020311020000000000000000000000100800010001"], 0x1c}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0x5, 0x3, 0x4, 0xfffffffe, 'syz0\x00', 0x7fffffff}, 0x2, 0x10, 0x5, r0, 0x0, 0x1ff, 'syz0\x00', 0x0}) 8m43.761635322s ago: executing program 1 (id=2745): modify_ldt$read(0x0, 0x0, 0xfffffffffffffef3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3f}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 8m41.901332663s ago: executing program 1 (id=2748): socket(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast2, 0x80000, 0x6, 0x0, 0x400, 0x6, 0x900066}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRESDEC=r1], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000080)=0xd0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) 8m40.967571162s ago: executing program 1 (id=2750): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) 8m35.707204886s ago: executing program 1 (id=2760): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000800), 0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0), 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) fsetxattr(r4, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f00000000c0)='autofs\x00', 0x7, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(0x0, 0xb) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000080)) 8m34.196347084s ago: executing program 1 (id=2765): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = syz_open_dev$cec(0x0, 0x0, 0xd2ec0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x44, 0x3e8a) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, 0x0, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40011) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002200)=ANY=[@ANYBLOB="f1d6b2343502685e7d85b19d6897bb63d34f05b490c28bc79c80915eae6f6b365f8e9655045c58b5191712f14433e8fb645e78dc89c36762e967ee14f65f94b93a0423d7d0dd019d0041320c131c533cda4fdd05ab8009aa6533c71eaf3a493d3fd36de31005c7dd5f1521aca962ae98ed6c506a6d7e9d31f70272840a030b6de3fed0", @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRESDEC=r7, @ANYRESDEC, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r6, @ANYRES16], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) 8m18.949822954s ago: executing program 34 (id=2765): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = syz_open_dev$cec(0x0, 0x0, 0xd2ec0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0xa, 0x44, 0x3e8a) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, 0x0, 0x1, 0x0, 0x0, {0x2d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff12}, {0x2}, {0xc}}]}, 0xa0}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40011) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002200)=ANY=[@ANYBLOB="f1d6b2343502685e7d85b19d6897bb63d34f05b490c28bc79c80915eae6f6b365f8e9655045c58b5191712f14433e8fb645e78dc89c36762e967ee14f65f94b93a0423d7d0dd019d0041320c131c533cda4fdd05ab8009aa6533c71eaf3a493d3fd36de31005c7dd5f1521aca962ae98ed6c506a6d7e9d31f70272840a030b6de3fed0", @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRESDEC=r7, @ANYRESDEC, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r6, @ANYRES16], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) 18.741330189s ago: executing program 6 (id=4409): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x0) fsmount(r1, 0x0, 0xb) syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sysfs$2(0x2, 0x100000000, &(0x7f0000000200)=""/4096) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80009) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x10, 0x803, 0x0) 14.237468242s ago: executing program 6 (id=4423): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r0, 0x0) 12.802249448s ago: executing program 6 (id=4424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mknod(0x0, 0x8001420, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000003c0)) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={0x0, 0xf, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r2, 0x101, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_io_uring_setup(0x952, &(0x7f0000000480)={0x0, 0xb2f3, 0x10, 0x4, 0x109}, &(0x7f0000000080), &(0x7f0000000040)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)}, 0x1e) 11.70799771s ago: executing program 7 (id=4436): openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4f23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10.035509676s ago: executing program 7 (id=4429): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) 9.825663259s ago: executing program 7 (id=4431): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x6, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, 0x0, 0x20004180) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000002c0)={0x6, 0x1, 0x0, "ee9b6baf21878e5ed730f4706a14d4000091e2e776ab4988d65ca500008000", 0xf6c1a1f}) 9.675524557s ago: executing program 5 (id=4432): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f00000003c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)=r11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f00000003c0)={0x8, 0x1, 0x609152b0, 0x10000000, 0xe, "3eccd2000500"}) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000080)={0x8, 0x5, 0x609152b0, 0x10000000, 0xe, "3eccd2000500ef002100"}) 8.822250345s ago: executing program 7 (id=4433): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xfb, 0xbc, 0x61, 0x20, 0x82d, 0x200, 0xe96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x2, 0x0, 0x47, 0x5f, 0xb5}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae18", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffff7fd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) fsopen(&(0x7f0000000280)='nilfs2\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) 8.670690863s ago: executing program 6 (id=4434): syz_usb_connect(0x5, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r8, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 7.052600168s ago: executing program 5 (id=4435): socket(0x1d, 0x2, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, 0x0) 6.863351273s ago: executing program 2 (id=4437): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00\x17\xec\x7f\xcc\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xe9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xe9\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\x01\x00\x00\x00\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x9f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7!\x17<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x9bb\xff\xdbU`\xc3\xba=\x96H\xe2\xc9\x98\x9c\xf7\x9e\x99\xca|8\x97\xee\xd8\xbf]f\xb1\xef\x15\xde\x8e\xab\x88,\xb7J\xc8\xf01\x16*x]c\x84\x9dz/\rS\xc42\xef\t\xdf\x97&j \x95\xa5\x95\xc8\xd4\xf5\n=\x12\xd6\x97\xf4\xb3\xfa\x93\xda$\x9b-\xe8\xe9/\x9b\xe1W!d\xf9\x0e\xcd\xff\xf2\xfa\xc5\x8d-\xf8\x17\xe1G\x1e\xa5\xa3d\b\xffl\xb6l\xc9\xdc\x82\xb6\x9e\x05LO~b0\'S\x93\xecD\xe2\xd8\xe2\x90\xd9\xd8\xeb&\x9d\xf9T\xf3+\x83x}\xe5\x04\v\xcc\xa2^\x8b\xaf\xb4\x97GMw\x7f\x16\xd7\xdb\x1a\x06N\x99d\xef%\x98H6$\xe1\xed)w\xd5\xb2\xcc\xeb\xd3\xef=\x18\t\x80)\x8b\xb5A', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86c}}) 6.056900353s ago: executing program 5 (id=4438): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) listen(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='GPL\x00', 0x9, 0x92, &(0x7f0000000240)=""/146, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x20010, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0}, 0x20) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 5.513255772s ago: executing program 7 (id=4440): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf05"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x100}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 3.598564568s ago: executing program 6 (id=4441): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', 0x0, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f000001d180)=ANY=[], 0x2168}, 0x40000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) 3.593177309s ago: executing program 2 (id=4442): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, 0x0) syz_open_pts(r4, 0x0) 3.521333057s ago: executing program 3 (id=4443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000240), &(0x7f0000000340)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_setup(0x30, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_cancel(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000001c0)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}}, 0x20}}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, 0x0) 3.333945789s ago: executing program 5 (id=4444): io_uring_setup(0x0, 0x0) r0 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, 0x0, 0x1) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x541200, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)="8d3684af94a7f3d83d2ce7877a7f0330c68cd35f88203e269dfd53476612", 0x1e) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) 2.580878575s ago: executing program 3 (id=4445): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r0, 0x0) 2.367140423s ago: executing program 2 (id=4446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000b80)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x0, 0xfffffffd, 0x8, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x7}, {0x7, 0x80, 0x7, '\x00', 0x4}, {0x43, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x0, '\x00', 0xfa}, {0x4, 0x0, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x0, 0x3, 0x7, '\x00', 0x4}, {0x9, 0x3, 0xa, '\x00', 0x17}, {0x2, 0x33, 0xde, '\x00', 0x1}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x6, 0x6, '\x00', 0x4}, {0x20, 0x9, 0xe, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0xd}, {0x8, 0x7, 0xf6, '\x00', 0x7}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x40, 0x44, '\x00', 0xc}, {0x8f, 0x5, 0x0, '\x00', 0xf3}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 2.134170475s ago: executing program 3 (id=4447): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r0, 0x0) 2.052314659s ago: executing program 3 (id=4448): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x6, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, 0x0, 0x20004180) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0x6, 0x1, 0x0, "ee9b6baf21878e5ed730f4706a14d4000091e2e776ab4988d65ca500008000", 0xf6c1a1f}) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec24, 0x0, 0xfffffffa, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x4000, @fd, 0x5, 0x0, 0x0, 0x6}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x2, 0x2}) 1.924136494s ago: executing program 5 (id=4449): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r2, 0x0, 0xffffffff004) 1.398479449s ago: executing program 7 (id=4450): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_disconnect(r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() r3 = io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) fcntl$getown(r3, 0x9) r4 = syz_pidfd_open(r2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(0x0, 0xd2) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) 823.923767ms ago: executing program 2 (id=4451): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r0, 0x0) 656.529051ms ago: executing program 2 (id=4452): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x41, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r0, 0x0) 455.481587ms ago: executing program 3 (id=4453): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x969c, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r0, 0x0) 124.943725ms ago: executing program 2 (id=4454): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000100), 0x4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1223, 0x3f07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x6, 0xf1, 0x1, {0x22, 0xf72}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x93, 0x4, 0xf9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0xe8}}]}}}]}}]}}, 0x0) 103.658012ms ago: executing program 6 (id=4455): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r2, 0x0, 0xffffffff004) 66.855282ms ago: executing program 3 (id=4456): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') memfd_create(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x1, 0xfffffa16}, 0x28) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, 0x0) syz_open_pts(r4, 0x0) 0s ago: executing program 5 (id=4457): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x6, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x5, 0x4, 0x8000000, 0x5]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, 0x0, 0x20004180) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0x6, 0x1, 0x0, "ee9b6baf21878e5ed730f4706a14d4000091e2e776ab4988d65ca500008000", 0xf6c1a1f}) syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec24, 0x0, 0xfffffffa, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x20, 0x4000, @fd, 0x5, 0x0, 0x0, 0x6}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x8000000, 0x7}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x2, 0x2}) kernel console output (not intermixed with test programs): ][ T5905] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1184.692399][ T5905] smsusb 7-1:1.0: probe with driver smsusb failed with error -71 [ 1184.720590][ T5905] usb 7-1: USB disconnect, device number 13 [ 1185.642925][T18459] lo speed is unknown, defaulting to 1000 [ 1187.216749][T18459] lo speed is unknown, defaulting to 1000 [ 1187.250713][T18453] lo speed is unknown, defaulting to 1000 [ 1188.985127][T18498] PKCS7: Unknown OID: [4] 0.0 [ 1188.989922][T18498] PKCS7: Only support pkcs7_signedData type [ 1189.780754][ T5898] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1190.020486][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 1190.027108][ T5898] usb 4-1: config 2 has an invalid interface number: 20 but max is 0 [ 1190.035200][ T5898] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.078051][ T5898] usb 4-1: config 2 has no interface number 0 [ 1190.119214][T18518] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3184'. [ 1190.354224][ T5898] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93 [ 1190.400040][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.420612][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1190.694466][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1190.701419][ T5898] usb 4-1: string descriptor 0 read error: -71 [ 1190.763493][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1190.840509][ T9] usb 7-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 1190.849542][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.982964][ T9] usb 7-1: config 0 descriptor?? [ 1190.986252][ T5898] peak_usb 4-1:2.20 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1191.349271][T18528] lo speed is unknown, defaulting to 1000 [ 1191.624982][T18528] lo speed is unknown, defaulting to 1000 [ 1191.697313][ T9] hid_parser_main: 5 callbacks suppressed [ 1191.697326][ T9] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 1191.719126][T18532] overlayfs: failed to resolve './file0': -2 [ 1191.725245][ T9] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 1191.734253][ T9] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 1191.741613][ T9] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 1191.748653][ T9] lenovo 0003:04B3:3108.0014: unknown main item tag 0x0 [ 1191.749096][ T5898] peak_usb 4-1:2.20: unable to read PCAN-USB serial number (err -22) [ 1191.776122][ T9] lenovo 0003:04B3:3108.0014: hidraw0: USB HID v0.03 Device [HID 04b3:3108] on usb-dummy_hcd.6-1/input0 [ 1191.899916][ T9] usb 7-1: USB disconnect, device number 14 [ 1192.003150][T18533] fido_id[18533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1192.082554][ T5898] peak_usb 4-1:2.20: probe with driver peak_usb failed with error -22 [ 1192.154780][ T5898] usb 4-1: USB disconnect, device number 48 [ 1192.480115][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3196'. [ 1194.108532][T18573] lo speed is unknown, defaulting to 1000 [ 1194.184453][T18573] lo speed is unknown, defaulting to 1000 [ 1197.048769][T18616] kAFS: Can only specify source 'none' with -o dyn [ 1199.313113][ T30] audit: type=1400 audit(1737499733.859:1496): avc: denied { getopt } for pid=18638 comm="syz.3.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1199.565112][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3225'. [ 1200.206263][ T30] audit: type=1400 audit(1737499734.709:1497): avc: denied { mount } for pid=18658 comm="syz.2.3230" name="/" dev="pstore" ino=3001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1200.363679][ T30] audit: type=1400 audit(1737499734.909:1498): avc: denied { ioctl } for pid=18664 comm="syz.5.3232" path="socket:[55187]" dev="sockfs" ino=55187 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1200.589392][ T30] audit: type=1400 audit(1737499735.129:1499): avc: denied { bind } for pid=18672 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1201.728737][ T30] audit: type=1400 audit(1737499736.269:1500): avc: denied { setopt } for pid=18691 comm="syz.6.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1202.682605][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3241'. [ 1204.879502][T18724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18724 comm=syz.5.3248 [ 1205.140438][ T5898] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1205.347719][ T5898] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1205.375113][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.417915][ T5898] usb 6-1: config 0 descriptor?? [ 1205.482979][ T5898] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1205.508456][ T5898] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1205.614737][T18739] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1205.755308][ T10] usb 6-1: USB disconnect, device number 44 [ 1205.776128][ T5898] kernel write not supported for file /dsp1 (pid: 5898 comm: kworker/1:3) [ 1205.869794][T18746] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 1206.800553][ T5898] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1207.231414][T18767] netlink: 'syz.3.3262': attribute type 10 has an invalid length. [ 1207.343076][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1207.357332][ T5898] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1207.389006][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1207.450718][ T5898] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1207.459928][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.478721][ T5898] usb 7-1: Product: syz [ 1207.486740][ T5898] usb 7-1: Manufacturer: syz [ 1207.507090][T18772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3267'. [ 1207.566574][T18767] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1207.579751][T18773] trusted_key: encrypted_key: insufficient parameters specified [ 1207.597884][ T5898] usb 7-1: SerialNumber: syz [ 1207.725585][ T5898] usb 7-1: config 0 descriptor?? [ 1207.733826][T18757] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1207.747476][T18757] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1208.064084][ T5898] usb 7-1: ucan: probing device on interface #0 [ 1208.480669][ T5898] usb 7-1: ucan: device reported invalid tx-fifo size [ 1208.492172][ T5898] usb 7-1: ucan: probe failed; try to update the device firmware [ 1208.688332][ T5898] usb 7-1: USB disconnect, device number 15 [ 1208.694348][ T1207] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1209.210635][ T1207] usb 6-1: Using ep0 maxpacket: 16 [ 1209.240848][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.402478][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.412957][ T1207] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1209.426071][ T1207] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1209.435329][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.447513][ T1207] usb 6-1: config 0 descriptor?? [ 1209.622447][ T30] audit: type=1400 audit(1737499744.169:1501): avc: denied { append } for pid=18800 comm="syz.6.3278" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1209.649718][T18802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18802 comm=syz.2.3277 [ 1209.878544][ T1207] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 1209.891072][ T1207] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 1209.932040][ T1207] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 1209.954595][ T1207] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0 [ 1209.989952][ T1207] hid-multitouch 0003:0457:07DA.0015: unbalanced collection at end of report description [ 1210.003422][ T1207] hid-multitouch 0003:0457:07DA.0015: probe with driver hid-multitouch failed with error -22 [ 1210.079326][ T1207] usb 6-1: USB disconnect, device number 45 [ 1210.837721][T18825] netlink: 'syz.3.3287': attribute type 12 has an invalid length. [ 1212.324094][ T1207] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1212.428352][T18847] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3293'. [ 1212.544300][ T1207] usb 7-1: Using ep0 maxpacket: 32 [ 1212.553949][ T1207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.584327][ T1207] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1212.619191][T18854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18854 comm=syz.5.3294 [ 1212.673679][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.696007][ T1207] usb 7-1: config 0 descriptor?? [ 1213.320677][ T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1213.507135][ T1207] mcp2200 0003:04D8:00DF.0016: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.6-1/input0 [ 1213.607938][ T10] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1213.619546][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.659397][ T10] usb 6-1: config 0 descriptor?? [ 1213.791084][ T1207] usb 7-1: USB disconnect, device number 16 [ 1214.307033][ T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1214.314394][ T10] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1214.645873][ T1207] usb 6-1: USB disconnect, device number 46 [ 1215.490658][T18895] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3312'. [ 1215.648018][T18903] netlink: 'syz.5.3315': attribute type 1 has an invalid length. [ 1215.686116][T18903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3315'. [ 1215.705492][ T1207] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1215.761359][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1215.807188][T18914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3321'. [ 1215.872294][ T1207] usb 7-1: Using ep0 maxpacket: 16 [ 1215.879163][ T1207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1215.907467][ T1207] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1215.919235][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.927431][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1215.929088][ T1207] usb 7-1: config 0 descriptor?? [ 1215.944951][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1215.967890][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.989246][ T10] usb 4-1: Product: syz [ 1215.993898][ T10] usb 4-1: Manufacturer: syz [ 1215.998884][ T10] usb 4-1: SerialNumber: syz [ 1216.000530][ T5905] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1216.019222][ T10] usb 4-1: config 0 descriptor?? [ 1216.034807][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1216.050405][ T10] usb 4-1: setting power ON [ 1216.058429][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1216.078401][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1216.096179][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1216.105017][ T10] usb 4-1: media controller created [ 1216.154867][T18928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18928 comm=syz.7.3327 [ 1216.167933][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1216.202875][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1216.206599][ T10] usb 4-1: selecting invalid altsetting 6 [ 1216.213148][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1216.222462][ T10] usb 4-1: digital interface selection failed (-22) [ 1216.231426][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1216.252716][T18899] dvb-usb: bulk message failed: -22 (3/0) [ 1216.252918][ T5905] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1216.258727][T18899] dvb-usb: bulk message failed: -22 (3/0) [ 1216.263790][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1216.282575][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.285462][ T10] usb 4-1: setting power OFF [ 1216.290778][ T5905] usb 6-1: Product: syz [ 1216.296924][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1216.299931][ T5905] usb 6-1: Manufacturer: syz [ 1216.309387][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1216.310721][ T5905] usb 6-1: SerialNumber: syz [ 1216.322963][ T10] (NULL device *): no alternate interface [ 1216.349062][ T5905] usb 6-1: config 0 descriptor?? [ 1216.362106][T18911] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1216.371877][T18911] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1216.384670][ T5905] usb 6-1: ucan: probing device on interface #0 [ 1216.389896][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1216.401873][ T1207] holtek_kbd 0003:04D9:A055.0017: item fetching failed at offset 5/7 [ 1216.416324][ T1207] holtek_kbd 0003:04D9:A055.0017: probe with driver holtek_kbd failed with error -22 [ 1216.474205][ T10] usb 4-1: USB disconnect, device number 49 [ 1216.574987][ T1207] usb 7-1: USB disconnect, device number 17 [ 1216.597386][ T5905] usb 6-1: ucan: device protocol version 808482864 is not supported [ 1216.606796][ T5905] usb 6-1: ucan: probe failed; try to update the device firmware [ 1216.884919][ T5905] usb 6-1: USB disconnect, device number 47 [ 1216.968500][T18940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3333'. [ 1217.376607][T18963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18963 comm=syz.6.3339 [ 1217.980427][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1218.185079][ T10] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1218.215751][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.239797][ T10] usb 7-1: config 0 descriptor?? [ 1218.250010][ T10] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1218.268035][ T10] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1218.660826][ T5905] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1218.727115][ T1207] usb 7-1: USB disconnect, device number 18 [ 1218.841944][ T5905] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1218.850127][ T5905] usb 4-1: config 0 has no interface number 0 [ 1218.856575][ T5905] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.888036][ T5905] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.899292][ T5905] usb 4-1: New USB device found, idVendor=29bd, idProduct=0055, bcdDevice= 0.00 [ 1218.909850][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.924731][ T5905] usb 4-1: config 0 descriptor?? [ 1218.952497][ T5905] usbhid 4-1:0.128: can't add hid device: -22 [ 1218.958914][ T5905] usbhid 4-1:0.128: probe with driver usbhid failed with error -22 [ 1219.178985][ T48] usb 4-1: USB disconnect, device number 50 [ 1219.289564][T19020] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3369'. [ 1219.360391][ T5905] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1219.521673][ T5905] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.541073][ T5905] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.563559][ T5905] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1219.579968][ T5905] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1219.604112][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.618050][ T5905] usb 6-1: config 0 descriptor?? [ 1219.628695][T19039] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3377'. [ 1219.709114][ T30] audit: type=1400 audit(1737499754.249:1502): avc: denied { map } for pid=19040 comm="syz.6.3378" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1219.764422][ T30] audit: type=1400 audit(1737499754.249:1503): avc: denied { execute } for pid=19040 comm="syz.6.3378" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1219.901824][T19046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19046 comm=syz.3.3379 [ 1220.171717][ T5905] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0018/input/input46 [ 1220.180400][T15879] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1220.339129][ T5905] sony 0003:054C:03D5.0018: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0 [ 1220.372122][T15879] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1220.392217][T15879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.414774][ T5905] usb 6-1: USB disconnect, device number 48 [ 1220.447089][T15879] usb 4-1: config 0 descriptor?? [ 1220.496869][T15879] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1220.501330][T19059] fido_id[19059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1220.559068][T15879] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1221.064855][ T9] usb 4-1: USB disconnect, device number 51 [ 1221.942771][ T30] audit: type=1400 audit(1737499756.489:1504): avc: denied { write } for pid=19089 comm="syz.7.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1222.380805][ T30] audit: type=1400 audit(1737499756.929:1505): avc: denied { attach_queue } for pid=19101 comm="syz.3.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1223.390590][ T48] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1223.398193][ T5905] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 1223.580512][ T48] usb 7-1: Using ep0 maxpacket: 16 [ 1223.586910][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1223.598274][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.608136][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.630380][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.640191][ T5905] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 1223.650368][ T48] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1223.652839][T19131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19131 comm=syz.7.3410 [ 1223.663878][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.690493][ T48] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1223.746954][ T5905] usb 4-1: config 0 descriptor?? [ 1223.758666][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.815749][ T48] usb 7-1: config 0 descriptor?? [ 1224.228076][ T5905] glorious 0003:258A:0036.0019: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0 [ 1224.284335][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1224.305596][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1224.329479][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1224.346540][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1224.368612][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1224.499564][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1224.518394][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1224.983343][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1225.002650][ T5898] usb 4-1: USB disconnect, device number 52 [ 1225.009013][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1225.022401][ T48] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 1225.085137][ T48] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001A/input/input47 [ 1225.109978][ T48] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1225.139844][ T48] usb 7-1: USB disconnect, device number 19 [ 1225.255116][T19150] fido_id[19150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1225.471839][T19159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'. [ 1225.638727][T19165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1226.013189][ T30] audit: type=1400 audit(1737499760.559:1506): avc: denied { write } for pid=19172 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1226.044467][ T30] audit: type=1400 audit(1737499760.589:1507): avc: denied { read } for pid=19172 comm="syz.3.3421" path="socket:[56943]" dev="sockfs" ino=56943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1226.700663][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1227.881311][T15879] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1228.509474][T15879] usb 6-1: Using ep0 maxpacket: 8 [ 1228.547687][T15879] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1228.570412][T15879] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1228.580378][T15879] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1228.590526][T15879] usb 6-1: Product: syz [ 1228.597611][T15879] usb 6-1: Manufacturer: syz [ 1228.658923][T15879] usb 6-1: SerialNumber: syz [ 1228.681501][T15879] usb 6-1: config 0 descriptor?? [ 1228.691899][T15879] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1229.180448][ T48] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1229.199529][T19216] lo speed is unknown, defaulting to 1000 [ 1229.205507][T19216] lo speed is unknown, defaulting to 1000 [ 1229.213498][T19216] lo speed is unknown, defaulting to 1000 [ 1229.256916][T19216] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1229.384262][T19216] lo speed is unknown, defaulting to 1000 [ 1229.395731][T19216] lo speed is unknown, defaulting to 1000 [ 1229.407295][T19216] lo speed is unknown, defaulting to 1000 [ 1229.418644][T19216] lo speed is unknown, defaulting to 1000 [ 1229.429966][T19216] lo speed is unknown, defaulting to 1000 [ 1229.591060][T15879] gspca_zc3xx: reg_w_i err -71 [ 1229.752581][T19222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 1229.830369][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 1229.851826][ T48] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1229.866911][ T48] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1229.893730][ T48] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1229.932728][ T48] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1229.944377][ T48] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1229.958703][ T48] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1229.974755][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.230938][ T48] usb 4-1: usb_control_msg returned -32 [ 1230.236506][ T48] usbtmc 4-1:16.0: can't read capabilities [ 1230.709643][T15879] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1230.717151][T15879] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1230.750659][T15879] usb 6-1: USB disconnect, device number 49 [ 1231.436651][T19244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19244 comm=syz.5.3446 [ 1231.522157][T19243] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3445'. [ 1231.830376][T15879] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1232.051939][T15879] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1232.074346][T15879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.142517][T15879] usb 6-1: config 0 descriptor?? [ 1232.186459][ T10] usb 4-1: USB disconnect, device number 53 [ 1232.200857][T15879] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1232.263786][T15879] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1232.417753][T15879] usb 6-1: USB disconnect, device number 50 [ 1232.893978][T19268] siw: device registration error -23 [ 1233.936853][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1234.100970][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1234.138834][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1234.163629][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.192322][ T10] usb 4-1: config 0 descriptor?? [ 1234.524759][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1235.100402][T15879] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1235.260669][T15879] usb 7-1: Using ep0 maxpacket: 8 [ 1235.269879][T15879] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1235.290603][T15879] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1235.306479][T15879] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1235.350344][T15879] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.390540][T15879] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1235.413927][T15879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.443568][ T10] gspca_sonixj: reg_r err -71 [ 1235.448360][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1235.510671][ T10] usb 4-1: USB disconnect, device number 54 [ 1235.672082][T15879] usb 7-1: GET_CAPABILITIES returned 0 [ 1235.678102][T15879] usbtmc 7-1:16.0: can't read capabilities [ 1236.226736][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1236.251148][T19281] usbtmc 7-1:16.0: Unable to send data, error -71 [ 1236.271895][ T10] usb 7-1: USB disconnect, device number 20 [ 1236.315624][T19292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3461'. [ 1238.223660][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.230027][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.451301][T19358] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1238.649887][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3492'. [ 1239.604804][T19379] syz_tun: entered promiscuous mode [ 1239.613375][T19379] batadv_slave_0: entered promiscuous mode [ 1239.621662][T19379] debugfs: 'hsr1' already exists in 'hsr' [ 1239.627424][T19379] Cannot create hsr debugfs directory [ 1239.633277][T19379] hsr1: entered allmulticast mode [ 1239.638338][T19379] syz_tun: entered allmulticast mode [ 1239.643650][T19379] batadv_slave_0: entered allmulticast mode [ 1241.606599][T19437] bridge0: entered allmulticast mode [ 1241.631644][T19437] pim6reg: entered allmulticast mode [ 1241.729549][T19445] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3524'. [ 1241.861727][ T30] audit: type=1400 audit(1737499776.409:1508): avc: denied { mounton } for pid=19455 comm="syz.3.3527" path="/proc/2360/cgroup" dev="proc" ino=57342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1241.943532][T19459] comedi comedi0: Minor 5 could not be opened [ 1242.112675][T15024] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1243.242798][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1243.459407][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1243.610212][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.029118][T19509] syz_tun: entered promiscuous mode [ 1244.037677][T19509] batadv_slave_0: entered promiscuous mode [ 1244.045960][T19509] debugfs: 'hsr1' already exists in 'hsr' [ 1244.051766][T19509] Cannot create hsr debugfs directory [ 1244.057446][T19509] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1244.067467][T19509] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 1244.078257][T19509] hsr1: entered allmulticast mode [ 1244.083328][T19509] syz_tun: entered allmulticast mode [ 1244.088659][T19509] batadv_slave_0: entered allmulticast mode [ 1244.114800][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.137663][ T30] audit: type=1400 audit(1737499778.679:1509): avc: denied { ioctl } for pid=19506 comm="syz.7.3545" path="socket:[58465]" dev="sockfs" ino=58465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1244.174036][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1244.208449][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1244.225823][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1244.242782][ T10] usb 6-1: Manufacturer: syz [ 1244.256630][ T10] usb 6-1: config 0 descriptor?? [ 1244.688060][ T10] hid_parser_main: 5 callbacks suppressed [ 1244.688072][ T10] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 1244.737577][ T10] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1245.520633][T19548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3552'. [ 1247.421180][ T1207] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1247.564771][ T48] usb 6-1: USB disconnect, device number 51 [ 1247.591912][ T1207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.621720][ T1207] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1247.650426][ T1207] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1247.675823][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.701962][ T1207] usb 7-1: config 0 descriptor?? [ 1248.125829][ T1207] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1248.150509][ T1207] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1248.169223][ T1207] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.001C/input/input48 [ 1248.188089][ T1207] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 1248.327708][T15881] usb 7-1: USB disconnect, device number 21 [ 1248.992228][T19590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19590 comm=syz.5.3570 [ 1249.322361][T15881] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1249.460368][T15879] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1249.491672][T15881] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.503935][T15881] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.541557][T15881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1249.553542][T15881] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1249.566308][T15881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.583675][T15881] usb 4-1: config 0 descriptor?? [ 1249.622014][T15879] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1249.631497][T15879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.649982][T15879] usb 6-1: config 0 descriptor?? [ 1249.665402][T15879] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1249.678247][T15879] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1249.866201][T15879] usb 6-1: USB disconnect, device number 52 [ 1250.071563][T15881] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.001D/input/input49 [ 1250.553589][T15881] sony 0003:054C:03D5.001D: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 1250.599208][T15881] usb 4-1: USB disconnect, device number 55 [ 1250.690121][T19607] fido_id[19607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1250.907029][T19617] netlink: 'syz.5.3580': attribute type 30 has an invalid length. [ 1250.948108][T19619] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3581'. [ 1251.100374][ T1207] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1251.270497][ T1207] usb 7-1: Using ep0 maxpacket: 8 [ 1251.296859][ T1207] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1251.309012][ T1207] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1251.334692][ T1207] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1251.346627][ T1207] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1251.363601][ T1207] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1251.374553][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.620847][T19631] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1251.656920][ T1207] usb 7-1: GET_CAPABILITIES returned 0 [ 1251.664436][ T1207] usbtmc 7-1:16.0: can't read capabilities [ 1252.174245][ T1207] usb 7-1: USB disconnect, device number 22 [ 1252.370335][T15881] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1252.520550][T15881] usb 6-1: Using ep0 maxpacket: 32 [ 1252.526863][T15881] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1252.536056][T15881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.594256][T15881] usb 6-1: config 0 descriptor?? [ 1252.612103][T15881] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1253.332852][T15881] gspca_vc032x: reg_r err -110 [ 1253.351699][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.361666][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.368375][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.378569][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.387145][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.394285][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.402629][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.408191][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.414781][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.420660][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.426308][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.431977][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.437475][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.443602][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.449114][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.455177][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.534580][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.540024][T15881] gspca_vc032x: I2c Bus Busy Wait 00 [ 1253.546632][T15881] gspca_vc032x: Unknown sensor... [ 1253.552965][T15881] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1254.075926][T19653] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19653 comm=syz.2.3591 [ 1254.088456][ T1207] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1254.241290][ T1207] usb 7-1: Using ep0 maxpacket: 32 [ 1254.248537][ T1207] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1254.257539][ T1207] usb 7-1: config 0 has no interface number 0 [ 1254.264508][ T1207] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1254.273968][ T1207] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1254.287806][ T1207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.296720][ T1207] usb 7-1: Product: syz [ 1254.304345][T19664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19664 comm=syz.3.3594 [ 1254.319357][ T1207] usb 7-1: Manufacturer: syz [ 1254.324518][ T1207] usb 7-1: SerialNumber: syz [ 1254.353069][ T1207] usb 7-1: config 0 descriptor?? [ 1254.362194][ T1207] smsc75xx v1.0.0 [ 1254.562712][T15881] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1254.710763][ T5905] usb 6-1: USB disconnect, device number 53 [ 1254.725067][T15881] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1254.788616][T15881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.865282][T15881] usb 4-1: config 0 descriptor?? [ 1254.951695][T15881] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1254.996266][T15881] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1255.446678][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1255.453898][ T1207] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1255.468223][ T1207] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1255.484444][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1255.491747][ T1207] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1255.513938][ T1207] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1255.531859][ T1207] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1255.542251][ T1207] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1255.553253][ T1207] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 1255.602078][ T1207] usb 7-1: USB disconnect, device number 23 [ 1256.425142][T15881] usb 4-1: USB disconnect, device number 56 [ 1257.104157][T19708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19708 comm=syz.6.3609 [ 1257.408427][T15879] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1258.163788][T15879] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1258.186287][T15879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.223202][T15879] usb 7-1: config 0 descriptor?? [ 1258.259403][T15879] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1258.274152][T15879] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1259.145164][ T1207] usb 7-1: USB disconnect, device number 24 [ 1259.386993][T14146] Bluetooth: hci4: Frame reassembly failed (-84) [ 1259.462922][T19751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19751 comm=syz.5.3624 [ 1259.504275][ T30] audit: type=1400 audit(1737499794.049:1510): avc: denied { getopt } for pid=19753 comm="syz.2.3625" lport=54562 faddr=::ffff:100.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1259.720615][T15879] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1259.947083][T15879] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1260.508259][T15879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.522988][T15879] usb 6-1: config 0 descriptor?? [ 1260.541480][T15879] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1260.549497][T15879] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1261.420405][T15024] Bluetooth: hci4: command 0x1003 tx timeout [ 1261.427523][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1264.857097][ T48] usb 6-1: USB disconnect, device number 54 [ 1265.216953][T19809] all: renamed from lo (while UP) [ 1265.431869][T19821] lo speed is unknown, defaulting to 1000 [ 1265.776026][T15879] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1265.796473][T19821] lo speed is unknown, defaulting to 1000 [ 1265.802976][T19821] lo speed is unknown, defaulting to 1000 [ 1265.827036][T19832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19832 comm=syz.7.3652 [ 1265.910453][T15881] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1265.940411][T15879] usb 6-1: Using ep0 maxpacket: 32 [ 1265.950544][ T30] audit: type=1400 audit(1737499800.489:1511): avc: denied { write } for pid=19836 comm="syz.3.3654" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1266.013537][ T30] audit: type=1400 audit(1737499800.499:1512): avc: denied { read } for pid=19836 comm="syz.3.3654" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1266.038513][T15879] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1266.046266][T15879] usb 6-1: no configurations [ 1266.050957][T15879] usb 6-1: can't read configurations, error -22 [ 1266.076016][ T30] audit: type=1400 audit(1737499800.499:1513): avc: denied { open } for pid=19836 comm="syz.3.3654" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1266.100356][T15881] usb 7-1: Using ep0 maxpacket: 16 [ 1266.109038][T15881] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1266.126094][T15881] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.138802][ T30] audit: type=1400 audit(1737499800.499:1514): avc: denied { ioctl } for pid=19836 comm="syz.3.3654" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1266.149031][T15881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1266.164573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.204882][T15881] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1266.231325][T15881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.239379][T15881] usb 7-1: Product: syz [ 1266.245352][T15881] usb 7-1: Manufacturer: syz [ 1266.250098][T15881] usb 7-1: SerialNumber: syz [ 1266.681011][T15881] usb 7-1: 0:2 : does not exist [ 1267.152875][ T30] audit: type=1326 audit(1737499801.579:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805fb8eb69 code=0x7ffc0000 [ 1267.304800][ T30] audit: type=1326 audit(1737499801.579:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805fb8eb69 code=0x7ffc0000 [ 1267.336077][ T30] audit: type=1326 audit(1737499801.589:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f805fb8eb69 code=0x7ffc0000 [ 1267.359595][ C1] vkms_vblank_simulate: vblank timer overrun [ 1267.372125][ T30] audit: type=1326 audit(1737499801.589:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805fb8eb69 code=0x7ffc0000 [ 1267.395593][ C1] vkms_vblank_simulate: vblank timer overrun [ 1267.405456][ T30] audit: type=1326 audit(1737499801.589:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805fb8eb69 code=0x7ffc0000 [ 1267.429024][ C1] vkms_vblank_simulate: vblank timer overrun [ 1267.438028][ T30] audit: type=1326 audit(1737499801.599:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.2.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f805fb8eb69 code=0x7ffc0000 [ 1267.461485][ C1] vkms_vblank_simulate: vblank timer overrun [ 1267.488058][T19864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1267.594176][T15881] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1267.701326][T15881] usb 7-1: USB disconnect, device number 25 [ 1267.963333][T15745] udevd[15745]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1270.823749][T19923] bridge: RTM_NEWNEIGH with invalid ether address [ 1271.320463][ T5905] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1271.490761][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 1271.511538][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.553283][ T5905] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1271.584304][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.626508][ T5905] usb 6-1: config 0 descriptor?? [ 1271.636210][ T5905] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1271.970446][ T48] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1272.120426][ T5898] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1272.131473][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 1272.139345][ T48] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1272.149967][ T48] usb 7-1: config 179 has no interface number 0 [ 1272.157565][ T48] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1272.169164][ T48] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1272.180802][ T48] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1272.192421][ T48] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1272.204598][ T48] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1272.228117][ T48] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1272.244306][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.257124][T19945] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1272.285055][ T5898] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1272.315418][ T5898] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1272.319596][T19950] lo speed is unknown, defaulting to 1000 [ 1272.348782][ T5898] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1272.378493][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.585525][T19950] lo speed is unknown, defaulting to 1000 [ 1272.593828][T19950] lo speed is unknown, defaulting to 1000 [ 1272.672161][ T5898] usb 4-1: GET_CAPABILITIES returned 0 [ 1272.680699][ T48] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input50 [ 1272.691425][ T5898] usbtmc 4-1:16.0: can't read capabilities [ 1272.777270][T19945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.813403][T19945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.900787][T15881] usb 4-1: USB disconnect, device number 57 [ 1273.072659][ T10] usb 7-1: USB disconnect, device number 26 [ 1273.072729][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1273.087075][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1273.530642][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1273.538398][ T5905] gspca_vc032x: reg_w err -32 [ 1273.543186][ T5905] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 1273.555000][ T5905] usb 6-1: USB disconnect, device number 57 [ 1273.698567][T19961] bridge: RTM_NEWNEIGH with invalid ether address [ 1274.033210][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3698'. [ 1274.138688][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1274.153151][T19974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1274.282178][ T48] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1274.460581][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 1274.472874][T19988] /dev/nullb0: Can't open blockdev [ 1274.500580][ T48] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1274.602696][ T48] usb 4-1: config 179 has no interface number 0 [ 1274.694529][ T48] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1274.854694][ T48] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1275.018754][ T48] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1275.177569][ T48] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1275.271468][ T48] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1275.366415][ T48] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1275.421191][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.537558][T19968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1276.116637][T20005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1276.266181][ T5898] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input51 [ 1276.280412][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1276.456776][T19968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1276.468999][T19968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1276.470955][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1276.486624][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1276.496611][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1276.512748][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1276.532286][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1276.543444][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1276.558441][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1276.569330][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.697733][ T5898] usb 4-1: USB disconnect, device number 58 [ 1276.704149][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1276.704191][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1276.728794][T20015] netlink: 'syz.7.3715': attribute type 10 has an invalid length. [ 1276.746257][T20015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.755329][T20015] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1276.773904][T20015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.781481][T20015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.791072][T20015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.794561][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 1276.798704][T20015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.804190][ T10] usbtmc 7-1:16.0: can't read capabilities [ 1276.833312][T20015] bond0: (slave batadv0): Releasing backup interface [ 1277.018242][ T5898] usb 7-1: USB disconnect, device number 27 [ 1277.880958][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1278.451573][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1278.464071][ T10] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1278.488883][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.512164][ T10] usb 7-1: Product: syz [ 1278.530491][ T10] usb 7-1: Manufacturer: syz [ 1278.535203][ T10] usb 7-1: SerialNumber: syz [ 1278.551333][ T10] usb 7-1: config 0 descriptor?? [ 1278.587505][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1279.294994][ T10] gspca_ov534_9: reg_w failed -110 [ 1279.740736][ T10] gspca_ov534_9: Unknown sensor 0000 [ 1279.740814][ T10] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1280.805115][ T10] usb 7-1: USB disconnect, device number 28 [ 1281.750815][T20076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20076 comm=syz.3.3735 [ 1282.051521][T15879] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1282.100322][T19989] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1282.151829][T20094] overlayfs: failed to clone upperpath [ 1282.217171][T15879] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1282.226706][T15879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.236172][T15879] usb 4-1: config 0 descriptor?? [ 1282.244649][T15879] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1282.259266][T15879] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1282.276689][T19989] usb 7-1: Using ep0 maxpacket: 16 [ 1282.313900][T19989] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1282.370092][T19989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1282.484355][T19989] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1282.518050][T19989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.572984][T19989] usb 7-1: Product: syz [ 1282.643788][T19989] usb 7-1: Manufacturer: syz [ 1282.648448][T19989] usb 7-1: SerialNumber: syz [ 1282.672287][T19989] usb 7-1: config 0 descriptor?? [ 1282.695938][T19989] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1282.710508][T19989] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1282.774410][T15879] usb 4-1: USB disconnect, device number 59 [ 1283.339948][T19989] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1283.355418][T19989] em28xx 7-1:0.0: Config register raw data: 0xa6 [ 1283.375312][T19989] em28xx 7-1:0.0: I2S Audio (1 sample rate(s)) [ 1283.392730][T19989] em28xx 7-1:0.0: No AC97 audio processor [ 1284.129535][T20126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3749'. [ 1284.198201][ T9] usb 7-1: USB disconnect, device number 29 [ 1284.357928][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 1284.357943][ T30] audit: type=1400 audit(1737499818.899:1667): avc: denied { append } for pid=20135 comm="syz.5.3754" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1284.393898][ T30] audit: type=1400 audit(1737499818.939:1668): avc: denied { call } for pid=20131 comm="syz.7.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1284.397439][T20132] binder: 20131:20132 ioctl c0306201 200000000280 returned -14 [ 1284.634166][T20145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3756'. [ 1284.914045][T20155] netlink: 'syz.2.3760': attribute type 6 has an invalid length. [ 1287.955318][ T30] audit: type=1400 audit(1737499822.499:1669): avc: denied { mounton } for pid=20185 comm="syz.2.3769" path="/1024/file0" dev="tmpfs" ino=5420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1288.378059][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3771'. [ 1288.411149][ T30] audit: type=1400 audit(1737499822.949:1670): avc: denied { write } for pid=20194 comm="syz.2.3773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1288.699986][ T30] audit: type=1400 audit(1737499823.229:1671): avc: denied { transfer } for pid=20203 comm="syz.3.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1288.720674][T20205] binder: 20203:20205 ioctl c0306201 200000000680 returned -14 [ 1290.638354][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1290.792028][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1291.239403][ T10] usb 7-1: config 0 has no interface number 0 [ 1291.406870][ T30] audit: type=1400 audit(1737499825.949:1672): avc: denied { listen } for pid=20246 comm="syz.2.3792" lport=15 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1291.407332][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.732664][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.765620][ T10] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1291.860760][T20256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3794'. [ 1292.117477][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.139696][ T10] usb 7-1: config 0 descriptor?? [ 1293.580477][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1293.706783][T20276] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3798'. [ 1293.744496][ T10] usbhid 7-1:0.1: can't add hid device: -71 [ 1293.748345][T20274] lo speed is unknown, defaulting to 1000 [ 1293.756245][ T10] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1293.769195][T20276] ip_vti0: entered promiscuous mode [ 1293.795316][ T10] usb 7-1: USB disconnect, device number 30 [ 1293.831085][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1293.894042][T20276] ip_vti0: entered allmulticast mode [ 1293.917192][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1293.945111][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.959966][ T9] usb 4-1: Product: syz [ 1293.977625][ T9] usb 4-1: Manufacturer: syz [ 1294.003380][ T9] usb 4-1: SerialNumber: syz [ 1294.039691][ T9] usb 4-1: config 0 descriptor?? [ 1294.072525][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1294.277337][T20274] lo speed is unknown, defaulting to 1000 [ 1294.284751][T20274] lo speed is unknown, defaulting to 1000 [ 1294.947536][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1294.956275][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1294.966477][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1294.981987][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1294.993014][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1295.001031][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1295.019718][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1295.081306][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1295.114123][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1295.121899][T15879] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 1295.133082][T15879] hid-generic 0002:0004:0009.001E: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1295.261491][T20300] fido_id[20300]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1295.439151][ T30] audit: type=1400 audit(1737499829.979:1673): avc: denied { setopt } for pid=20302 comm="syz.7.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1296.563141][ T9] gspca_sonixj: reg_w1 err -71 [ 1296.600593][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1296.965067][ T9] usb 4-1: USB disconnect, device number 60 [ 1297.247274][T20316] usb usb1: usbfs: process 20316 (syz.7.3811) did not claim interface 0 before use [ 1298.292555][T20329] binder: 20326:20329 ioctl c0306201 200000000680 returned -14 [ 1299.640532][ T9] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1299.676676][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.683272][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.866342][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1299.876305][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1299.889373][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1300.412875][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.690354][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 1300.696270][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1301.134310][ T48] usb 4-1: USB disconnect, device number 61 [ 1301.208841][T20363] binder_alloc: 20362: binder_alloc_buf, no vma [ 1301.716441][ T30] audit: type=1400 audit(1737499836.259:1674): avc: denied { bind } for pid=20377 comm="syz.2.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1301.813858][T20380] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3833'. [ 1307.322854][T20444] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1310.223638][ T30] audit: type=1400 audit(1737499844.329:1675): avc: denied { listen } for pid=20486 comm="syz.2.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1311.653086][ T30] audit: type=1400 audit(1737499845.419:1676): avc: denied { listen } for pid=20496 comm="syz.5.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1311.686508][ T30] audit: type=1400 audit(1737499845.419:1677): avc: denied { accept } for pid=20496 comm="syz.5.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1315.317378][T20564] syz.7.3889: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1315.332869][T20564] CPU: 0 UID: 0 PID: 20564 Comm: syz.7.3889 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) [ 1315.332895][T20564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1315.332907][T20564] Call Trace: [ 1315.332915][T20564] [ 1315.332923][T20564] dump_stack_lvl+0x16c/0x1f0 [ 1315.332956][T20564] warn_alloc+0x248/0x3a0 [ 1315.332976][T20564] ? __pfx_warn_alloc+0x10/0x10 [ 1315.332993][T20564] ? stack_depot_save_flags+0x35/0xa40 [ 1315.333034][T20564] ? kasan_save_stack+0x42/0x60 [ 1315.333051][T20564] ? kasan_save_stack+0x33/0x60 [ 1315.333067][T20564] ? kasan_save_track+0x14/0x30 [ 1315.333085][T20564] ? xskq_create+0x52/0x1d0 [ 1315.333106][T20564] ? xsk_setsockopt+0x74e/0x9a0 [ 1315.333125][T20564] ? do_sock_setsockopt+0xf3/0x1d0 [ 1315.333157][T20564] ? xskq_create+0xfb/0x1d0 [ 1315.333181][T20564] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1315.333217][T20564] ? xskq_create+0xfb/0x1d0 [ 1315.333246][T20564] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1315.333281][T20564] ? xskq_create+0xfb/0x1d0 [ 1315.333304][T20564] vmalloc_user_noprof+0x9e/0xe0 [ 1315.333330][T20564] ? xskq_create+0xfb/0x1d0 [ 1315.333354][T20564] xskq_create+0xfb/0x1d0 [ 1315.333379][T20564] xsk_setsockopt+0x74e/0x9a0 [ 1315.333409][T20564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1315.333437][T20564] ? selinux_socket_setsockopt+0x6a/0x80 [ 1315.333459][T20564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1315.333484][T20564] do_sock_setsockopt+0xf3/0x1d0 [ 1315.333517][T20564] __sys_setsockopt+0x1a0/0x230 [ 1315.333548][T20564] __x64_sys_setsockopt+0xbd/0x160 [ 1315.333574][T20564] ? do_syscall_64+0x91/0x4c0 [ 1315.333601][T20564] ? lockdep_hardirqs_on+0x7c/0x110 [ 1315.333626][T20564] do_syscall_64+0xcd/0x4c0 [ 1315.333654][T20564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.333673][T20564] RIP: 0033:0x7f865238eb69 [ 1315.333688][T20564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1315.333706][T20564] RSP: 002b:00007f8653191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1315.333723][T20564] RAX: ffffffffffffffda RBX: 00007f86525b6080 RCX: 00007f865238eb69 [ 1315.333735][T20564] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1315.333746][T20564] RBP: 00007f8652411df1 R08: 0000000000000004 R09: 0000000000000000 [ 1315.333756][T20564] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1315.333768][T20564] R13: 0000000000000000 R14: 00007f86525b6080 R15: 00007fff5042a848 [ 1315.333793][T20564] [ 1315.333805][T20564] Mem-Info: [ 1315.598569][T20564] active_anon:20766 inactive_anon:0 isolated_anon:0 [ 1315.598569][T20564] active_file:22238 inactive_file:45053 isolated_file:0 [ 1315.598569][T20564] unevictable:768 dirty:294 writeback:0 [ 1315.598569][T20564] slab_reclaimable:8203 slab_unreclaimable:108023 [ 1315.598569][T20564] mapped:37807 shmem:12321 pagetables:1301 [ 1315.598569][T20564] sec_pagetables:0 bounce:0 [ 1315.598569][T20564] kernel_misc_reclaimable:0 [ 1315.598569][T20564] free:1270504 free_pcp:13298 free_cma:0 [ 1315.644311][T20564] Node 0 active_anon:83064kB inactive_anon:0kB active_file:88952kB inactive_file:180012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151228kB dirty:1176kB writeback:0kB shmem:47748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12484kB pagetables:5036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1315.676552][T20564] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1315.706625][T20564] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.735637][T20564] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 1315.742503][T20564] Node 0 DMA32 free:1165532kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:83032kB inactive_anon:0kB active_file:88952kB inactive_file:178704kB unevictable:1536kB writepending:1176kB present:3129332kB managed:2539460kB mlocked:0kB bounce:0kB free_pcp:39812kB local_pcp:15988kB free_cma:0kB [ 1315.775162][T20564] lowmem_reserve[]: 0 0 1 1 1 [ 1315.780145][T20564] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1315.809584][T20564] lowmem_reserve[]: 0 0 0 0 0 [ 1315.814569][T20564] Node 1 Normal free:3901104kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13348kB local_pcp:9988kB free_cma:0kB [ 1315.845946][T20564] lowmem_reserve[]: 0 0 0 0 0 [ 1315.850961][T20564] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1315.864292][T20564] Node 0 DMA32: 6*4kB (UME) 211*8kB (UME) 139*16kB (UME) 921*32kB (UME) 456*64kB (UME) 200*128kB (UME) 90*256kB (UME) 59*512kB (UME) 32*1024kB (UME) 12*2048kB (UME) 236*4096kB (UM) = 1165440kB [ 1315.884271][T20564] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1315.897183][T20564] Node 1 Normal: 218*4kB (UE) 67*8kB (UME) 63*16kB (UME) 244*32kB (UME) 79*64kB (UM) 22*128kB (UME) 12*256kB (UME) 8*512kB (UM) 9*1024kB (UME) 4*2048kB (UE) 942*4096kB (UM) = 3901104kB [ 1315.917993][T20564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.927650][T20564] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1315.937034][T20564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.946685][T20564] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1315.956078][T20564] 79609 total pagecache pages [ 1315.960886][T20564] 0 pages in swap cache [ 1315.965114][T20564] Free swap = 124996kB [ 1315.969332][T20564] Total swap = 124996kB [ 1315.973597][T20564] 2097051 pages RAM [ 1315.977491][T20564] 0 pages HighMem/MovableOnly [ 1315.982368][T20564] 430208 pages reserved [ 1315.986587][T20564] 0 pages cma reserved [ 1316.546145][T20573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20573 comm=syz.7.3890 [ 1317.089741][ T30] audit: type=1800 audit(1737499851.629:1678): pid=20579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3893" name="/" dev="9p" ino=2 res=0 errno=0 [ 1317.123538][T20579] netfs: Couldn't get user pages (rc=-14) [ 1317.240911][ T30] audit: type=1400 audit(1737499851.629:1679): avc: denied { map } for pid=20578 comm="syz.3.3893" path="/712/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1317.651667][T15881] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 1317.811854][T15881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1317.826854][T15881] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1318.031562][T15881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.207075][T15881] usb 4-1: config 0 descriptor?? [ 1318.760882][T15881] usbhid 4-1:0.0: can't add hid device: -71 [ 1318.801602][T15881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1318.895629][T15881] usb 4-1: USB disconnect, device number 62 [ 1319.073038][T20604] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3899'. [ 1319.131737][T20606] block nbd5: Unsupported socket: shutdown callout must be supported. [ 1319.326940][T20604] vlan2: entered promiscuous mode [ 1319.332184][T20604] bridge0: entered promiscuous mode [ 1321.265366][T20633] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3908'. [ 1321.763796][T20642] syzkaller0: entered promiscuous mode [ 1321.769373][T20642] syzkaller0: entered allmulticast mode [ 1325.274540][T20667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1325.401176][T20672] o2cb: This node has not been configured. [ 1325.407108][T20672] o2cb: Cluster check failed. Fix errors before retrying. [ 1325.414341][T20672] (syz.6.3917,20672,0):user_dlm_register:674 ERROR: status = -22 [ 1325.422274][T20672] (syz.6.3917,20672,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1326.024676][T20684] binder_alloc: 20682: binder_alloc_buf, no vma [ 1327.546450][T20700] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1327.920743][T20707] ALSA: mixer_oss: invalid OSS volume '' [ 1328.410093][T20709] tipc: Enabled bearer , priority 0 [ 1328.417521][T20709] syzkaller0: entered promiscuous mode [ 1328.423045][T20709] syzkaller0: entered allmulticast mode [ 1328.549276][T20709] tipc: Resetting bearer [ 1328.577508][T20708] tipc: Resetting bearer [ 1328.626144][T20708] tipc: Disabling bearer [ 1328.651267][T20714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20714 comm=syz.6.3931 [ 1329.380588][T19989] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1329.721778][T19989] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1329.740871][T19989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.759457][T19989] usb 7-1: config 0 descriptor?? [ 1329.777680][T19989] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1329.787544][T19989] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1329.961746][T20739] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3938'. [ 1330.530508][T19989] usb 7-1: USB disconnect, device number 31 [ 1331.196875][T20758] debugfs: 'ttyS3' already exists in 'caif_serial' [ 1331.727119][T20764] tipc: Enabling of bearer rejected, failed to enable media [ 1334.254940][T20814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3961'. [ 1336.908695][T20845] tipc: Enabling of bearer rejected, failed to enable media [ 1336.997310][T20847] tipc: Started in network mode [ 1337.018530][T20847] tipc: Node identity 9e4a875aa616, cluster identity 4711 [ 1337.026196][T20847] tipc: Enabled bearer , priority 0 [ 1337.042880][T20847] syzkaller0: entered promiscuous mode [ 1337.048534][T20847] syzkaller0: entered allmulticast mode [ 1337.207569][T20847] tipc: Resetting bearer [ 1337.222678][T20846] tipc: Resetting bearer [ 1337.291142][T20853] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3973'. [ 1337.331042][T20846] tipc: Disabling bearer [ 1337.870692][ T30] audit: type=1400 audit(1737499872.409:1680): avc: denied { nlmsg_write } for pid=20868 comm="syz.2.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1338.012647][ T30] audit: type=1400 audit(1737499872.409:1681): avc: denied { audit_write } for pid=20868 comm="syz.2.3978" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1338.035904][ T30] audit: type=1107 audit(1737499872.409:1682): pid=20868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1339.242401][T20881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20881 comm=syz.2.3980 [ 1341.289720][T20899] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 1341.911685][T20906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3987'. [ 1346.490729][ T5898] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1346.714533][ T5898] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1346.735428][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.760491][ T5898] usb 6-1: Product: syz [ 1346.771010][ T5898] usb 6-1: Manufacturer: syz [ 1346.780722][ T5898] usb 6-1: SerialNumber: syz [ 1346.792883][ T5898] usb 6-1: config 0 descriptor?? [ 1349.352904][ T5898] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1349.552492][ T5898] usb 6-1: USB disconnect, device number 58 [ 1351.731458][T21019] overlayfs: failed to clone upperpath [ 1351.912540][T21026] PKCS7: Unknown OID: [5] (bad) [ 1351.917484][T21026] PKCS7: Only support pkcs7_signedData type [ 1353.564624][T21045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21045 comm=syz.5.4024 [ 1353.950552][T15879] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1354.106538][T15879] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1354.172817][T15879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.217794][T15879] usb 6-1: config 0 descriptor?? [ 1354.297566][T15879] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1354.308108][T15879] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1354.313677][T21057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21057 comm=syz.2.4028 [ 1354.916474][T15879] usb 6-1: USB disconnect, device number 59 [ 1355.164736][T21066] netlink: 'syz.3.4030': attribute type 10 has an invalid length. [ 1355.178541][T21066] team0: Device ipvlan1 failed to register rx_handler [ 1355.722906][ T30] audit: type=1400 audit(1737499890.269:1683): avc: denied { map } for pid=21067 comm="syz.7.4031" path="socket:[63992]" dev="sockfs" ino=63992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1355.734830][T21070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4032'. [ 1355.787869][ T30] audit: type=1400 audit(1737499890.269:1684): avc: denied { read accept } for pid=21067 comm="syz.7.4031" path="socket:[63992]" dev="sockfs" ino=63992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1355.990478][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1356.012142][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1359.926539][T21130] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=4 [ 1361.460882][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.467474][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.527343][T21150] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1364.580262][T19989] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1364.800242][T19989] usb 4-1: Using ep0 maxpacket: 16 [ 1364.866305][ T30] audit: type=1400 audit(1737499899.409:1685): avc: denied { ioctl } for pid=21183 comm="syz.5.4064" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1364.875696][T19989] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1365.047706][T19989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.055820][T19989] usb 4-1: Product: syz [ 1365.060909][T19989] usb 4-1: Manufacturer: syz [ 1365.069469][T19989] usb 4-1: SerialNumber: syz [ 1365.615492][T19989] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1365.629480][T19989] r8152-cfgselector 4-1: config 0 descriptor?? [ 1365.862783][T19989] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1365.872410][T19989] r8152-cfgselector 4-1: bad CDC descriptors [ 1365.952970][ T30] audit: type=1400 audit(1737499900.489:1686): avc: denied { bind } for pid=21199 comm="syz.5.4069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1365.988671][T21204] tipc: Enabling of bearer rejected, failed to enable media [ 1366.400651][T15879] r8152-cfgselector 4-1: USB disconnect, device number 63 [ 1368.738364][ T30] audit: type=1400 audit(1737499903.139:1687): avc: denied { setopt } for pid=21243 comm="syz.3.4080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1369.598867][T21228] sock: sock_timestamping_bind_phc: sock not bind to device [ 1369.973048][T21259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1369.990481][T21259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1370.002087][T21259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1370.054679][T21259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1371.090498][T21260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21260 comm=syz.5.4084 [ 1371.253530][T21281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.160272][ T48] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1372.300425][T15881] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1372.330506][ T48] usb 7-1: Using ep0 maxpacket: 8 [ 1372.342406][ T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.355639][ T48] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 1372.365283][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.374939][ T48] usb 7-1: Product: syz [ 1372.379147][ T48] usb 7-1: Manufacturer: syz [ 1372.384303][ T48] usb 7-1: SerialNumber: syz [ 1372.541702][ T48] usb 7-1: config 0 descriptor?? [ 1373.034305][ T48] comedi comedi4: Wrong number of endpoints [ 1373.040407][ T48] dt9812 7-1:0.0: driver 'dt9812' failed to auto-configure device. [ 1373.728084][T15881] usb 6-1: device descriptor read/all, error -71 [ 1374.990896][ T9] usb 7-1: USB disconnect, device number 32 [ 1377.155722][T21337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1377.208714][ T30] audit: type=1400 audit(1737499911.719:1688): avc: denied { read } for pid=21324 comm="syz.7.4100" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1377.484171][ T30] audit: type=1400 audit(1737499911.979:1689): avc: denied { open } for pid=21324 comm="syz.7.4100" path="/254/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1377.945368][T21345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21345 comm=syz.6.4104 [ 1378.194375][T21352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21352 comm=syz.7.4106 [ 1378.431085][T15881] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1378.627040][T15881] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1378.636666][T15881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.652506][T15881] usb 7-1: config 0 descriptor?? [ 1378.679563][T15881] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1379.134632][T15881] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1380.560061][T21382] tipc: Enabling of bearer rejected, failed to enable media [ 1381.600715][ T5898] usb 7-1: USB disconnect, device number 33 [ 1388.348044][T21421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.428585][T21453] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1388.450031][ T30] audit: type=1400 audit(1737499922.989:1690): avc: denied { create } for pid=21452 comm="syz.6.4133" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1388.785356][ T30] audit: type=1400 audit(1737499923.099:1691): avc: denied { associate } for pid=21452 comm="syz.6.4133" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1388.947171][ T30] audit: type=1400 audit(1737499923.099:1692): avc: denied { write open } for pid=21452 comm="syz.6.4133" path="/295/bus/file0" dev="overlay" ino=1572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1389.280272][ T30] audit: type=1400 audit(1737499923.489:1693): avc: denied { unlink } for pid=15022 comm="syz-executor" name="file0" dev="tmpfs" ino=1572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1390.167680][T15268] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1390.258762][ C1] vkms_vblank_simulate: vblank timer overrun [ 1390.761696][T15268] usb 7-1: config 0 has no interfaces? [ 1390.768882][T15268] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1390.781214][T15268] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1390.789612][T15268] usb 7-1: Product: syz [ 1390.806243][T15268] usb 7-1: Manufacturer: syz [ 1390.820280][T15268] usb 7-1: SerialNumber: syz [ 1390.848952][T15268] usb 7-1: config 0 descriptor?? [ 1391.491806][T21488] ip_vti0: left promiscuous mode [ 1391.496832][T21488] ip_vti0: left allmulticast mode [ 1391.869872][T21488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1393.004903][T21502] fuse: Unknown parameter '00000000000000000000' [ 1393.055633][T15268] usb 7-1: USB disconnect, device number 34 [ 1393.186029][ T30] audit: type=1400 audit(1737499927.729:1694): avc: denied { getopt } for pid=21507 comm="syz.2.4146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1393.549215][ T30] audit: type=1326 audit(1737499927.879:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21504 comm="syz.6.4145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e66f8eb69 code=0x0 [ 1395.092257][T21529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21529 comm=syz.7.4151 [ 1395.382075][T21539] bridge_slave_0: left allmulticast mode [ 1395.388784][T21539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.721969][T21542] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[21542] [ 1397.520475][ T30] audit: type=1400 audit(1737499932.049:1696): avc: denied { ioctl } for pid=21545 comm="syz.5.4157" path="socket:[65941]" dev="sockfs" ino=65941 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1397.849256][T15881] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1398.046184][T15881] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1398.082592][T15881] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1398.684689][T15881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1398.698900][T15881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1398.718604][T15881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1398.777076][T15881] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1398.806668][T15881] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1398.823185][T15881] usb 7-1: Product: syz [ 1398.827442][T15881] usb 7-1: Manufacturer: syz [ 1398.835464][T15881] cdc_wdm 7-1:1.0: skipping garbage [ 1398.852481][T15881] cdc_wdm 7-1:1.0: skipping garbage [ 1398.883315][T15881] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1399.020254][T15881] cdc_wdm 7-1:1.0: Unknown control protocol [ 1399.810442][T21565] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1399.816949][T21565] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1399.872301][T21574] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4160'. [ 1399.952515][T15268] usb 7-1: USB disconnect, device number 35 [ 1400.010586][T21565] vhci_hcd vhci_hcd.0: Device attached [ 1400.240292][ T5898] vhci_hcd: vhci_device speed not set [ 1400.309396][ T5898] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1400.619738][T21578] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 1400.626359][T21578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1400.700552][T21578] vhci_hcd vhci_hcd.0: Device attached [ 1400.797207][T21565] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1401.048002][T21578] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 1401.054623][T21578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1401.125173][T21590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12662 sclass=netlink_route_socket pid=21590 comm=syz.2.4163 [ 1401.587057][T21592] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14) [ 1401.593653][T21592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1401.670854][T21578] vhci_hcd vhci_hcd.0: Device attached [ 1401.851381][T21592] vhci_hcd vhci_hcd.0: Device attached [ 1402.451713][T21565] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(17) [ 1402.458333][T21565] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1402.820438][T21565] vhci_hcd vhci_hcd.0: Device attached [ 1402.958642][T21587] vhci_hcd: connection closed [ 1402.958859][T14141] vhci_hcd: stop threads [ 1402.970320][T21593] vhci_hcd: connection closed [ 1402.970479][T21601] vhci_hcd: connection closed [ 1402.975192][T21580] vhci_hcd: connection closed [ 1402.995426][T14141] vhci_hcd: release socket [ 1403.065892][T21571] vhci_hcd: connection reset by peer [ 1403.082178][T14141] vhci_hcd: disconnect device [ 1403.150759][T14141] vhci_hcd: stop threads [ 1403.162660][T14141] vhci_hcd: release socket [ 1403.175845][T14141] vhci_hcd: disconnect device [ 1403.270412][T14141] vhci_hcd: stop threads [ 1403.274685][T14141] vhci_hcd: release socket [ 1403.290213][T14141] vhci_hcd: disconnect device [ 1403.295035][T14141] vhci_hcd: stop threads [ 1403.299253][T14141] vhci_hcd: release socket [ 1403.322683][T14141] vhci_hcd: disconnect device [ 1403.420546][T14141] vhci_hcd: stop threads [ 1403.424928][T14141] vhci_hcd: release socket [ 1403.448349][T14141] vhci_hcd: disconnect device [ 1404.124914][T21626] lo speed is unknown, defaulting to 1000 [ 1405.740392][ T5898] vhci_hcd: vhci_device speed not set [ 1406.021937][T21638] vlan2: entered promiscuous mode [ 1406.046657][T21638] bond0: entered promiscuous mode [ 1406.060292][T21638] bond_slave_0: entered promiscuous mode [ 1406.066980][T21638] bond_slave_1: entered promiscuous mode [ 1406.099305][T21638] bond0: (slave vlan2): Opening slave failed [ 1406.147656][T21626] lo speed is unknown, defaulting to 1000 [ 1406.154230][T21626] lo speed is unknown, defaulting to 1000 [ 1407.138961][ T30] audit: type=1326 audit(1737499941.679:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21649 comm="syz.6.4174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e66f8eb69 code=0x0 [ 1408.986334][T21675] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1409.000095][T21675] Error validating options; rc = [-22] [ 1409.039012][T21675] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1412.195512][T21702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.372684][T21707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4189'. [ 1412.610602][ T30] audit: type=1400 audit(1737499946.989:1698): avc: denied { getopt } for pid=21703 comm="syz.6.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1414.020083][ T30] audit: type=1400 audit(1737499948.559:1699): avc: denied { mounton } for pid=21725 comm="syz.2.4193" path="/1143/file0" dev="tmpfs" ino=6034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1414.114599][ T30] audit: type=1400 audit(1737499948.589:1700): avc: denied { mount } for pid=21725 comm="syz.2.4193" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1414.666858][T21737] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1414.673505][T21737] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 1414.680680][T21737] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1414.687270][T21737] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1414.693870][T21737] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1414.700674][T21737] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 1414.707866][T21737] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1414.715087][T21737] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 1414.977523][T21731] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4195'. [ 1415.045280][T21738] syz.5.4195 (21738): /proc/21730/oom_adj is deprecated, please use /proc/21730/oom_score_adj instead. [ 1416.324224][T21751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21751 comm=syz.5.4201 [ 1416.590262][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1417.512539][ T30] audit: type=1400 audit(1737499951.059:1701): avc: denied { read write } for pid=21754 comm="syz.3.4204" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1417.571479][ T30] audit: type=1400 audit(1737499951.059:1702): avc: denied { open } for pid=21754 comm="syz.3.4204" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1417.596131][ T30] audit: type=1400 audit(1737499951.149:1703): avc: denied { ioctl } for pid=21754 comm="syz.3.4204" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1417.773910][ T10] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1417.783039][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.796540][ T10] usb 6-1: config 0 descriptor?? [ 1418.332256][ T10] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1418.388664][ T10] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1418.547113][ T48] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1418.732470][ T48] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1418.886966][ T48] usb 7-1: not running at top speed; connect to a high speed hub [ 1418.942298][ T48] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.978021][ T48] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1419.060366][ T10] usb 6-1: USB disconnect, device number 62 [ 1419.098893][T21776] kvm: kvm [21774]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1419.296503][T21776] kvm: kvm [21774]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 1419.310610][T21776] kvm: kvm [21774]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 1419.319338][T21776] kvm: kvm [21774]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1419.350515][ T30] audit: type=1400 audit(1737499953.889:1704): avc: denied { create } for pid=21781 comm="syz.2.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1419.381447][T21776] kvm: kvm [21774]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 1419.397617][T21776] kvm: kvm [21774]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 1419.441141][ T48] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1419.506839][T21776] kvm: kvm [21774]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 1419.675964][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.793476][ T48] usb 7-1: Product: syz [ 1419.797662][ T48] usb 7-1: Manufacturer: syz [ 1419.802296][ T48] usb 7-1: SerialNumber: syz [ 1420.823276][ T48] usb 7-1: 0:2 : does not exist [ 1420.842698][ T48] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1421.302177][ T48] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1421.314850][ T48] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1421.332171][ T48] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 1421.418960][ T48] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1421.483597][ T48] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1421.501835][ T48] usb 7-1: USB disconnect, device number 36 [ 1423.069761][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.076590][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.124089][T21836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21836 comm=syz.3.4220 [ 1426.326307][ T30] audit: type=1400 audit(1737499960.869:1705): avc: denied { bind } for pid=21846 comm="syz.2.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1426.370282][ T48] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1426.509158][T21850] netlink: 'syz.7.4224': attribute type 7 has an invalid length. [ 1426.522512][ T48] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1426.531804][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.548640][ T48] usb 4-1: config 0 descriptor?? [ 1426.558880][ T48] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1426.563932][T21850] : entered promiscuous mode [ 1426.585827][ T48] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1426.773323][ T9] usb 4-1: USB disconnect, device number 64 [ 1427.644440][ T30] audit: type=1400 audit(1737499962.169:1706): avc: denied { name_connect } for pid=21857 comm="syz.6.4227" dest=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1428.419060][T21875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21875 comm=syz.5.4230 [ 1429.071999][T21884] bridge0: entered promiscuous mode [ 1429.474779][ T9] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1430.539156][ T9] usb 6-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1430.643798][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.679281][ T9] usb 6-1: config 0 descriptor?? [ 1431.755609][ T9] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1431.794591][ T9] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1432.050912][T21906] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4237'. [ 1432.606020][ T9] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1433.073669][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 1433.105614][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1433.149798][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.255705][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1433.282319][ T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 1433.306467][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.341518][ T9] usb 4-1: config 0 descriptor?? [ 1435.015275][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4241'. [ 1435.060865][T15268] usb 6-1: USB disconnect, device number 63 [ 1435.309497][T21920] lo speed is unknown, defaulting to 1000 [ 1435.858016][ T30] audit: type=1400 audit(1737499969.939:1707): avc: denied { map } for pid=21922 comm="syz.2.4243" path="socket:[67626]" dev="sockfs" ino=67626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1435.936464][T21916] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4241'. [ 1436.142326][T15879] lo speed is unknown, defaulting to 1000 [ 1438.451051][T21920] lo speed is unknown, defaulting to 1000 [ 1438.485141][T21920] lo speed is unknown, defaulting to 1000 [ 1439.263104][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 1439.309945][T21952] fuse: Unknown parameter 'fd0x0000000000000003' [ 1439.323594][T21952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1439.649256][ T30] audit: type=1400 audit(1737499974.129:1708): avc: denied { write } for pid=21943 comm="syz.5.4248" path="socket:[66998]" dev="sockfs" ino=66998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1439.679664][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1439.885481][T21958] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1439.999997][T21959] bpq0: entered allmulticast mode [ 1440.009047][ T30] audit: type=1400 audit(1737499974.559:1709): avc: denied { connect } for pid=21956 comm="syz.6.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1440.028722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1440.082373][T21961] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 1440.947875][T21963] comedi comedi1: comedi_config --init_data is deprecated [ 1441.630231][ T30] audit: type=1400 audit(1737499975.489:1710): avc: denied { getopt } for pid=21960 comm="syz.5.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1441.816346][ T10] usb 4-1: USB disconnect, device number 65 [ 1442.068842][ T30] audit: type=1400 audit(1737499976.599:1711): avc: denied { create } for pid=21974 comm="syz.2.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1442.119343][T21971] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1442.187452][ T30] audit: type=1400 audit(1737499976.609:1712): avc: denied { sys_admin } for pid=21974 comm="syz.2.4255" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1443.562822][T21992] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 1443.780799][T21999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21999 comm=syz.7.4269 [ 1445.215075][T22017] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[22017] [ 1447.638794][T22041] ptrace attach of "./syz-executor exec"[7963] was attempted by "./syz-executor exec"[22041] [ 1449.400945][T22065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1450.312792][T22068] kAFS: No cell specified [ 1450.671042][T22074] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4280'. [ 1451.499668][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1451.770197][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1452.263611][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1452.309610][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.346816][ T9] usb 4-1: Product: syz [ 1452.419510][ T9] usb 4-1: Manufacturer: syz [ 1452.574665][ T9] usb 4-1: SerialNumber: syz [ 1452.858369][ T9] usb 4-1: config 0 descriptor?? [ 1453.423099][ T9] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1454.240602][ T9] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 1454.255738][ T30] audit: type=1400 audit(1737499988.339:1713): avc: denied { ioctl } for pid=22105 comm="syz.7.4287" path="/286/file0" dev="tmpfs" ino=1514 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1455.078547][T22121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22121 comm=syz.7.4289 [ 1456.690402][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1456.708726][ T10] usb 4-1: USB disconnect, device number 66 [ 1456.912670][ T9] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1456.938506][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.492482][ T9] usb 7-1: config 0 descriptor?? [ 1457.507004][ T9] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1457.514055][ T9] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1460.010106][T22155] Bluetooth: hci4: Frame reassembly failed (-84) [ 1461.337357][T15268] usb 7-1: USB disconnect, device number 37 [ 1462.060302][ T5858] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1462.060349][T15024] Bluetooth: hci4: command 0x1003 tx timeout [ 1464.689623][T22200] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4308'. [ 1467.940530][T22224] overlayfs: failed to clone lowerpath [ 1467.980536][T22224] overlayfs: failed to clone upperpath [ 1469.600455][T22240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22240 comm=syz.6.4317 [ 1470.360250][T15879] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1471.973614][T15879] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1471.988371][T15879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.589081][T15879] usb 7-1: config 0 descriptor?? [ 1473.082005][ T30] audit: type=1400 audit(1737500007.439:1714): avc: denied { ioctl } for pid=22257 comm="syz.3.4322" path="socket:[68219]" dev="sockfs" ino=68219 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1474.384385][T22273] random: crng reseeded on system resumption [ 1476.022439][ T30] audit: type=1400 audit(1737500010.569:1715): avc: denied { listen } for pid=22281 comm="syz.2.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1476.052385][T22282] netlink: 'syz.2.4328': attribute type 10 has an invalid length. [ 1476.069368][T22282] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1478.050296][T15879] usb 7-1: can't set config #0, error -110 [ 1478.908917][ T5898] usb 7-1: USB disconnect, device number 38 [ 1479.590335][ T30] audit: type=1400 audit(1737500014.049:1716): avc: denied { getopt } for pid=22326 comm="syz.3.4338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1480.530304][ T30] audit: type=1400 audit(1737500014.499:1717): avc: denied { ioctl } for pid=22328 comm="syz.7.4339" path="socket:[68326]" dev="sockfs" ino=68326 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1480.772913][T22340] /dev/nullb0: Can't open blockdev [ 1480.912230][T22339] syz.3.4340 (22339): drop_caches: 2 [ 1483.984336][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.027238][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.982845][T22366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 1485.109163][T22369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22369 comm=syz.7.4347 [ 1485.795992][ T30] audit: type=1400 audit(1737500020.089:1718): avc: denied { write } for pid=22370 comm="syz.6.4348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1485.979277][T22380] input: syz0 as /devices/virtual/input/input52 [ 1486.845743][T22388] lo speed is unknown, defaulting to 1000 [ 1486.973825][T22391] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4351'. [ 1487.193721][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1487.549552][T22402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1487.557432][T22402] IPv6: NLM_F_CREATE should be set when creating new route [ 1487.564946][T22402] IPv6: NLM_F_CREATE should be set when creating new route [ 1487.572224][T22402] IPv6: NLM_F_CREATE should be set when creating new route [ 1487.696590][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.707580][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1487.732413][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.902325][ T9] usb 4-1: config 0 descriptor?? [ 1488.443974][T22392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.502793][T22392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.646215][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1488.652890][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1488.748530][ T9] usb 4-1: USB disconnect, device number 67 [ 1489.042949][T22388] lo speed is unknown, defaulting to 1000 [ 1489.049305][T22388] lo speed is unknown, defaulting to 1000 [ 1490.090134][T22425] comedi comedi1: comedi_config --init_data is deprecated [ 1490.870153][ T30] audit: type=1400 audit(1737500024.559:1719): avc: denied { setopt } for pid=22422 comm="syz.3.4357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1491.886125][T22435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4359'. [ 1492.652324][T22438] infiniband syz!: set down [ 1492.656865][T22438] infiniband syz!: added team_slave_0 [ 1493.182495][T22438] RDS/IB: syz!: added [ 1493.186523][T22438] smc: adding ib device syz! with port count 1 [ 1493.192743][T22438] smc: ib device syz! port 1 has pnetid [ 1493.873907][T22447] 9pnet_fd: Insufficient options for proto=fd [ 1493.957195][T22450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.077926][T22450] sp0: Synchronizing with TNC [ 1495.772539][T22461] geneve2: entered promiscuous mode [ 1495.777776][T22461] geneve2: entered allmulticast mode [ 1495.798256][T14139] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1495.834264][T14139] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1495.844543][T14139] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1495.855813][T14139] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1497.053771][T22482] netlink: 'syz.3.4366': attribute type 21 has an invalid length. [ 1497.199190][T22482] netlink: 'syz.3.4366': attribute type 1 has an invalid length. [ 1497.309040][T22482] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4366'. [ 1497.550970][T22485] CIFS: Unable to determine destination address [ 1498.569992][T22498] tipc: Started in network mode [ 1498.575179][T22498] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1498.583139][T22498] tipc: Enabled bearer , priority 10 [ 1499.712019][ T5898] tipc: Node number set to 10005162 [ 1500.491549][T22513] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4376'. [ 1501.641331][T22533] netlink: 'syz.7.4383': attribute type 6 has an invalid length. [ 1502.238640][T22546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1502.761724][ T30] audit: type=1400 audit(1737500037.099:1720): avc: denied { getopt } for pid=22538 comm="syz.3.4386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1503.568844][T22558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4391'. [ 1505.445788][T22594] No source specified [ 1505.500368][T22594] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 1505.524918][T22594] tipc: Enabled bearer , priority 10 [ 1506.380234][ T30] audit: type=1400 audit(1737500040.839:1721): avc: denied { accept } for pid=22603 comm="syz.3.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1506.676514][T15879] tipc: Node number set to 945588058 [ 1507.735769][T14141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.770435][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.837565][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.846522][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.150216][T15268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.158513][ T5898] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1509.880365][T15879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.890680][ T5898] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.921521][ T5898] usb 7-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 1510.082698][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.220352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.411887][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.442615][ T5898] usb 7-1: Product: syz [ 1510.450435][ T5898] usb 7-1: Manufacturer: syz [ 1510.455040][ T5898] usb 7-1: SerialNumber: syz [ 1510.482355][T15268] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1511.646964][T14139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.659687][T15879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.862214][T15268] usb 4-1: device descriptor read/64, error -71 [ 1512.464729][ T5898] usb 7-1: selecting invalid altsetting 1 [ 1512.903969][T19989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.916126][ T5898] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 1512.916182][ T5898] dvb_usb_lmedm04 7-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 1512.940433][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.956808][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1512.992269][T22671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.007449][T22673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.143844][ T5898] usb 7-1: USB disconnect, device number 39 [ 1514.060391][T22673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.910705][T15268] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.554013][T15879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.940905][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1517.623930][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.023198][T22673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.577682][T14147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.591196][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1518.599622][T22673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.661040][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.669142][T22673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.716718][T22673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.563396][T22754] ubi31: attaching mtd0 [ 1521.578484][T22754] ubi31: scanning is finished [ 1522.330364][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.119970][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.300665][T22754] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1523.308271][T22754] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1523.315602][T22754] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1523.322662][T22754] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1523.330197][T22754] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1523.330249][T22754] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1523.330264][T22754] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2180664117 [ 1523.330281][T22754] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1523.330972][T22766] ubi31: background thread "ubi_bgt31d" started, PID 22766 [ 1523.378728][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.383917][T22762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.384076][T22762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.384243][T22762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.384399][T22762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.384488][T22762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.384596][T22762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.440260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.441143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.030588][T22817] page: refcount:515 mapcount:0 mapping:ffff888144ea2590 index:0x0 pfn:0x41a00 [ 1527.040323][T22817] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 1527.048808][T22817] aops:hugetlbfs_aops ino:1142d dentry name(?):"anon_hugepage" [ 1527.056335][T22817] flags: 0xfff000000000c1(locked|waiters|head|node=0|zone=1|lastcpupid=0x7ff) [ 1527.065160][T22817] page_type: f4(hugetlb) [ 1527.069385][T22817] raw: 00fff000000000c1 ffffea0000dc8008 ffffc90004e5fd68 ffff888144ea2590 [ 1527.077947][T22817] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1527.086517][T22817] head: 00fff000000000c1 ffffea0000dc8008 ffffc90004e5fd68 ffff888144ea2590 [ 1527.095161][T22817] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1527.103819][T22817] head: 00fff00000000009 ffffea0001068001 0000000000000000 0000000000000000 [ 1527.112471][T22817] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 1527.121123][T22817] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1527.128382][T22817] page_owner tracks the page as allocated [ 1527.135058][T22817] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 20299, tgid 20290 (syz.6.3805), ts 1295116445230, free_ts 1262536703337 [ 1527.155963][T22817] post_alloc_hook+0x1c0/0x230 [ 1527.160720][T22817] get_page_from_freelist+0x132b/0x38e0 [ 1527.166254][T22817] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1527.172123][T22817] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 1527.177907][T22817] alloc_hugetlb_folio+0xed4/0x1560 [ 1527.183078][T22817] hugetlb_fault+0x1bce/0x2f40 [ 1527.187818][T22817] handle_mm_fault+0xbfa/0xd10 [ 1527.192561][T22817] __get_user_pages+0x551/0x34a0 [ 1527.197473][T22817] populate_vma_page_range+0x267/0x3f0 [ 1527.202916][T22817] __mm_populate+0x1d8/0x380 [ 1527.207482][T22817] vm_mmap_pgoff+0x37f/0x470 [ 1527.212048][T22817] ksys_mmap_pgoff+0x1c8/0x5c0 [ 1527.216787][T22817] __x64_sys_mmap+0x125/0x190 [ 1527.221446][T22817] do_syscall_64+0xcd/0x4c0 [ 1527.225942][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.231819][T22817] page last free pid 19768 tgid 19768 stack trace: [ 1527.238294][T22817] __free_frozen_pages+0x7d5/0x10f0 [ 1527.243498][T22817] __folio_put+0x329/0x450 [ 1527.247905][T22817] hugetlb_free_folio+0xfc/0x140 [ 1527.252830][T22817] __update_and_free_hugetlb_folio+0x1e3/0x420 [ 1527.258955][T22817] update_and_free_hugetlb_folio+0xce/0x210 [ 1527.264817][T22817] update_and_free_pages_bulk+0x712/0xab0 [ 1527.270506][T22817] return_unused_surplus_pages+0x232/0x300 [ 1527.276283][T22817] hugetlb_acct_memory.part.0+0x56a/0xd10 [ 1527.281975][T22817] hugetlb_unreserve_pages+0x226/0x290 [ 1527.287405][T22817] remove_inode_hugepages+0xd4a/0xed0 [ 1527.292745][T22817] hugetlbfs_evict_inode+0x90/0x250 [ 1527.297912][T22817] evict+0x3e6/0x920 [ 1527.301780][T22817] iput+0x521/0x880 [ 1527.305561][T22817] dentry_unlink_inode+0x29c/0x480 [ 1527.310643][T22817] __dentry_kill+0x1d0/0x600 [ 1527.315207][T22817] dput.part.0+0x4b1/0x9b0 [ 1527.319719][T22817] ------------[ cut here ]------------ [ 1527.325157][T22817] kernel BUG at mm/filemap.c:154! [ 1527.330176][T22817] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1527.336566][T22817] CPU: 0 UID: 0 PID: 22817 Comm: syz.2.4454 Not tainted 6.16.0-syzkaller-11364-g3c4a063b1f8a #0 PREEMPT(full) [ 1527.348249][T22817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1527.358293][T22817] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 1527.364447][T22817] Code: 67 26 c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 9a 21 c9 ff 85 ed 7e 17 e8 51 26 c9 ff 48 c7 c6 00 1a b9 8b 48 89 df e8 e2 cd 11 00 90 <0f> 0b e8 3a 26 c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 1527.384036][T22817] RSP: 0000:ffffc9000485f310 EFLAGS: 00010046 [ 1527.390139][T22817] RAX: 0000000000080000 RBX: ffffea0001068000 RCX: ffffc90011ae8000 [ 1527.398107][T22817] RDX: 0000000000080000 RSI: ffffffff81f2624e RDI: ffff888034cbccc4 [ 1527.406065][T22817] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1527.414013][T22817] R10: 0000000000000001 R11: fffffffffffcaab0 R12: ffff888144ea2590 [ 1527.421971][T22817] R13: ffffea0001068030 R14: 00000000000001b0 R15: ffffea0001068000 [ 1527.429923][T22817] FS: 00007f806095d6c0(0000) GS:ffff8881246c8000(0000) knlGS:0000000000000000 [ 1527.438829][T22817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1527.445398][T22817] CR2: 000020000009a1f0 CR3: 000000003bba1000 CR4: 00000000003526f0 [ 1527.453346][T22817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 1527.461288][T22817] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1527.469230][T22817] Call Trace: [ 1527.472480][T22817] [ 1527.475383][T22817] filemap_remove_folio+0xf1/0x250 [ 1527.480467][T22817] remove_inode_hugepages+0x74a/0xed0 [ 1527.485813][T22817] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 1527.491674][T22817] ? wake_up_q+0xae/0x130 [ 1527.495980][T22817] ? up_write+0x1b2/0x520 [ 1527.500282][T22817] hugetlbfs_fallocate+0xf3f/0x12e0 [ 1527.505470][T22817] ? finish_task_switch.isra.0+0x221/0xc10 [ 1527.511249][T22817] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 1527.516855][T22817] ? lockdep_hardirqs_on+0x7c/0x110 [ 1527.522035][T22817] ? preempt_schedule_thunk+0x16/0x30 [ 1527.527389][T22817] ? preempt_schedule_common+0x44/0xc0 [ 1527.532829][T22817] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 1527.538440][T22817] ? vfs_fallocate+0x5b1/0x10e0 [ 1527.543275][T22817] ? vfs_fallocate+0xf01/0x10e0 [ 1527.548098][T22817] vfs_fallocate+0x5b1/0x10e0 [ 1527.552761][T22817] ? __pfx_vfs_fallocate+0x10/0x10 [ 1527.557845][T22817] ? madvise_vma_behavior+0x2881/0x2c50 [ 1527.563362][T22817] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1527.569227][T22817] madvise_vma_behavior+0x2839/0x2c50 [ 1527.574571][T22817] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 1527.580351][T22817] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1527.586054][T22817] ? __pfx_mas_prev+0x10/0x10 [ 1527.590713][T22817] ? find_vma_prev+0xda/0x160 [ 1527.595369][T22817] ? __pfx_find_vma_prev+0x10/0x10 [ 1527.600455][T22817] ? __schedule+0x11a3/0x5de0 [ 1527.605127][T22817] ? find_held_lock+0x2b/0x80 [ 1527.609799][T22817] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1527.615587][T22817] madvise_walk_vmas+0x31f/0x9c0 [ 1527.620515][T22817] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1527.625960][T22817] madvise_do_behavior+0x1e2/0x530 [ 1527.631053][T22817] ? rcu_is_watching+0x12/0xc0 [ 1527.635791][T22817] ? irqentry_exit+0x3b/0x90 [ 1527.640354][T22817] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1527.645958][T22817] ? down_read+0x13d/0x480 [ 1527.650354][T22817] ? madvise_lock+0x16e/0x230 [ 1527.655017][T22817] do_madvise+0x176/0x240 [ 1527.659362][T22817] ? __pfx_do_madvise+0x10/0x10 [ 1527.664191][T22817] ? handle_mm_fault+0x2ab/0xd10 [ 1527.669106][T22817] ? xfd_validate_state+0x61/0x180 [ 1527.674201][T22817] ? do_user_addr_fault+0x843/0x1370 [ 1527.679463][T22817] __x64_sys_madvise+0xa9/0x110 [ 1527.684297][T22817] ? lockdep_hardirqs_on+0x7c/0x110 [ 1527.689470][T22817] do_syscall_64+0xcd/0x4c0 [ 1527.693958][T22817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.699828][T22817] RIP: 0033:0x7f805fb8eb69 [ 1527.704222][T22817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1527.723804][T22817] RSP: 002b:00007f806095d038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1527.732190][T22817] RAX: ffffffffffffffda RBX: 00007f805fdb6320 RCX: 00007f805fb8eb69 [ 1527.740135][T22817] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 1527.748079][T22817] RBP: 00007f805fc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 1527.756020][T22817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1527.763961][T22817] R13: 0000000000000001 R14: 00007f805fdb6320 R15: 00007ffce6c4a848 [ 1527.771907][T22817] [ 1527.774925][T22817] Modules linked in: [ 1527.778817][T22817] ---[ end trace 0000000000000000 ]--- [ 1527.784270][T22817] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 1527.790413][T22817] Code: 67 26 c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 9a 21 c9 ff 85 ed 7e 17 e8 51 26 c9 ff 48 c7 c6 00 1a b9 8b 48 89 df e8 e2 cd 11 00 90 <0f> 0b e8 3a 26 c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 1527.809995][T22817] RSP: 0000:ffffc9000485f310 EFLAGS: 00010046 [ 1527.816039][T22817] RAX: 0000000000080000 RBX: ffffea0001068000 RCX: ffffc90011ae8000 [ 1527.823981][T22817] RDX: 0000000000080000 RSI: ffffffff81f2624e RDI: ffff888034cbccc4 [ 1527.831924][T22817] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1527.839866][T22817] R10: 0000000000000001 R11: fffffffffffcaab0 R12: ffff888144ea2590 [ 1527.847822][T22817] R13: ffffea0001068030 R14: 00000000000001b0 R15: ffffea0001068000 [ 1527.855762][T22817] FS: 00007f806095d6c0(0000) GS:ffff8881246c8000(0000) knlGS:0000000000000000 [ 1527.864671][T22817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1527.871227][T22817] CR2: 000020000009a1f0 CR3: 000000003bba1000 CR4: 00000000003526f0 [ 1527.879171][T22817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 1527.887111][T22817] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1527.895071][T22817] Kernel panic - not syncing: Fatal exception [ 1527.901219][T22817] Kernel Offset: disabled [ 1527.905517][T22817] Rebooting in 86400 seconds..