last executing test programs: 2m52.670185036s ago: executing program 4 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket(0x28, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x2}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', '', [{0x20, '.{@\x00'}, {}]}, 0xa) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9) openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102bc"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) 2m49.270036536s ago: executing program 4 (id=1631): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x34, 0x33, 0x65]}}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './cgroup\x00'}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, &(0x7f0000000180)=""/28, &(0x7f0000000300)="0603cdd632ada516c5b01563ef337abd808bd981f8d785de4fcf3fb20a084c70731ccd66d372b6f1bde3da2602000000000000003cf5d789ee7b87c4", &(0x7f00000001c0)="fbc7f48773a3b4ff524bd26e01b873e5775d6962dc068d", 0x2}, 0xfffffffffffffedb) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902240001"], 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000040)={0x1, &(0x7f0000002700)=[{0x0, 0x0, 0x0, @broadcast}]}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x541b, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r6) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) sendmmsg$inet(r2, &(0x7f0000004d00), 0x0, 0xf00) 2m45.910317761s ago: executing program 0 (id=1642): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) mount$bind(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000140)='./cgroup\x00', 0x0, 0x3a87406, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 2m45.2455926s ago: executing program 4 (id=1643): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400021d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m44.992959711s ago: executing program 1 (id=1645): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x1, 0x75b, 0x8, 0x10000, 0x1}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10003) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x7, &(0x7f0000004080)={0x100000000000001, 0x2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x5, 0xfffffff9}, 0x0, 0x0) 2m43.559714456s ago: executing program 2 (id=1647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x42110, 0xffffffffffffffff, 0xd1fb9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000bc0)={0x3e}) close(r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 2m43.459390701s ago: executing program 3 (id=1648): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0x100, 0x300ffffe, 0x2007, 0xffffffff, 0x0, "4d6b5ccb00"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000a40)) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r7, 0xffffffffffffffff, 0x2) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) 2m43.155585636s ago: executing program 4 (id=1649): syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x1ec, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0xb822, 0x2, 0x7, 0x0, {0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0xf, 0x8}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x4000, 0x3, 0x5, 0x0, {0x5, 0x10, 0x0, 0x3d9, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x5}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x8, 0x3, 0x1, 0x3, 0x9, 0x1, 0xd, 0x6, 0x1, 0x400, 0x9, 0x8001, 0xbb, 0xff26, 0x5, 0xfae3]}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="0fd94270663c"}, @NL80211_ATTR_IE={0x14d, 0x2a, [@mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @cf={0x4, 0x6, {0xfd, 0x5, 0x2, 0x2}}, @measure_req={0x26, 0xe4, {0xc8, 0xe7, 0x40, "ecf00d51c48a44e553e915fa7248f75878ce48da8299396b15c980cfc9264fac612e00fd6f0d5dd270fddd121dc4f37bff3a77b10dcede4412c78680b381adda8494f9b9e43e8a48c08cf7fe19d3b30d66ae7f67bf121de030d0bb190dba62b4e3ebca8825bd2ec9370f7e8be4d6782cca5f49e19e3182e9c8b7456d729f6c3d4c0f4b226f711bf59ef1ea3a658b6e7dff53ecc393eee5125ec8aa3fe3b02254aa596eae2257c55b370727055bd252d2d709f24108d1b431e4cb310ac2667ec8e63d9c3ecc78de06b916d327ebbcd3bbb542940b7f7c8129b63f77c51414af61a4"}}, @mic={0x8c, 0x18, {0x9e9, "5bbcc00e54a0", @long="ec5229264001e59ade082fb512c93894"}}, @peer_mgmt={0x75, 0x16, {0x0, 0x1, @void, @val=0xe, @val="96b92b4aa66d8904b141c2e13d2a64a5"}}, @random={0x6, 0x1c, "78df8d1c88823ad0cdbfe0aa207fb67c9adbc5f9675a111b7cf4bad2"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a6412e8699da"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a"], 0x7c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0200ec90781000"], 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SEM_INFO(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000740)=""/250) socket$inet6(0xa, 0x80002, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mount$9p_rdma(&(0x7f0000000080), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000040)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@privport}]}}) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, 0x0) accept4(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0, 0x80800) add_key$keyring(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r6 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r6, 0x0, 0x0, 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) 2m42.550246533s ago: executing program 2 (id=1650): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001820000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00"/135], 0xa8}}, 0x0) 2m42.443988275s ago: executing program 3 (id=1651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000143000/0x400000)=nil) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m42.437322434s ago: executing program 0 (id=1652): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x1aa, &(0x7f00000004c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0xe, 0x6, "2629dd", 0x174, 0x6, 0xff, @private2, @loopback, {[@dstopts={0x87, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0xd, [0x100]}}]}, @srh={0xbf, 0x8, 0x4, 0x4, 0x0, 0x50, 0x3, [@rand_addr=' \x01\x00', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}, @fragment={0x33, 0x0, 0xa, 0x0, 0x0, 0x9, 0x64}, @srh={0x3a, 0x6, 0x4, 0x3, 0x6, 0x20, 0xf5, [@private0, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty]}, @routing={0xc, 0x6, 0x0, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1]}, @hopopts={0x89, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x7}]}], @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x18b, 0x0, 0x0, 0x9, 0x1, 0x1, 0x4e21, 0x4e23, 0x1, 0x4, 0x0, 0x0, 0x1}, [{0xfff, 0x2, 0x4, 0x8, 0xffff, 0xe, 0x1, 0x1}, {0x0, 0x8, 0x70451e29, 0x1, 0xe, 0x10000, 0xb, 0xffffff9}, {0x8, 0x7e7, 0x3, 0xf869, 0x4, 0x3, 0x2, 0xb}]}}}}}}, 0x0) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000380)='big_key\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="fcb1", 0x2, r3) keyctl$unlink(0x9, r4, r4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) rt_sigqueueinfo(r0, 0x34, &(0x7f0000000300)={0x20, 0x200, 0x1000}) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x0, 0x5c8c, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x0, 0x1ff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x12000) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}) bind$alg(0xffffffffffffffff, 0x0, 0x0) ptrace$peek(0x2, r0, &(0x7f00000001c0)) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) write$binfmt_script(r7, &(0x7f0000005e80)={'#! ', './file0'}, 0xb) 2m42.400636352s ago: executing program 2 (id=1653): socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x64008890) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="8036e938d46db31179ea53a581c0191879ef0000", @ANYRES16=r1, @ANYBLOB="040025bd7000fcdbdf250500000005000600080000000c00100000000000000000000c000f00020000000000000006000e00f8ff00000600020000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2400c0c5}, 0x4040800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000340)={0x40, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffe00}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x4, 0x3, 0x5, {0xb76, 0x9, 0x1, 0x6}}) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='afs\x00', &(0x7f0000000240)='/dev/sequencer2\x00', 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x420, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2m40.661372202s ago: executing program 2 (id=1654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2m40.514050744s ago: executing program 4 (id=1655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400021d, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32], 0x58}}, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r7) r8 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x21b}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x2, 0x1, 0x1}, &(0x7f00000004c0)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r8, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2m40.503799774s ago: executing program 0 (id=1656): poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xa2d1}], 0x1, 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000580)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x190, 0x4) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x190, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6, 0x1}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001a00200026bd700042097b589d0b71acfc04ff070008000018e14f43373daecb6a94f2ed9e6fe4132a533e63c54affa199733da6afa81dffd0602cc0f6cd1d331cb7254debcb1d7ef015e7df042fc2a39e67e2698868c3b1541921c891cc65e24511629e81811caed038e1e1e08edc8c44b525fde80065bc643828c5000000000000cb449cc94e8d9abc2596a96e0d8a208250933fc623e97c8dadc96f5b7ab7c11e02c806ed2088c7e83c4f31a18c107041106b6b07bfffd8f46907f5ba22ab953180dff76dec49dc86adf358a021e9e61a12811b2834bbfd9a98bb5d51643d088fdadee62204c7b845f75d3a07a832ab647c51f2a90ad57eebb6fa76f382fb34abe3d0c4e7f0795a44e3d6c2a91a38a1e7d43a327be8ab"], 0x1c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4008000) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r8}, 0x60) (async) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r8}, 0x60) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r9, 0xffffffffffffffff, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="6d932bbd70000000000001000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000894) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="6d932bbd70000000000001000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000894) 2m40.490488336s ago: executing program 2 (id=1657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x5], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r9, @ANYBLOB="24002d8005000400010000000500010003000000080002000300cb750800030029"], 0x40}, 0x1, 0x0, 0x0, 0x20008094}, 0x4c014) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r11) mkdir(0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r12 = getpid() process_vm_readv(r12, &(0x7f0000008400)=[{&(0x7f0000000340)=""/165, 0xa5}, {&(0x7f0000000300)=""/39, 0x27}], 0x2, &(0x7f0000000680), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) 2m40.387029613s ago: executing program 3 (id=1658): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000001018610f4205ae06d316b6692010902240001010000000904690202ff5aa30009050402100000fa0009058202", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e0600000071c6ac29cb75446993189fd99af320a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m40.162477882s ago: executing program 0 (id=1659): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400021d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m39.866790022s ago: executing program 2 (id=1660): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000100)=0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f9502547f70e06d038e7ff7fc6e5539b3471078b089b3b083848090890e0878f0e1ac6e7049b3372959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8a92fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18834dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b8dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00fd104d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff752613d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443eab40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738dd7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a23dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c848a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333aed0418c0b44412d041259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b45030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475af3d3060eac38dcaea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x880, 0x10000000002, 0x0, 0x124, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff00102030109022400550000cf6f6f9602020202000a09058202000200011000000000000000000000f76b07e7ad1a603a89b1af6f88eb4864"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x20000115, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) 2m39.505237544s ago: executing program 1 (id=1661): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x8, 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0xb0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='ocfs2\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffd}}}}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000800) 2m38.825556967s ago: executing program 4 (id=1662): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0x100, 0x300ffffe, 0x2007, 0xffffffff, 0x0, "4d6b5ccb00"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000a40)) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r7, 0xffffffffffffffff, 0x2) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) 2m37.218851668s ago: executing program 1 (id=1663): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001820000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000000000000004"], 0xa8}}, 0x0) 2m37.05990967s ago: executing program 1 (id=1664): syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x1411a1) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x48, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f0000002800)={0x2020}, 0x2020) 2m34.751489214s ago: executing program 3 (id=1665): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x4, 0x2) (async) getdents64(r0, 0xffffffffffffffff, 0x43) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x2, r0}, 0x10) (async, rerun: 32) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 32) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) r5 = fcntl$dupfd(r4, 0x406, r4) write$binfmt_elf32(r5, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}], "", ['\x00']}, 0x158) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000020a0300000000000000000000000001080002400000000229000600f35be1f34605aec345f76c3e077e67af259f17fa6863c8c324fa075d04e19e6876c7e78f86cb000000140000001100010009000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0xc8010) (async) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x24, 0x0, 0x38, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xd, 0xc5, "973cccc338dd573847"}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048080}, 0x800) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8, 0x0}, 0x8) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x3, 0x5, 0x8000, 0x10000002, 0x100, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x1c, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1f, &(0x7f00000000c0)=""/31, 0x41100, 0x28, '\x00', r3, @fallback=0x34, r5, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x8, 0x8, 0x9}, 0x10, r6, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[r7], &(0x7f0000000400)=[{0x3, 0x3, 0x1, 0x8}, {0x0, 0x1, 0xe, 0x8}], 0x10, 0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001340)=@newtfilter={0x588, 0x2c, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xb, 0xf}, {0x5, 0x10}, {0x2, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4fc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xfff2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_MATCHALL_ACT={0xc8, 0x2, [@m_mirred={0xc4, 0x1d, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x81, 0x2, 0xeef, 0x9}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x8, 0x10000009, 0x5, 0x7}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x361, 0x5, 0x1000000e, 0x8, 0x8cc}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7bad, 0x7, 0x10000000, 0x1, 0x8}, 0x2, r3}}]}, {0x15, 0x6, "90c4583563e6b2b16fd6c3c34738c35b45"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x120, 0x2, [@m_vlan={0x11c, 0x1b, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6e4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xc7, 0x6, "4538248143950cee49145a1b8fa39e884b4a68b353c09a14e5b1064415b0187d84871d102f5bd07a513e79921c5e9673adfd1e306dca047911c6500694d94f8a5406e22f2e503bc95efdadef9eea0ccdbb69f886ec902587daf02a0945cbf035200eca51ffe2420f2e2594ab53ba7a093a718c6393cdfa81ffdd30918ad9c9c93d7075b6b791a9d9f071f42a5cbe2d80d6152a4ec8d4c7145a0f0802c1dc8e6c0c53c6fa5218d7ede0e2ad579e7a66d50f1070d49936e1caae1ec7a2672ddba95a2342"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_MATCHALL_ACT={0x2e0, 0x2, [@m_skbmod={0x98, 0x6, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xcf01}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4f}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x5, 0x7, 0x5, 0x1}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x1f, 0x6, "c84df725b9e66936335d886c2b48e55b5f05b652ad15a0aba39260"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x1c4, 0x17, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x6, 0x0, 0x96b, 0x400}, 0x7ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0xffffffffffffffff, 0x3, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x800, 0x6, 0x9, 0xe}, 0x8ac}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x0, 0xc00000, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x6, 0x10000001, 0x1ff, 0x7}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0xf, 0x6, 0x100}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x7, 0xffffffffffffffff, 0x7fff, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7f, 0x6, 0x7, 0xfffffff7}, 0xfdac}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x10000000, 0x7, 0x1}, 0x614}}]}, {0x98, 0x6, "d227d8b47c555c12b0da3530a43df201fb906212b6954b4f6c8f2979c8199956063c484a352799f021379af9ec0d0c99f34253bcc1efeae888ff94d83138f4b6adf10329684041c4175ddf714b9e3586c515ffe54f3aee17eed27c7de74d35aed26c2049adad4da0899d5ccbad24b061a0bbd3dcb28bf430df0c3e8806a452f02b868622b9f36fba257eb5f029150621294459cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x80, 0xd, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="d1139b7ed21b"}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0xb}]}, {0x36, 0x6, "92775930af7d4ea31a4f816af4899e86d3d83356528c1e7bcd571d4b72bcdec8289bddc1ed24576faa46364b2d48ab9c0508"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x55}}, @TCA_RATE={0x6, 0x5, {0x3}}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xf}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x258e}, @TCA_FLOW_MASK={0x8, 0x6, 0xffffffff}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x30000000}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x89, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x588}, 0x1, 0x0, 0x0, 0x20000080}, 0x48810) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) (async, rerun: 64) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (rerun: 64) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r11, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) 2m30.869973298s ago: executing program 3 (id=1666): syz_open_dev$dri(&(0x7f0000000080), 0x975, 0x377941) socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, 0x0, 0x109001, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000020003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000001040000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="0200ffe4"], 0x14c}}, 0x4810) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000500)=0x7, 0x4) write$bt_hci(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="016420250900000500ff010b00030000000c0002000400090000004000000403000500670707000100"], 0x29) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000001e0d1400042bbd7000fddbdf2508003e00020000000800030001000000ca9eecea53efe2cb804e2adc238b7c1fecd7a6334652a2d794ccf11d6a89b5ce7d887703347a5d9bd9798caf4c060f2eba9fa1d9d192a7c92f44ad2e53e487ebcd99b49eba1c1f72e903f6b43c9c479da6525cf04b540a7e2d55173333b02da14f7892123893633974be6b583e1686dba7ec8f19c90c29f3"], 0x20}, 0x1, 0x0, 0x0, 0x20000045}, 0x4008000) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x100}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r6, 0x1, &(0x7f0000000600)={0x0}) pread64(r5, &(0x7f0000033240)=""/102400, 0x19000, 0x41e) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f00000001c0)={0x10, 0x1}) 2m29.824247337s ago: executing program 1 (id=1667): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = socket(0xa, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) fallocate(r3, 0x0, 0x7, 0x81) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 2m28.515640738s ago: executing program 0 (id=1668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2m28.286156114s ago: executing program 1 (id=1669): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0x100, 0x300ffffe, 0x2007, 0xffffffff, 0x0, "4d6b5ccb00"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000a40)) socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) 2m27.580852174s ago: executing program 0 (id=1670): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe3fbb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000680001000000000000000000020000000000000008000500", @ANYRES32=r4, @ANYBLOB="a6cf4f07bfa737d5c00a58498791fb8c5db6216227df29560ea32946f233340303b2788d26"], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) close(0xffffffffffffffff) mmap$xdp(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2000012, 0x110, r3, 0x80000000) 2m26.746532645s ago: executing program 3 (id=1671): syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000050) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_clone(0x1800200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x9, 0x4, 0x3) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) 2m14.888130638s ago: executing program 32 (id=1660): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000100)=0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f9502547f70e06d038e7ff7fc6e5539b3471078b089b3b083848090890e0878f0e1ac6e7049b3372959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8a92fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18834dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b8dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00fd104d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff752613d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443eab40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738dd7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a23dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c848a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333aed0418c0b44412d041259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b45030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475af3d3060eac38dcaea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x880, 0x10000000002, 0x0, 0x124, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x6efc, 0x3900, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff00102030109022400550000cf6f6f9602020202000a09058202000200011000000000000000000000f76b07e7ad1a603a89b1af6f88eb4864"], 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x20000115, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) 1m54.478156955s ago: executing program 33 (id=1662): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0x100, 0x300ffffe, 0x2007, 0xffffffff, 0x0, "4d6b5ccb00"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000a40)) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r7, 0xffffffffffffffff, 0x2) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) 1m47.588311111s ago: executing program 34 (id=1670): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe3fbb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000680001000000000000000000020000000000000008000500", @ANYRES32=r4, @ANYBLOB="a6cf4f07bfa737d5c00a58498791fb8c5db6216227df29560ea32946f233340303b2788d26"], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r8, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[r8], &(0x7f0000000200), &(0x7f00000000c0)=[r9], &(0x7f0000000040), 0x0, 0x300}) close(0xffffffffffffffff) mmap$xdp(&(0x7f0000222000/0x2000)=nil, 0x2000, 0x2000012, 0x110, r3, 0x80000000) 1m24.861420207s ago: executing program 35 (id=1669): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000340)={0x100, 0x300ffffe, 0x2007, 0xffffffff, 0x0, "4d6b5ccb00"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000a40)) socket$nl_route(0x10, 0x3, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3ff, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x2}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}]}, 0x5c}}, 0x404c004) 1m22.855392937s ago: executing program 36 (id=1671): syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000050) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_clone(0x1800200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x9, 0x4, 0x3) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) 29.522926709s ago: executing program 8 (id=1675): syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) (async) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x99, 0x8e, 0xfffffffd, 0x1, 0x1, 0x7}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="201524000000b02a7893697920d23161d37f2c70c30cd777cb0bfbcae0a8ff1927af74f9dba20ff02ecfcf03c13c9ef9b3daf61157a261c4434d034d287cf3f045f28aae859b7dfe2f905bf2809a21dee21ec58127adbd3878ead6223522971ef48b7058397719b8a00aa67af2ce522afda82de664b2814168ef3ca149e5fcaf9c11b54144e9b85476e0921bb35f"], 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x6, 0xc, 0xffff, 0xaf1, 0x3, 0x92, 0x1, 0x6c, 0x200, 0x7, 0x1000, 0x101}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xc6}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="201524000000b02a7893697920d23161d37f2c70c30cd777cb0bfbcae0a8ff1927af74f9dba20ff02ecfcf03c13c9ef9b3daf61157a261c4434d034d287cf3f045f28aae859b7dfe2f905bf2809a21dee21ec58127adbd3878ead6223522971ef48b7058397719b8a00aa67af2ce522afda82de664b2814168ef3ca149e5fcaf9c11b54144e9b85476e0921bb35f"], 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x6, 0xc, 0xffff, 0xaf1, 0x3, 0x92, 0x1, 0x6c, 0x200, 0x7, 0x1000, 0x101}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xc6}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, &(0x7f0000000780)={0x20, 0x89, 0x2}}) 29.062683341s ago: executing program 7 (id=1674): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001820000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000000000000004"], 0xa8}}, 0x0) 0s ago: executing program 6 (id=1673): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x44040) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) sendto(r6, 0x0, 0xa00, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0x80fe}, 0x80) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x20}], 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) close(0x4) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0xffffffff, {{0xa, 0x0, 0x100000, @dev={0xfe, 0x80, '\x00', 0xb}}}, {{0xa, 0x4e22, 0x0, @empty, 0x3}}}, 0x108) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) syz_open_dev$dri(0x0, 0x7, 0x220042) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ated_anon:0 [ 497.724077][T11605] active_file:19013 inactive_file:40792 isolated_file:0 [ 497.724077][T11605] unevictable:768 dirty:661 writeback:0 [ 497.724077][T11605] slab_reclaimable:12238 slab_unreclaimable:99319 [ 497.724077][T11605] mapped:36002 shmem:36824 pagetables:1380 [ 497.724077][T11605] sec_pagetables:0 bounce:0 [ 497.724077][T11605] kernel_misc_reclaimable:0 [ 497.724077][T11605] free:1255544 free_pcp:15227 free_cma:0 [ 497.724133][T11605] Node 0 active_anon:199372kB inactive_anon:0kB active_file:76000kB inactive_file:162968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143956kB dirty:2624kB writeback:0kB shmem:145760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12312kB pagetables:5348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 497.724189][T11605] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 497.724233][T11605] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.724288][T11605] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 497.724329][T11605] Node 0 DMA32 free:1113672kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:199372kB inactive_anon:0kB active_file:76000kB inactive_file:162968kB unevictable:1536kB writepending:2624kB zspages:0kB present:3129332kB managed:2544884kB mlocked:0kB bounce:0kB free_pcp:42044kB local_pcp:24976kB free_cma:0kB [ 497.724405][T11605] lowmem_reserve[]: 0 0 1 1 1 [ 497.724446][T11605] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 497.724509][T11605] lowmem_reserve[]: 0 0 0 0 0 [ 497.724550][T11605] Node 1 Normal free:3893160kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB writepending:20kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18864kB local_pcp:18864kB free_cma:0kB [ 497.724616][T11605] lowmem_reserve[]: 0 0 0 0 0 [ 497.724656][T11605] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 497.724824][T11605] Node 0 DMA32: 0*4kB 86*8kB (UM) 27*16kB (UM) 239*32kB (UME) 170*64kB (UME) 145*128kB (UM) 75*256kB (UM) 31*512kB (UME) 20*1024kB (UM) 8*2048kB (UME) 245*4096kB (UM) = 1113664kB [ 497.740063][T11605] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 498.634081][T11605] Node 1 Normal: 198*4kB (UE) 56*8kB (UME) 31*16kB (UME) 187*32kB (UME) 60*64kB (UME) 13*128kB (UME) 8*256kB (UME) 8*512kB (UME) 5*1024kB (UME) 3*2048kB (ME) 943*4096kB (M) = 3893160kB [ 498.634270][T11605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.634288][T11605] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 498.634308][T11605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 498.634325][T11605] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 498.634343][T11605] 95958 total pagecache pages [ 498.634352][T11605] 0 pages in swap cache [ 498.634360][T11605] Free swap = 124996kB [ 498.634369][T11605] Total swap = 124996kB [ 498.634379][T11605] 2097051 pages RAM [ 498.634386][T11605] 0 pages HighMem/MovableOnly [ 498.634394][T11605] 428740 pages reserved [ 498.634403][T11605] 0 pages cma reserved [ 498.796069][ T5933] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 498.871403][ T3095] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 498.970288][ T5933] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 498.974053][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.016127][ T5933] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 499.019255][ T5933] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 499.019391][ T5933] usb 5-1: Manufacturer: syz [ 499.242357][ T5933] usb 5-1: config 0 descriptor?? [ 499.433776][ T3095] usb 4-1: Using ep0 maxpacket: 32 [ 499.443044][ T3095] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 499.443073][ T3095] usb 4-1: config 0 has no interface number 0 [ 499.443112][ T3095] usb 4-1: config 0 interface 2 has no altsetting 0 [ 499.444939][ T3095] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 499.444969][ T3095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.446030][ T5933] rc_core: IR keymap rc-hauppauge not found [ 499.446045][ T5933] Registered IR keymap rc-empty [ 499.447043][ T5933] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 499.447289][ T3095] usb 4-1: Product: syz [ 499.447307][ T3095] usb 4-1: Manufacturer: syz [ 499.447324][ T3095] usb 4-1: SerialNumber: syz [ 499.452409][ T5933] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 499.456616][ T3095] usb 4-1: config 0 descriptor?? [ 499.698385][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 84 [ 499.951581][T11599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.954308][T11599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.392747][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 500.392764][ T30] audit: type=1400 audit(756.350:1256): avc: denied { read } for pid=11628 comm="syz.2.1391" path="socket:[34132]" dev="sockfs" ino=34132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 500.474438][T11626] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 500.511460][ T2951] Bluetooth: hci5: Frame reassembly failed (-84) [ 500.511779][ T33] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 500.975661][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1391'. [ 500.976711][ T30] audit: type=1400 audit(756.940:1257): avc: denied { listen } for pid=11628 comm="syz.2.1391" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 501.053443][T11633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1391'. [ 501.461894][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.966879][ T976] usb 5-1: USB disconnect, device number 60 [ 502.103830][ T3095] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.452046][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 502.458399][ T5136] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 502.923314][ T3095] usb 4-1: USB disconnect, device number 62 [ 503.082498][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.339844][T11662] : renamed from wg2 (while UP) [ 503.355403][ T30] audit: type=1400 audit(759.320:1258): avc: denied { mount } for pid=11658 comm="syz.3.1396" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 503.434207][ T30] audit: type=1400 audit(759.390:1259): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 503.748046][ T30] audit: type=1326 audit(759.410:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 503.840255][ T30] audit: type=1326 audit(759.410:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 503.880055][ T30] audit: type=1326 audit(759.410:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 503.905641][ T30] audit: type=1326 audit(759.410:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 503.938742][ T30] audit: type=1326 audit(759.410:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 503.963463][ T30] audit: type=1326 audit(759.700:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 504.177382][ T976] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 504.355218][ T5933] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 504.377827][ T976] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 504.389454][ T976] usb 2-1: config 0 interface 0 has no altsetting 0 [ 504.415308][ T976] usb 2-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 504.435903][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.692300][ T976] usb 2-1: config 0 descriptor?? [ 504.700726][ T5933] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 504.712908][ T5933] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 504.722284][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.754479][ T5933] usb 4-1: Product: syz [ 504.772473][ T5933] usb 4-1: Manufacturer: syz [ 504.786168][ T5933] usb 4-1: SerialNumber: syz [ 504.827960][ T5933] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 504.840651][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 504.867168][ T5933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.882298][ T5933] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 504.892475][ T5933] usb 4-1: media controller created [ 504.935596][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.005506][ T43] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 505.029701][ T5933] DVB: Unable to find symbol mt352_attach() [ 505.036017][ T5933] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 505.055848][ T5933] dvb-usb: bulk message failed: -22 (3/0) [ 505.115609][ T5933] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 505.157089][ T5933] usb 4-1: USB disconnect, device number 63 [ 505.186529][ T43] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 505.200543][ T976] apple 0003:05AC:022B.0013: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.1-1/input0 [ 505.210003][ T43] usb 5-1: config 0 has no interface number 0 [ 505.257698][ T43] usb 5-1: config 0 interface 217 has no altsetting 0 [ 505.285691][ T5933] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 505.288318][ T43] usb 5-1: New USB device found, idVendor=19d2, idProduct=1137, bcdDevice=df.76 [ 505.320898][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.364722][ T43] usb 5-1: Product: syz [ 505.384921][ T43] usb 5-1: Manufacturer: syz [ 505.401027][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 505.401043][ T30] audit: type=1326 audit(761.360:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 505.411001][ T43] usb 5-1: SerialNumber: syz [ 505.453296][ T3095] usb 2-1: USB disconnect, device number 56 [ 505.453832][ T30] audit: type=1326 audit(761.360:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 505.496876][ T43] usb 5-1: config 0 descriptor?? [ 505.537066][ T43] option 5-1:0.217: GSM modem (1-port) converter detected [ 505.562788][ T30] audit: type=1326 audit(761.360:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 505.625519][ T30] audit: type=1326 audit(761.370:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fed38d810 code=0x7ffc0000 [ 505.651690][ T30] audit: type=1400 audit(761.370:1320): avc: denied { open } for pid=11665 comm="syz.1.1399" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 505.674730][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.816121][ T3095] usb 5-1: USB disconnect, device number 61 [ 505.824044][ T3095] option 5-1:0.217: device disconnected [ 506.309667][ T30] audit: type=1326 audit(761.370:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 506.348305][ T30] audit: type=1326 audit(761.370:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 506.371159][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.402633][ T30] audit: type=1326 audit(761.370:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 506.425390][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.432551][ T30] audit: type=1400 audit(761.370:1324): avc: denied { ioctl } for pid=11665 comm="syz.1.1399" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 506.457060][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.466980][ T30] audit: type=1326 audit(761.370:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11665 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fed38efc9 code=0x7ffc0000 [ 506.489894][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.626820][ T5893] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 507.788484][ T5893] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 507.827034][ T5893] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 507.874016][ T5893] usb 1-1: config 0 has no interface number 0 [ 507.897331][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 507.909610][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1419'. [ 508.036418][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.059601][ T5893] usb 1-1: Product: syz [ 508.065758][ T5893] usb 1-1: Manufacturer: syz [ 508.072357][ T5893] usb 1-1: SerialNumber: syz [ 508.099369][ T5893] usb 1-1: config 0 descriptor?? [ 508.311278][T11714] delete_channel: no stack [ 508.334565][ T5893] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 508.359627][ T5893] uvcvideo 1-1:0.64: No valid video chain found. [ 508.406260][ T5893] usb 1-1: USB disconnect, device number 44 [ 509.326299][ T5893] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 509.766556][ T5893] usb 5-1: device descriptor read/64, error -71 [ 509.955982][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 509.999126][ T5933] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 510.015234][ T979] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 510.035147][ T5893] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 510.305359][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 510.310842][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 510.356157][ T5893] usb 5-1: device descriptor read/64, error -71 [ 510.374616][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 510.397623][ T5933] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 510.410825][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 510.410862][ T30] audit: type=1400 audit(766.370:1344): avc: denied { kexec_image_load } for pid=11763 comm="syz.2.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 510.410922][ T5933] usb 4-1: config 0 has no interface number 0 [ 510.451507][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 510.463078][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.467206][ T5893] usb usb5-port1: attempt power cycle [ 510.472460][ T979] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 510.490773][ T979] usb 1-1: config 1 has no interface number 1 [ 510.515954][ T9] usb 2-1: config 0 descriptor?? [ 510.522771][ T979] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.539620][ T5933] usb 4-1: config 0 interface 41 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 510.595992][ T979] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 510.609498][ T979] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.622586][ T5933] usb 4-1: New USB device found, idVendor=3537, idProduct=bbc1, bcdDevice=fb.28 [ 510.634112][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.642601][ T5933] usb 4-1: Product: syz [ 510.647239][ T5933] usb 4-1: Manufacturer: syz [ 510.651893][ T5933] usb 4-1: SerialNumber: syz [ 510.656719][ T979] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 510.670274][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.679229][ T5933] usb 4-1: config 0 descriptor?? [ 510.686480][ T979] usb 1-1: Product: syz [ 510.691360][ T979] usb 1-1: Manufacturer: syz [ 510.698130][ T979] usb 1-1: SerialNumber: syz [ 510.777562][T11756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.787841][T11756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.843375][ T30] audit: type=1400 audit(766.800:1345): avc: denied { read } for pid=11755 comm="syz.1.1423" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 510.870491][ T5893] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 510.882265][ T5933] usb 2-1: USB disconnect, device number 57 [ 510.898823][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.908728][ T30] audit: type=1400 audit(766.800:1346): avc: denied { open } for pid=11755 comm="syz.1.1423" path="/dev/sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 510.932527][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.946870][ T9] usb 4-1: USB disconnect, device number 64 [ 510.961062][ T30] audit: type=1400 audit(766.830:1347): avc: denied { ioctl } for pid=11755 comm="syz.1.1423" path="/dev/sg0" dev="devtmpfs" ino=777 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 511.031338][ T5893] usb 5-1: device descriptor read/8, error -71 [ 511.160468][ T979] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 511.315153][ T5893] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 511.347767][ T5893] usb 5-1: device descriptor read/8, error -71 [ 511.465824][ T5893] usb usb5-port1: unable to enumerate USB device [ 511.696978][ T5933] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 511.768431][T11760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.783907][ T30] audit: type=1400 audit(767.750:1348): avc: denied { create } for pid=11780 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 511.806569][T11760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.475677][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 512.483931][ T30] audit: type=1400 audit(767.930:1349): avc: denied { setopt } for pid=11780 comm="syz.3.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 512.503895][ T5933] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 512.522720][ T979] usb 1-1: current rate 12062720 is different from the runtime rate 9338507 [ 512.560715][ T5933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 512.695052][ T5933] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 512.768643][ T5933] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.816438][ T979] usb 1-1: USB disconnect, device number 45 [ 512.824553][ T5933] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.133079][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.165078][ T30] audit: type=1400 audit(769.110:1350): avc: denied { read } for pid=11794 comm="syz.3.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 513.322935][T11801] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 513.329955][T11801] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 513.338288][T11801] vhci_hcd vhci_hcd.0: Device attached [ 513.362826][ T30] audit: type=1400 audit(769.160:1351): avc: denied { map_create } for pid=11794 comm="syz.3.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 513.392855][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.422332][ T30] audit: type=1400 audit(769.160:1352): avc: denied { bpf } for pid=11794 comm="syz.3.1434" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 513.446766][ T30] audit: type=1400 audit(769.160:1353): avc: denied { map_read map_write } for pid=11794 comm="syz.3.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 513.607608][T11802] vhci_hcd: connection closed [ 513.616225][ T5933] usb 2-1: GET_CAPABILITIES returned 0 [ 513.645144][ T5933] usbtmc 2-1:16.0: can't read capabilities [ 513.660256][ T6190] vhci_hcd: stop threads [ 513.860416][ T979] usb 40-1: SetAddress Request (2) to port 0 [ 513.900544][ T979] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 513.973097][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 513.984764][T11773] usbtmc 2-1:16.0: Unable to send data, error -71 [ 514.039239][ T976] usb 2-1: USB disconnect, device number 58 [ 514.125598][ T6190] vhci_hcd: release socket [ 514.143592][ T6190] vhci_hcd: disconnect device [ 514.165126][ T5933] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 514.356275][ T5933] usb 5-1: config 0 has an invalid descriptor of length 50, skipping remainder of the config [ 514.389068][ T5933] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 514.408849][ T5933] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 514.439060][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.467252][ T5933] usb 5-1: Product: syz [ 514.476533][ T5933] usb 5-1: Manufacturer: syz [ 514.481162][ T5933] usb 5-1: SerialNumber: syz [ 514.498147][ T5933] usb 5-1: config 0 descriptor?? [ 514.985526][ T5933] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 514.995127][ T9] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 515.061468][T11837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.072376][T11837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.148767][T11843] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 515.255062][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 515.263018][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 515.275331][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 515.291700][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 515.302377][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 515.313509][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 515.326311][ T5933] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 515.341022][ T5933] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 515.357472][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.382220][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.394955][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.425826][ T5933] usb 1-1: Product: syz [ 515.434211][ T9] usb 2-1: Product: syz [ 515.441014][ T5933] usb 1-1: Manufacturer: syz [ 515.447984][ T9] usb 2-1: Manufacturer: syz [ 515.452636][ T5933] usb 1-1: SerialNumber: syz [ 515.458405][ T9] usb 2-1: SerialNumber: syz [ 515.478819][T11824] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 515.497817][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 515.712390][T11855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11855 comm=syz.3.1450 [ 515.790690][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.806042][ T5933] usb 1-1: Cannot retrieve CPort count: 0 [ 515.813357][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.815156][ T976] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 515.834684][ T5933] usb 1-1: Cannot retrieve CPort count: -5 [ 515.839881][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.841799][ T5933] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 515.862523][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.886537][T11824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.920095][T11824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.942398][T11824] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 515.953520][T11824] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 516.015455][ T43] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 516.078944][ T5926] usb 1-1: USB disconnect, device number 46 [ 516.182937][ T976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 516.194778][ T976] usb 3-1: not running at top speed; connect to a high speed hub [ 516.204922][ T976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.206584][ T43] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 516.215425][ T976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.223608][ T43] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 516.236113][ T976] usb 3-1: string descriptor 0 read error: -22 [ 516.245853][ T43] usb 4-1: config 8 has no interface number 0 [ 516.250217][ T976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.259337][ T43] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 516.265668][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.284972][ T43] usb 4-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8B has invalid maxpacket 255 [ 516.295921][ T43] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.301915][ T976] usb 3-1: 0:2 : does not exist [ 516.313023][ T43] usb 4-1: config 8 interface 177 has no altsetting 0 [ 516.321403][ T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 516.330587][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.341463][T11855] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 516.379521][ T9] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 516.385913][ T9] cdc_mbim 2-1:1.0: bind() failure [ 516.394640][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 516.401771][ T9] cdc_ncm 2-1:1.1: bind() failure [ 516.413499][ T9] usb 2-1: USB disconnect, device number 59 [ 516.458050][ T5893] usb 5-1: USB disconnect, device number 66 [ 516.595545][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 516.595562][ T30] audit: type=1400 audit(772.560:1406): avc: denied { write } for pid=11856 comm="syz.4.1451" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 516.675308][ T30] audit: type=1400 audit(772.560:1407): avc: denied { read } for pid=11856 comm="syz.4.1451" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 516.697766][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.727409][ T30] audit: type=1400 audit(772.560:1408): avc: denied { open } for pid=11856 comm="syz.4.1451" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 516.750285][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.757045][ T30] audit: type=1400 audit(772.680:1409): avc: denied { read write } for pid=11850 comm="syz.2.1449" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 516.783640][ T30] audit: type=1400 audit(772.680:1410): avc: denied { open } for pid=11850 comm="syz.2.1449" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 516.814883][ T30] audit: type=1400 audit(772.680:1411): avc: denied { mounton } for pid=11850 comm="syz.2.1449" path="/300/file0" dev="tmpfs" ino=1626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 516.844872][ T30] audit: type=1400 audit(772.680:1412): avc: denied { mount } for pid=11850 comm="syz.2.1449" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 516.866279][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.512374][ T30] audit: type=1400 audit(773.470:1413): avc: denied { create } for pid=11869 comm="syz.4.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 517.605101][ T30] audit: type=1400 audit(773.500:1414): avc: denied { setopt } for pid=11869 comm="syz.4.1454" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 517.625421][ T30] audit: type=1400 audit(773.500:1415): avc: denied { write } for pid=11869 comm="syz.4.1454" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 518.521285][ T43] usb 4-1: string descriptor 0 read error: -71 [ 518.539533][ T43] ir_toy 4-1:8.177: required endpoints not found [ 518.585179][ T976] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 518.586873][ T43] usb 4-1: USB disconnect, device number 65 [ 518.663800][ T976] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 518.713661][ T976] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 518.858823][ T976] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 519.013570][ T976] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 519.414023][ T979] usb 40-1: device descriptor read/8, error -110 [ 519.450694][ T976] usb 3-1: USB disconnect, device number 50 [ 519.807129][ T979] usb usb40-port1: attempt power cycle [ 520.152342][T11916] Unsupported ieee802154 address type: 0 [ 520.829180][ T979] usb usb40-port1: unable to enumerate USB device [ 521.366477][T11925] netlink: 5076 bytes leftover after parsing attributes in process `syz.4.1467'. [ 521.398854][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1467'. [ 521.575280][ T3095] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 521.628299][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 521.628316][ T30] audit: type=1400 audit(777.500:1448): avc: denied { map } for pid=11909 comm="syz.3.1463" path="socket:[34626]" dev="sockfs" ino=34626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 521.749880][ T30] audit: type=1400 audit(777.710:1449): avc: denied { prog_load } for pid=11926 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 521.845079][ T3095] usb 2-1: Using ep0 maxpacket: 8 [ 521.854078][ T3095] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 521.863686][ T3095] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 521.877113][ T3095] usb 2-1: Product: syz [ 521.881298][ T3095] usb 2-1: Manufacturer: syz [ 521.950268][ T30] audit: type=1400 audit(777.740:1450): avc: denied { bpf } for pid=11926 comm="syz.2.1468" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 521.970382][ T30] audit: type=1400 audit(777.740:1451): avc: denied { perfmon } for pid=11926 comm="syz.2.1468" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 521.991168][ T3095] usb 2-1: SerialNumber: syz [ 521.991170][ T30] audit: type=1400 audit(777.750:1452): avc: denied { execmem } for pid=11931 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 522.014593][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.055243][ T976] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 522.547898][ T30] audit: type=1400 audit(778.050:1453): avc: denied { read } for pid=11931 comm="syz.4.1469" dev="nsfs" ino=4026532794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 522.575913][ T30] audit: type=1400 audit(778.060:1454): avc: denied { open } for pid=11931 comm="syz.4.1469" path="pid:[4026532794]" dev="nsfs" ino=4026532794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 522.711791][T11937] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 522.753103][ T30] audit: type=1400 audit(778.090:1455): avc: denied { create } for pid=11931 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 522.782134][ T3095] usb 2-1: config 0 descriptor?? [ 522.800092][ T976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.823465][ T3095] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 522.828555][ T976] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 522.834269][ T30] audit: type=1400 audit(778.100:1456): avc: denied { bind } for pid=11931 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 522.852687][ T976] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.859295][ T30] audit: type=1400 audit(778.110:1457): avc: denied { accept } for pid=11931 comm="syz.4.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 522.913703][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.940055][ T976] usb 3-1: Product: syz [ 522.964293][ T976] usb 3-1: Manufacturer: syz [ 522.984364][ T976] usb 3-1: SerialNumber: syz [ 523.029030][ T976] cdc_mbim 3-1:1.0: skipping garbage [ 523.228581][T11927] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 523.437606][T11927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.446380][T11927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.518767][ T3095] gspca_zc3xx: reg_w_i err -71 [ 523.523714][ T3095] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 523.559962][ T3095] usb 2-1: USB disconnect, device number 60 [ 523.592038][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 523.601704][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 523.615848][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 523.637864][T11967] vlan0: entered allmulticast mode [ 523.643037][T11967] dummy0: entered allmulticast mode [ 523.747612][ T976] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 523.754303][ T976] cdc_mbim 3-1:1.0: bind() failure [ 523.769030][ T976] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 523.785047][ T976] cdc_ncm 3-1:1.1: bind() failure [ 524.377313][T11972] No control pipe specified [ 524.935733][ T5933] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 524.979442][T11985] netlink: 'syz.4.1483': attribute type 11 has an invalid length. [ 524.990039][T11985] netlink: 'syz.4.1483': attribute type 11 has an invalid length. [ 524.998328][T11985] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1483'. [ 525.095086][ T5933] usb 2-1: Using ep0 maxpacket: 8 [ 525.103348][ T5933] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 525.113545][ T5933] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 525.124030][ T5933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.135663][ T5933] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.145292][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.153353][ T5933] usb 2-1: Product: 梟샏ⲣ䰆㌶੧財纒 [ 525.160391][ T5933] usb 2-1: Manufacturer: Ж [ 525.164948][ T5933] usb 2-1: SerialNumber: ࠜꆭ挮卵뻡ꚲ끘頦㪐念鈅㡤哶囷ፇ櫀᪈熲滳꘻☀汀鞦鲷細型쿾崚捄鰉璓끻픀躖謘诩鈈呉㶠ァ梺篥㡖裍롷寛⤜曷긮걨➣ᳱꮸ舒峠팝跑焙ﰟ᤹⸒댻ᇕ㏅ក윝蟉ꋁ콡ꂺϗ⁦뒎陗俖燼㬝촼⾗笖ᇋ䨔膋 [ 525.200287][ T5933] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 525.209395][ T5933] usb 2-1: no configuration chosen from 1 choice [ 525.290903][ T3095] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 525.354597][ T5933] usb 3-1: USB disconnect, device number 51 [ 525.515792][ T3095] usb 5-1: Using ep0 maxpacket: 32 [ 525.533123][ T3095] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 525.556443][ T3095] usb 5-1: config 0 has no interface number 0 [ 525.568740][ T3095] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 525.600458][ T3095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.623503][ T3095] usb 5-1: Product: syz [ 525.633043][T11995] random: crng reseeded on system resumption [ 525.645086][ T3095] usb 5-1: Manufacturer: syz [ 525.650829][ T3095] usb 5-1: SerialNumber: syz [ 525.662730][ T3095] usb 5-1: config 0 descriptor?? [ 525.681654][ T3095] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 525.700333][ T3095] dvb-usb: bulk message failed: -22 (2/0) [ 525.719491][ T3095] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 525.729906][ T3095] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 525.741684][ T3095] usb 5-1: media controller created [ 525.760594][ T3095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 525.779399][ T3095] cxusb: set interface failed [ 525.784232][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 525.815255][ T5933] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 525.842069][ T3095] DVB: Unable to find symbol lgdt330x_attach() [ 525.848515][ T3095] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 525.907073][ T3095] rc_core: IR keymap rc-dvico-portable not found [ 525.926742][ T3095] Registered IR keymap rc-empty [ 525.943003][ T3095] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 525.955098][ T976] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 525.975541][ T5933] usb 3-1: device descriptor read/64, error -71 [ 525.989025][ T3095] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input26 [ 526.027991][ T3095] dvb-usb: schedule remote query interval to 100 msecs. [ 526.106601][ T976] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 526.116524][ T3095] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 526.129471][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.165773][ T976] usb 4-1: config 0 descriptor?? [ 526.182167][ T976] cp210x 4-1:0.0: cp210x converter detected [ 526.215248][ T5933] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 526.227416][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 526.364045][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 526.365576][ T5933] usb 3-1: device descriptor read/64, error -71 [ 526.405650][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 526.405665][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 526.423730][T11995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.440767][T11995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.549914][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 526.565271][ T5933] usb usb3-port1: attempt power cycle [ 526.776972][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 527.001189][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 527.001279][ T30] audit: type=1400 audit(782.880:1549): avc: denied { execute } for pid=12007 comm="syz.0.1488" path="/319/cpuacct.usage_percpu" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 527.003122][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 527.121568][ T5933] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 527.160868][ T5933] usb 3-1: device descriptor read/8, error -71 [ 527.415075][ T5933] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 527.435677][ T5933] usb 3-1: device descriptor read/8, error -71 [ 527.545310][ T5933] usb usb3-port1: unable to enumerate USB device [ 527.615043][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 527.714871][ T5933] usb 2-1: USB disconnect, device number 61 [ 527.725282][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 527.802932][ T30] audit: type=1400 audit(783.760:1550): avc: denied { sqpoll } for pid=12013 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 527.845185][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 527.853430][ T30] audit: type=1400 audit(783.780:1551): avc: denied { map } for pid=12013 comm="syz.1.1490" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 527.989573][ T30] audit: type=1400 audit(783.780:1552): avc: denied { read write } for pid=12013 comm="syz.1.1490" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 527.997039][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 528.075133][ T30] audit: type=1400 audit(783.850:1553): avc: denied { create } for pid=12013 comm="syz.1.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 528.119562][ T30] audit: type=1400 audit(784.000:1554): avc: denied { read } for pid=12010 comm="syz.0.1489" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 528.155990][ T3095] dvb-usb: bulk message failed: -22 (1/0) [ 528.238907][ T30] audit: type=1400 audit(784.000:1555): avc: denied { open } for pid=12010 comm="syz.0.1489" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 528.265240][ T5893] dvb-usb: bulk message failed: -22 (1/0) [ 528.279306][ T5893] usb 5-1: USB disconnect, device number 67 [ 528.357037][ T30] audit: type=1400 audit(784.000:1556): avc: denied { ioctl } for pid=12010 comm="syz.0.1489" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 528.392109][ T30] audit: type=1400 audit(784.130:1557): avc: denied { write } for pid=12023 comm="syz.1.1492" name="protocols" dev="proc" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 528.446681][ T5893] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 528.706106][T12037] netlink: 'syz.0.1494': attribute type 3 has an invalid length. [ 529.461598][ T976] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 529.477498][T12044] tipc: Enabling of bearer rejected, already enabled [ 529.537164][ T976] cp210x 4-1:0.0: querying part number failed [ 529.567039][T12040] can0: slcan on ptm0. [ 529.590613][T12044] binder: 12043:12044 unknown command 851968 [ 529.617909][ T30] audit: type=1400 audit(785.570:1558): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 529.658422][T12044] binder: 12043:12044 ioctl c0306201 200000000080 returned -22 [ 529.678113][ T976] usb 4-1: cp210x converter now attached to ttyUSB0 [ 529.684644][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 529.714002][ T976] usb 4-1: USB disconnect, device number 66 [ 530.369076][ T976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 530.418692][ T976] cp210x 4-1:0.0: device disconnected [ 530.456359][T12032] can0 (unregistered): slcan off ptm0. [ 531.440766][T12062] No control pipe specified [ 531.546471][ T976] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 531.916314][ T976] usb 4-1: Using ep0 maxpacket: 16 [ 531.938197][ T976] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 531.970377][ T976] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.065222][ T976] usb 4-1: config 0 interface 0 has no altsetting 0 [ 532.074868][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 532.074882][ T30] audit: type=1400 audit(788.030:1570): avc: denied { mounton } for pid=12068 comm="syz.0.1503" path="/325/file0" dev="tmpfs" ino=1750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 532.104026][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1503'. [ 532.209381][ T976] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 532.219184][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.237687][ T976] usb 4-1: config 0 descriptor?? [ 532.515408][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 532.554577][ T30] audit: type=1400 audit(788.510:1571): avc: denied { add_name } for pid=12057 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.628440][ T30] audit: type=1400 audit(788.530:1572): avc: denied { create } for pid=12057 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.674404][ T30] audit: type=1400 audit(788.530:1573): avc: denied { write } for pid=12057 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=7160 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.719661][T12048] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 532.721335][ T30] audit: type=1400 audit(788.530:1574): avc: denied { append } for pid=12057 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=7160 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 532.752233][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 532.761050][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 532.783624][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 532.849670][ T976] hid_parser_main: 2 callbacks suppressed [ 532.849692][ T976] thrustmaster 0003:044F:B654.0014: unknown main item tag 0x0 [ 533.038860][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.240427][ T30] audit: type=1400 audit(788.700:1575): avc: denied { write } for pid=12082 comm="syz.1.1506" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 533.253609][ T976] thrustmaster 0003:044F:B654.0014: unknown main item tag 0x0 [ 533.288157][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 533.319490][ T30] audit: type=1400 audit(788.700:1576): avc: denied { open } for pid=12082 comm="syz.1.1506" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 533.331583][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 533.358626][ T976] thrustmaster 0003:044F:B654.0014: unknown main item tag 0x0 [ 533.381365][ T976] thrustmaster 0003:044F:B654.0014: unknown main item tag 0x0 [ 533.407282][ T976] thrustmaster 0003:044F:B654.0014: unknown main item tag 0x0 [ 533.427819][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 533.437544][ T976] thrustmaster 0003:044F:B654.0014: hidraw0: USB HID v4.04 Device [HID 044f:b654] on usb-dummy_hcd.3-1/input0 [ 533.456390][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 533.575048][ T30] audit: type=1400 audit(788.720:1577): avc: denied { read write } for pid=12085 comm="syz.4.1507" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 533.835035][ T976] thrustmaster 0003:044F:B654.0014: no inputs found [ 533.845051][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.885348][ T976] usb 4-1: USB disconnect, device number 67 [ 533.896686][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 533.912670][ T30] audit: type=1400 audit(788.730:1578): avc: denied { open } for pid=12085 comm="syz.4.1507" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 533.952732][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 533.986232][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 533.997015][ T30] audit: type=1400 audit(789.240:1579): avc: denied { remove_name } for pid=12090 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=7160 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.025616][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 534.064219][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 534.316590][T12098] fido_id[12098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 534.395130][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 534.478668][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 534.524343][ T9] usb 3-1: string descriptor 0 read error: -22 [ 534.555310][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 534.718403][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.955086][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 535.275942][ T5933] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 535.625058][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 535.631748][ T5933] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.644249][ T5933] usb 1-1: config 0 has no interface number 0 [ 535.675102][ T5933] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 535.715443][ T5933] usb 1-1: config 0 interface 1 has no altsetting 0 [ 535.895071][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 535.930804][ T5933] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 535.979133][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.014676][ T5933] usb 1-1: Product: syz [ 536.027991][ T5933] usb 1-1: Manufacturer: syz [ 536.042458][ T5933] usb 1-1: SerialNumber: syz [ 536.047186][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 536.057499][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.068307][T12134] 9pnet_fd: Insufficient options for proto=fd [ 536.126743][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 536.248158][ T5933] usb 1-1: config 0 descriptor?? [ 536.255044][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 536.369577][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.488569][ T9] usb 2-1: config 0 descriptor?? [ 536.638963][ T5933] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 536.673615][ T5933] cx231xx 1-1:0.1: Failed to read PCB config [ 536.694311][ T5933] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 536.741920][ T5933] usb 1-1: USB disconnect, device number 47 [ 536.934651][ T9] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 537.065199][ T976] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 537.285738][ T5933] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 537.373619][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 537.373653][ T30] audit: type=1400 audit(793.330:1591): avc: denied { create } for pid=12121 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.405718][ T976] usb 4-1: config 127 has an invalid interface number: 124 but max is 0 [ 537.416318][ T30] audit: type=1400 audit(793.360:1592): avc: denied { bind } for pid=12121 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.429622][T12122] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 537.444909][ T976] usb 4-1: config 127 has no interface number 0 [ 537.453340][ T976] usb 4-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 537.464623][ T30] audit: type=1400 audit(793.370:1593): avc: denied { listen } for pid=12121 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.479230][ T5893] usb 2-1: USB disconnect, device number 62 [ 537.484105][ T976] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 537.503858][ T30] audit: type=1400 audit(793.390:1594): avc: denied { connect } for pid=12121 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.526966][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.538792][ T30] audit: type=1400 audit(793.420:1595): avc: denied { write } for pid=12121 comm="syz.1.1514" path="socket:[35552]" dev="sockfs" ino=35552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.561882][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.570471][ T30] audit: type=1400 audit(793.430:1596): avc: denied { accept } for pid=12121 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.609444][ T30] audit: type=1400 audit(793.430:1597): avc: denied { read } for pid=12121 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.628540][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 537.636299][ T5933] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.644407][ T5933] usb 1-1: config 0 has no interface number 0 [ 537.652386][ T5933] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 537.663568][ T5933] usb 1-1: config 0 interface 1 has no altsetting 0 [ 537.674923][ T5933] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 537.697699][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.713420][ T5933] usb 1-1: Product: syz [ 537.717878][T12147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1520'. [ 537.728696][ T5933] usb 1-1: Manufacturer: syz [ 537.734341][ T5933] usb 1-1: SerialNumber: syz [ 537.748090][ T976] peak_usb 4-1:127.124 can0: unable to request usb[type=0 value=1] err=-71 [ 537.767854][ T5933] usb 1-1: config 0 descriptor?? [ 537.772985][ T976] peak_usb 4-1:127.124: unable to read PCAN-Chip USB firmware info (err -71) [ 537.856471][ T976] peak_usb 4-1:127.124: probe with driver peak_usb failed with error -71 [ 537.876757][ T976] usb 4-1: USB disconnect, device number 68 [ 538.010602][ T5933] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 538.050174][ T30] audit: type=1400 audit(794.000:1598): avc: denied { mount } for pid=12150 comm="syz.4.1521" name="/" dev="ramfs" ino=36029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 538.082834][ T5933] cx231xx 1-1:0.1: Failed to read PCB config [ 538.090446][ T5933] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 538.110315][ T5933] usb 1-1: USB disconnect, device number 48 [ 538.316676][T12170] Device name cannot be null; rc = [-22] [ 538.333946][T12170] syz.0.1522 (12170): attempted to duplicate a private mapping with mremap. This is not supported. [ 538.400293][ T30] audit: type=1400 audit(794.360:1599): avc: denied { create } for pid=12150 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 538.697299][ T30] audit: type=1400 audit(794.650:1600): avc: denied { create } for pid=12173 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 539.345985][T12167] team0: Port device team_slave_0 removed [ 539.670886][ T5893] usb 3-1: USB disconnect, device number 56 [ 539.786909][T12188] FAULT_INJECTION: forcing a failure. [ 539.786909][T12188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.800053][T12188] CPU: 0 UID: 0 PID: 12188 Comm: syz.3.1525 Not tainted syzkaller #0 PREEMPT(full) [ 539.800079][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.800091][T12188] Call Trace: [ 539.800099][T12188] [ 539.800107][T12188] dump_stack_lvl+0x16c/0x1f0 [ 539.800142][T12188] should_fail_ex+0x512/0x640 [ 539.800170][T12188] _copy_from_iter+0x29f/0x1720 [ 539.800199][T12188] ? __alloc_skb+0x200/0x380 [ 539.800225][T12188] ? __pfx__copy_from_iter+0x10/0x10 [ 539.800269][T12188] netlink_sendmsg+0x820/0xdd0 [ 539.800304][T12188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.800337][T12188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.800370][T12188] ____sys_sendmsg+0xa98/0xc70 [ 539.800403][T12188] ? copy_msghdr_from_user+0x10a/0x160 [ 539.800429][T12188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.800458][T12188] ? trace_sched_exit_tp+0xd1/0x120 [ 539.800490][T12188] ? __pfx__raw_spin_unlock_irq+0x1/0x10 [ 539.800522][T12188] ___sys_sendmsg+0x134/0x1d0 [ 539.800553][T12188] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.800609][T12188] ? __sys_sendmsg+0xd6/0x220 [ 539.800643][T12188] __sys_sendmsg+0x16d/0x220 [ 539.800670][T12188] ? __pfx___sys_sendmsg+0x10/0x10 [ 539.800716][T12188] do_syscall_64+0xcd/0xfa0 [ 539.800747][T12188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.800768][T12188] RIP: 0033:0x7f18b9b8efc9 [ 539.800781][T12188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.800798][T12188] RSP: 002b:00007f18b7df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.800816][T12188] RAX: ffffffffffffffda RBX: 00007f18b9de6180 RCX: 00007f18b9b8efc9 [ 539.800831][T12188] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 539.800844][T12188] RBP: 00007f18b7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 539.800857][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.800870][T12188] R13: 00007f18b9de6218 R14: 00007f18b9de6180 R15: 00007ffdc853a3f8 [ 539.800900][T12188] [ 540.005296][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.940441][T12206] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 544.165898][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 544.184384][T12236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1536'. [ 544.317582][ T5893] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 544.365064][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 544.381684][ T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 544.408956][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.508851][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 544.508885][ T30] audit: type=1400 audit(800.440:1612): avc: denied { setattr } for pid=12257 comm="syz.4.1540" name="seq" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 544.618219][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 544.702260][ T5893] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 544.836021][ T9] usb 4-1: Product: syz [ 544.840250][ T9] usb 4-1: Manufacturer: syz [ 544.844849][ T9] usb 4-1: SerialNumber: syz [ 544.868388][ T5893] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 544.877748][ T9] usb 4-1: config 0 descriptor?? [ 544.883534][ T30] audit: type=1400 audit(800.450:1613): avc: denied { mount } for pid=12257 comm="syz.4.1540" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 544.911753][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 544.914659][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 544.947485][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 544.988740][ T5893] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 545.022963][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 545.054426][ T5893] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 545.152435][ T30] audit: type=1400 audit(801.110:1614): avc: denied { read } for pid=12245 comm="syz.3.1538" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 545.175048][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.214243][ T30] audit: type=1400 audit(801.110:1615): avc: denied { open } for pid=12245 comm="syz.3.1538" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 545.238119][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 545.238171][ T5893] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 545.238197][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.256189][ T5893] usb 1-1: config 0 descriptor?? [ 545.428470][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.457255][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.672666][ T5933] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 545.777588][ T5893] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 545.795441][ T30] audit: type=1400 audit(801.760:1616): avc: denied { read write } for pid=12249 comm="syz.0.1537" name="lp0" dev="devtmpfs" ino=4168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 545.845770][ T5893] usb 1-1: USB disconnect, device number 49 [ 545.855318][ T30] audit: type=1400 audit(801.760:1617): avc: denied { open } for pid=12249 comm="syz.0.1537" path="/dev/usb/lp0" dev="devtmpfs" ino=4168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 545.878682][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.880409][ T5893] usblp0: removed [ 545.915436][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 545.937063][ T30] audit: type=1400 audit(801.830:1618): avc: denied { create } for pid=12274 comm="syz.2.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.956921][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 545.973913][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.988602][ T5933] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 545.998552][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.021212][ T5933] usb 5-1: config 0 descriptor?? [ 546.467143][ T5893] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 546.555294][ T9] gspca_se401: read req failed req 0x06 error -19 [ 546.593072][ T9] usb 4-1: USB disconnect, device number 69 [ 546.645908][T12271] block nbd4: shutting down sockets [ 546.676616][ T5893] usb 2-1: device descriptor read/64, error -71 [ 546.750250][ T5933] usbhid 5-1:0.0: can't add hid device: -71 [ 546.761534][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 546.777718][ T5933] usb 5-1: USB disconnect, device number 68 [ 546.926618][ T5893] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 547.250163][ T30] audit: type=1400 audit(802.950:1619): avc: denied { execute } for pid=12306 comm="syz.0.1552" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 547.273567][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.395222][ T5893] usb 2-1: device descriptor read/64, error -71 [ 547.411727][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 547.530617][ T5893] usb usb2-port1: attempt power cycle [ 547.625388][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 547.643023][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 547.725111][ T9] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 547.735178][ T9] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 547.745731][ T9] usb 4-1: config 13 has no interface number 0 [ 547.751895][ T9] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 547.772450][ T9] usb 4-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0 [ 547.790405][ T9] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x7 has invalid maxpacket 0 [ 547.800815][ T9] usb 4-1: config 13 interface 50 has no altsetting 0 [ 547.874908][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 547.885649][ T5893] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 547.920013][ T5893] usb 2-1: device descriptor read/8, error -71 [ 547.955983][ T9] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 547.965217][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.973687][ T9] usb 4-1: Product: syz [ 547.977920][ T9] usb 4-1: Manufacturer: syz [ 547.982518][ T9] usb 4-1: SerialNumber: syz [ 547.992384][T12309] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 548.175333][ T5893] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 548.726726][ T5893] usb 2-1: device descriptor read/8, error -71 [ 548.736201][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.774072][T12334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1560'. [ 548.783218][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 548.840531][ T9] usb 4-1: USB disconnect, device number 70 [ 548.857637][ T5893] usb usb2-port1: unable to enumerate USB device [ 548.896855][T12339] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 548.978402][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.076250][T12336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1826 sclass=netlink_route_socket pid=12336 comm=syz.2.1559 [ 549.165223][ T30] audit: type=1400 audit(805.100:1620): avc: denied { ioctl } for pid=12335 comm="syz.2.1559" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 549.447185][ T30] audit: type=1400 audit(805.410:1621): avc: denied { execute_no_trans } for pid=12350 comm="syz.2.1565" path="/321/file0" dev="tmpfs" ino=1737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 549.788403][ T30] audit: type=1400 audit(805.440:1622): avc: denied { read write } for pid=12351 comm="syz.1.1564" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 549.861132][ T30] audit: type=1400 audit(805.440:1623): avc: denied { open } for pid=12351 comm="syz.1.1564" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 550.218010][ T30] audit: type=1400 audit(805.440:1624): avc: denied { ioctl } for pid=12351 comm="syz.1.1564" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 550.411087][ T30] audit: type=1400 audit(806.370:1625): avc: denied { map } for pid=12366 comm="syz.1.1569" path="socket:[36533]" dev="sockfs" ino=36533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 550.444847][ T30] audit: type=1400 audit(806.370:1626): avc: denied { read accept } for pid=12366 comm="syz.1.1569" path="socket:[36533]" dev="sockfs" ino=36533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 550.469407][ T30] audit: type=1400 audit(806.370:1627): avc: denied { ioctl } for pid=12366 comm="syz.1.1569" path="socket:[36536]" dev="sockfs" ino=36536 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 550.507814][ T30] audit: type=1400 audit(806.470:1628): avc: denied { write } for pid=12363 comm="syz.3.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 550.528351][T12364] overlayfs: failed to resolve './file1': -2 [ 550.538167][ T30] audit: type=1400 audit(806.500:1629): avc: denied { create } for pid=12372 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 550.610023][ T30] audit: type=1400 audit(806.570:1630): avc: denied { write } for pid=12375 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 550.702530][ T30] audit: type=1400 audit(806.610:1631): avc: denied { mount } for pid=12372 comm="syz.1.1570" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 550.741336][T12379] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1572'. [ 550.784241][T12374] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 550.810150][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1570'. [ 550.811587][T12374] bond1 (unregistering): Released all slaves [ 550.826635][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 551.174674][T12384] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 551.244605][T12384] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 552.348194][T12409] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1579'. [ 552.623962][T12409] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1579'. [ 553.375529][T12424] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 553.440965][T12429] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 553.512637][T12429] cgroup: fork rejected by pids controller in /syz1 [ 554.925126][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 554.925165][ T30] audit: type=1400 audit(810.800:1719): avc: denied { create } for pid=12947 comm="syz.0.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 555.282404][ T30] audit: type=1400 audit(811.220:1720): avc: denied { read write } for pid=12950 comm="syz.1.1592" name="vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 555.411324][ T30] audit: type=1400 audit(811.220:1721): avc: denied { open } for pid=12950 comm="syz.1.1592" path="/dev/vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 555.438203][ T30] audit: type=1400 audit(811.240:1722): avc: denied { create } for pid=12953 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 555.567773][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 556.029685][ T30] audit: type=1400 audit(811.370:1723): avc: denied { read } for pid=12950 comm="syz.1.1592" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 556.056214][ T30] audit: type=1400 audit(811.370:1724): avc: denied { open } for pid=12950 comm="syz.1.1592" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 556.088122][ T30] audit: type=1400 audit(811.500:1725): avc: denied { mounton } for pid=12953 comm="syz.4.1593" path="/305/file0" dev="tmpfs" ino=1664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 556.191484][ T30] audit: type=1400 audit(811.510:1726): avc: denied { mount } for pid=12953 comm="syz.4.1593" name="/" dev="ramfs" ino=37228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 556.214188][ T30] audit: type=1400 audit(811.510:1727): avc: denied { write } for pid=12953 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 556.340260][ T30] audit: type=1400 audit(811.520:1728): avc: denied { read } for pid=12953 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 556.419142][T12962] tipc: Enabling of bearer rejected, failed to enable media [ 556.486536][T12972] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 556.522650][T12972] CUSE: unknown device info "3ܟ,̘" [ 556.542856][T12972] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 556.542856][T12972] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 556.583338][T12972] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 556.653004][T12972] CUSE: DEVNAME unspecified [ 558.246122][T12996] Failed to initialize the IGMP autojoin socket (err -2) [ 559.339840][T13005] comedi comedi1: aio_iiro_16: I/O port conflict (0x4f27,8) [ 559.383630][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 560.055276][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 560.055310][ T30] audit: type=1400 audit(815.970:1761): avc: denied { read write } for pid=13021 comm="syz.4.1610" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 560.414637][ T30] audit: type=1400 audit(815.980:1762): avc: denied { open } for pid=13021 comm="syz.4.1610" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 560.442303][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 560.480993][ T30] audit: type=1400 audit(816.350:1763): avc: denied { read write } for pid=13027 comm="syz.3.1611" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 560.725547][ T30] audit: type=1400 audit(816.350:1764): avc: denied { open } for pid=13027 comm="syz.3.1611" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 560.805330][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 560.828159][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.842434][ T30] audit: type=1400 audit(816.350:1765): avc: denied { ioctl } for pid=13027 comm="syz.3.1611" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 560.984639][ T30] audit: type=1400 audit(816.430:1766): avc: denied { execute } for pid=13031 comm="syz.0.1612" path="/348/blkio.bfq.time_recursive" dev="tmpfs" ino=1887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 560.987605][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.008834][ T30] audit: type=1400 audit(816.740:1767): avc: denied { ioctl } for pid=13032 comm="syz.2.1613" path="socket:[36848]" dev="sockfs" ino=36848 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 561.044624][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 561.057475][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.841610][ T30] audit: type=1400 audit(817.800:1768): avc: denied { create } for pid=13041 comm="syz.0.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 561.887071][ T9] usb 2-1: config 0 descriptor?? [ 562.085884][ T30] audit: type=1400 audit(818.040:1769): avc: denied { write } for pid=13038 comm="syz.3.1615" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 562.190619][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1617'. [ 562.244850][ T30] audit: type=1400 audit(818.040:1770): avc: denied { open } for pid=13038 comm="syz.3.1615" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 562.275099][ T5933] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 562.421873][ T9] mcp2200 0003:04D8:00DF.0016: unknown main item tag 0x0 [ 562.430381][ T9] mcp2200 0003:04D8:00DF.0016: unknown main item tag 0x0 [ 562.456588][ T9] mcp2200 0003:04D8:00DF.0016: unknown main item tag 0x0 [ 562.480157][ T9] mcp2200 0003:04D8:00DF.0016: unknown main item tag 0x0 [ 562.592294][ T9] mcp2200 0003:04D8:00DF.0016: unknown main item tag 0x0 [ 562.616505][ T9] mcp2200 0003:04D8:00DF.0016: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 562.639658][ T5933] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 562.652597][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.675048][ T5933] usb 3-1: Product: syz [ 562.684034][ T5933] usb 3-1: Manufacturer: syz [ 562.699313][ T5933] usb 3-1: SerialNumber: syz [ 562.722144][ T9] usb 2-1: USB disconnect, device number 67 [ 562.736086][ T5933] r8152-cfgselector 3-1: Unknown version 0x0000 [ 562.742348][ T5933] r8152-cfgselector 3-1: config 0 descriptor?? [ 562.869665][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.129305][ T5933] r8152-cfgselector 3-1: Needed 1 retries to read version [ 563.139684][ T5933] r8152-cfgselector 3-1: Unknown version 0x0000 [ 563.147597][ T5933] r8152-cfgselector 3-1: bad CDC descriptors [ 563.185133][ T976] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 563.356681][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.367888][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.379373][ T976] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 563.391848][ T976] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 563.400278][ T976] usb 4-1: Manufacturer: syz [ 563.417376][ T976] usb 4-1: config 0 descriptor?? [ 563.534233][ T5933] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 563.605226][ T9] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 563.695832][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 563.709804][ T5933] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 563.718664][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 563.758125][ T5933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 563.770352][ T5933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 563.794495][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 563.810366][ T5933] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 563.819905][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.845043][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.869076][ T5933] usb 5-1: Product: syz [ 563.874053][ T9] usb 2-1: config 0 descriptor?? [ 563.885401][ T5933] usb 5-1: Manufacturer: syz [ 563.895216][ T5933] usb 5-1: SerialNumber: syz [ 563.915534][ T5933] usb 5-1: config 0 descriptor?? [ 563.920946][T13076] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 563.928195][T13076] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 563.952174][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 563.958805][ T5933] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 563.965997][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 564.225151][ T5893] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 564.282731][ T976] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0017/input/input28 [ 564.363055][ T976] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0017/input/input29 [ 564.377984][ T976] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0017/input/input30 [ 564.393766][ T976] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0017/input/input31 [ 564.405836][ T5893] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 564.414711][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.421669][ T976] uclogic 0003:256C:006D.0017: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 564.428378][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.445998][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.454054][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.464770][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.493667][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.516068][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.570455][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.590260][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.610825][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.621670][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.669868][T13067] input: syz0 as /devices/virtual/input/input27 [ 564.690122][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.736507][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.773982][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.792494][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.801485][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.811806][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.823163][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.830757][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.839719][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.850797][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.860007][ T5893] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 564.869279][ T5893] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 564.880186][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.888955][ T5893] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 564.899015][ T5893] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 564.907432][ T5893] usb 1-1: Product: syz [ 564.911636][ T5893] usb 1-1: Manufacturer: syz [ 564.916311][ T5893] usb 1-1: SerialNumber: syz [ 564.923175][ T5893] usb 1-1: config 0 descriptor?? [ 564.932449][ T5893] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 565.022561][ T5893] r8152-cfgselector 3-1: USB disconnect, device number 57 [ 565.112434][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 565.112452][ T30] audit: type=1400 audit(821.070:1799): avc: denied { write } for pid=13102 comm="syz.2.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 565.152136][ T9] pegasus 2-1:0.0: can't reset MAC [ 565.165312][ T9] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 565.187825][ T30] audit: type=1400 audit(821.140:1800): avc: denied { load_policy } for pid=13082 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 565.218043][ T9] usb 2-1: USB disconnect, device number 68 [ 565.248967][ T30] audit: type=1400 audit(821.210:1801): avc: denied { create } for pid=13105 comm="syz.2.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 565.293345][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 565.293668][ T5933] usb 1-1: USB disconnect, device number 50 [ 565.313467][ T30] audit: type=1400 audit(821.280:1802): avc: denied { execute } for pid=13082 comm="syz.0.1626" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=37409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 565.330715][T13083] SELinux: failed to load policy [ 565.349094][ T5933] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 565.435573][ T5893] usb 4-1: reset high-speed USB device number 71 using dummy_hcd [ 566.231570][ T30] audit: type=1400 audit(822.190:1803): avc: denied { read write } for pid=5817 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.279331][ T5933] usb 5-1: USB disconnect, device number 69 [ 566.290001][ T5933] mcba_usb 5-1:0.0 can0: device disconnected [ 566.297510][ T30] audit: type=1400 audit(822.190:1804): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.435145][ T30] audit: type=1400 audit(822.190:1805): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 566.460095][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.482305][T13117] tmpfs: Group quota block hardlimit too large. [ 566.535117][ T30] audit: type=1400 audit(822.340:1806): avc: denied { prog_load } for pid=13114 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 566.614837][ T30] audit: type=1400 audit(822.340:1807): avc: denied { bpf } for pid=13114 comm="syz.1.1632" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.809248][ T5926] usb 4-1: USB disconnect, device number 71 [ 566.836882][ T30] audit: type=1400 audit(822.440:1808): avc: denied { mounton } for pid=13115 comm="syz.4.1631" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 566.860196][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.265089][ T5933] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 568.366214][ T976] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 568.417471][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.452771][ T5933] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 568.483441][ T5933] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 568.500165][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.511703][ T5933] usb 5-1: config 0 descriptor?? [ 568.915515][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 568.928528][ T976] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 568.942408][ T976] usb 1-1: can't read configurations, error -71 [ 570.271588][ T5933] usb 5-1: USB disconnect, device number 70 [ 570.318148][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 570.318164][ T30] audit: type=1400 audit(2000000002.079:1898): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 570.812328][ T30] audit: type=1400 audit(2000000002.569:1899): avc: denied { block_suspend } for pid=13178 comm="syz.2.1644" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 572.075086][ T30] audit: type=1400 audit(2000000003.799:1900): avc: denied { create } for pid=13191 comm="syz.3.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 572.161890][ T30] audit: type=1400 audit(2000000003.919:1901): avc: denied { read } for pid=13193 comm="syz.2.1647" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 572.202287][ T30] audit: type=1400 audit(2000000003.919:1902): avc: denied { open } for pid=13193 comm="syz.2.1647" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 572.252576][ T30] audit: type=1400 audit(2000000003.919:1903): avc: denied { ioctl } for pid=13193 comm="syz.2.1647" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 572.415628][ T30] audit: type=1400 audit(2000000004.169:1904): avc: denied { create } for pid=13200 comm="syz.4.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 572.967139][ T30] audit: type=1400 audit(2000000004.699:1905): avc: denied { create } for pid=13200 comm="syz.4.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 572.989840][ T30] audit: type=1400 audit(2000000004.709:1906): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.027225][ T30] audit: type=1400 audit(2000000004.709:1907): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 573.649083][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1649'. [ 575.131004][T13222] binder: BINDER_SET_CONTEXT_MGR already set [ 575.146944][T13222] binder: 13221:13222 ioctl 4018620d 200000000040 returned -16 [ 575.337837][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 575.337853][ T30] audit: type=1400 audit(2000000007.099:1951): avc: denied { ioctl } for pid=13223 comm="syz.2.1657" path="socket:[37613]" dev="sockfs" ino=37613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 575.405426][ T30] audit: type=1400 audit(2000000007.099:1952): avc: denied { module_request } for pid=13223 comm="syz.2.1657" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 575.455106][ T30] audit: type=1400 audit(2000000007.099:1953): avc: denied { read write } for pid=13228 comm="syz.3.1658" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.495388][ T30] audit: type=1400 audit(2000000007.099:1954): avc: denied { open } for pid=13228 comm="syz.3.1658" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.545428][ T30] audit: type=1400 audit(2000000007.099:1955): avc: denied { ioctl } for pid=13228 comm="syz.3.1658" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 575.595065][ T30] audit: type=1400 audit(2000000007.199:1956): avc: denied { sys_module } for pid=13223 comm="syz.2.1657" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 575.662624][ T5933] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 575.765345][ T30] audit: type=1400 audit(2000000007.509:1957): avc: denied { map } for pid=13235 comm="syz.2.1660" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 575.765385][ T30] audit: type=1400 audit(2000000007.509:1958): avc: denied { read write } for pid=13235 comm="syz.2.1660" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 575.806829][T13240] syz.2.1660: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 575.867043][ T5933] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 575.867075][ T5933] usb 4-1: config 1 has no interface number 0 [ 575.867116][ T5933] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 30768, setting to 64 [ 575.867147][ T5933] usb 4-1: config 1 interface 105 has no altsetting 0 [ 575.870025][ T5933] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 575.870055][ T5933] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 575.870080][ T5933] usb 4-1: Product: syz [ 575.870096][ T5933] usb 4-1: Manufacturer: syz [ 575.870113][ T5933] usb 4-1: SerialNumber: syz [ 575.899751][T13233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.991140][T13240] ,cpuset=/,mems_allowed=0-1 [ 575.991184][T13240] CPU: 1 UID: 0 PID: 13240 Comm: syz.2.1660 Not tainted syzkaller #0 PREEMPT(full) [ 575.991209][T13240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.991222][T13240] Call Trace: [ 575.991230][T13240] [ 575.991239][T13240] dump_stack_lvl+0x16c/0x1f0 [ 575.991275][T13240] warn_alloc+0x248/0x3a0 [ 575.991307][T13240] ? __pfx_warn_alloc+0x10/0x10 [ 575.991338][T13240] ? __pfx_stack_trace_save+0x10/0x10 [ 575.991387][T13240] ? kasan_save_stack+0x42/0x60 [ 575.991408][T13240] ? kasan_save_stack+0x33/0x60 [ 575.991427][T13240] ? kasan_save_track+0x14/0x30 [ 575.991449][T13240] ? xskq_create+0x52/0x1d0 [ 575.991473][T13240] ? xsk_setsockopt+0x74e/0x9a0 [ 575.991492][T13240] ? do_sock_setsockopt+0xf3/0x1d0 [ 575.991524][T13240] ? xskq_create+0xfb/0x1d0 [ 575.991551][T13240] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 575.991585][T13240] ? xskq_create+0xfb/0x1d0 [ 575.991612][T13240] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 575.991647][T13240] ? xskq_create+0xfb/0x1d0 [ 575.991671][T13240] vmalloc_user_noprof+0x9e/0xe0 [ 575.991697][T13240] ? xskq_create+0xfb/0x1d0 [ 575.991722][T13240] xskq_create+0xfb/0x1d0 [ 575.991751][T13240] xsk_setsockopt+0x74e/0x9a0 [ 575.991777][T13240] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.991801][T13240] ? find_held_lock+0x2b/0x80 [ 575.991833][T13240] ? selinux_socket_setsockopt+0x6a/0x80 [ 575.991868][T13240] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.991893][T13240] do_sock_setsockopt+0xf3/0x1d0 [ 575.991924][T13240] __sys_setsockopt+0x1a0/0x230 [ 575.991953][T13240] __x64_sys_setsockopt+0xbd/0x160 [ 575.991975][T13240] ? do_syscall_64+0x91/0xfa0 [ 575.991999][T13240] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.992026][T13240] do_syscall_64+0xcd/0xfa0 [ 575.992055][T13240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.992076][T13240] RIP: 0033:0x7fca92d8efc9 [ 575.992095][T13240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.992115][T13240] RSP: 002b:00007fca93b66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 575.992136][T13240] RAX: ffffffffffffffda RBX: 00007fca92fe6090 RCX: 00007fca92d8efc9 [ 575.992151][T13240] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 575.992166][T13240] RBP: 00007fca92e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 575.992176][T13240] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.992185][T13240] R13: 00007fca92fe6128 R14: 00007fca92fe6090 R15: 00007ffe9c058338 [ 575.992201][T13240] [ 575.992705][T13240] Mem-Info: [ 575.992717][T13240] active_anon:52771 inactive_anon:0 isolated_anon:0 [ 575.992717][T13240] active_file:19013 inactive_file:40823 isolated_file:0 [ 575.992717][T13240] unevictable:768 dirty:298 writeback:0 [ 575.992717][T13240] slab_reclaimable:12210 slab_unreclaimable:100160 [ 575.992717][T13240] mapped:37145 shmem:40504 pagetables:1406 [ 575.992717][T13240] sec_pagetables:0 bounce:0 [ 575.992717][T13240] kernel_misc_reclaimable:0 [ 575.992717][T13240] free:1244483 free_pcp:20101 free_cma:0 [ 575.992777][T13240] Node 0 active_anon:211084kB inactive_anon:0kB active_file:76000kB inactive_file:163092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148528kB dirty:1172kB writeback:0kB shmem:160480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12388kB pagetables:5452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 575.992836][T13240] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 575.992887][T13240] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 575.992948][T13240] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 575.992988][T13240] Node 0 DMA32 free:1063904kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:211084kB inactive_anon:0kB active_file:76000kB inactive_file:163092kB unevictable:1536kB writepending:1172kB zspages:0kB present:3129332kB managed:2544884kB mlocked:0kB bounce:0kB free_pcp:67068kB local_pcp:45356kB free_cma:0kB [ 575.993056][T13240] lowmem_reserve[]: 0 0 1 1 1 [ 575.993095][T13240] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 575.993154][T13240] lowmem_reserve[]: 0 0 0 0 0 [ 575.993192][T13240] Node 1 Normal free:3898684kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB writepending:20kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13320kB local_pcp:0kB free_cma:0kB [ 575.993256][T13240] lowmem_reserve[]: 0 0 0 0 0 [ 575.993295][T13240] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 575.993471][T13240] Node 0 DMA32: 1620*4kB (UM) 756*8kB (UM) 401*16kB (UM) 369*32kB (UME) 167*64kB (UME) 42*128kB (UME) 9*256kB (UM) 6*512kB (UME) 8*1024kB (UM) 10*2048kB (UME) 240*4096kB (UM) = 1063904kB [ 575.993672][T13240] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 575.993786][T13240] Node 1 Normal: 198*4kB (UE) 57*8kB (UME) 31*16kB (UME) 187*32kB (UME) 59*64kB (UME) 13*128kB (UME) 8*256kB (UME) 7*512kB (UME) 5*1024kB (UME) 4*2048kB (ME) 944*4096kB (M) = 3898736kB [ 575.993970][T13240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.993989][T13240] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB [ 575.994007][T13240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.994025][T13240] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 575.994043][T13240] 100336 total pagecache pages [ 575.994051][T13240] 0 pages in swap cache [ 575.994059][T13240] Free swap = 124996kB [ 575.994068][T13240] Total swap = 124996kB [ 575.994076][T13240] 2097051 pages RAM [ 575.994084][T13240] 0 pages HighMem/MovableOnly [ 575.994092][T13240] 428740 pages reserved [ 575.994100][T13240] 0 pages cma reserved [ 576.105283][ T976] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 576.342797][ T30] audit: type=1400 audit(2000000007.899:1959): avc: denied { read } for pid=13238 comm="syz.4.1655" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 576.343054][ T30] audit: type=1400 audit(2000000007.899:1960): avc: denied { open } for pid=13238 comm="syz.4.1655" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 576.426623][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 576.435298][ T976] usb 3-1: config 0 has too many interfaces: 85, using maximum allowed: 32 [ 576.435393][ T976] usb 3-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 576.435447][ T976] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 85 [ 576.446024][ T976] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 576.446109][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.446165][ T976] usb 3-1: Product: syz [ 576.446214][ T976] usb 3-1: Manufacturer: syz [ 576.446282][ T976] usb 3-1: SerialNumber: syz [ 576.473136][ T976] usb 3-1: config 0 descriptor?? [ 576.509510][T13233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.620937][ T5933] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 577.622559][ T5933] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 577.633947][ T5933] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 579.701438][ T5933] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:0c:ef:c9:db:99 [ 579.714536][ T5933] usb 4-1: USB disconnect, device number 72 [ 579.716208][ T5933] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 582.666050][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 582.666065][ T30] audit: type=1400 audit(2000000014.429:1970): avc: denied { create } for pid=13263 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 582.666409][ T5933] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 582.666529][ T5933] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 582.666640][ T5933] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 582.668088][ T30] audit: type=1400 audit(2000000014.429:1971): avc: denied { setopt } for pid=13263 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 582.702174][ T30] audit: type=1400 audit(2000000014.459:1972): avc: denied { create } for pid=13263 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 582.706049][ T30] audit: type=1400 audit(2000000014.469:1973): avc: denied { ioctl } for pid=13263 comm="syz.3.1665" path="socket:[37671]" dev="sockfs" ino=37671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.702555][ T30] audit: type=1400 audit(2000000017.459:1974): avc: denied { create } for pid=13268 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 585.704462][ T30] audit: type=1400 audit(2000000017.459:1975): avc: denied { create } for pid=13268 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.666446][ T30] audit: type=1400 audit(2000000018.429:1976): avc: denied { create } for pid=13268 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 586.680692][ T30] audit: type=1400 audit(2000000018.439:1977): avc: denied { write } for pid=13268 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 586.680743][ T30] audit: type=1400 audit(2000000018.439:1978): avc: denied { nlmsg_write } for pid=13268 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 586.680783][ T30] audit: type=1400 audit(2000000018.439:1979): avc: denied { module_request } for pid=13268 comm="syz.3.1666" kmod="xfrm-offload-2-108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 587.721980][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 587.721997][ T30] audit: type=1400 audit(2000000019.479:1983): avc: denied { prog_load } for pid=13282 comm="syz.1.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 587.722044][ T30] audit: type=1400 audit(2000000019.479:1984): avc: denied { bpf } for pid=13282 comm="syz.1.1669" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 588.726064][ T30] audit: type=1400 audit(2000000020.099:1985): avc: denied { map_create } for pid=13282 comm="syz.1.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 588.726202][ T30] audit: type=1400 audit(2000000020.099:1986): avc: denied { perfmon } for pid=13282 comm="syz.1.1669" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 588.726298][ T30] audit: type=1400 audit(2000000020.099:1987): avc: denied { map_read map_write } for pid=13282 comm="syz.1.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 588.726383][ T30] audit: type=1400 audit(2000000020.439:1988): avc: denied { prog_run } for pid=13282 comm="syz.1.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 589.172778][ T30] audit: type=1400 audit(2000000020.909:1989): avc: denied { read write } for pid=13286 comm="syz.3.1671" name="vbi4" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 589.172836][ T30] audit: type=1400 audit(2000000020.909:1990): avc: denied { open } for pid=13286 comm="syz.3.1671" path="/dev/vbi4" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 612.558522][ T30] audit: type=1400 audit(2000000044.319:1991): avc: denied { execmem } for pid=13292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 625.128911][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.975161][ T30] audit: type=1400 audit(2000000069.719:1992): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 637.975227][ T30] audit: type=1400 audit(2000000069.719:1993): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 637.975273][ T30] audit: type=1400 audit(2000000069.719:1994): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 637.976224][ T30] audit: type=1400 audit(2000000069.739:1995): avc: denied { create } for pid=13299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 638.965089][ T30] audit: type=1400 audit(2000000070.679:1996): avc: denied { read write } for pid=13299 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 638.965151][ T30] audit: type=1400 audit(2000000070.679:1997): avc: denied { open } for pid=13299 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 638.965194][ T30] audit: type=1400 audit(2000000070.699:1998): avc: denied { ioctl } for pid=13299 comm="syz-executor" path="socket:[37784]" dev="sockfs" ino=37784 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 640.863611][ T5136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 643.806730][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 645.756832][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 647.726626][T10211] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 647.755140][T10211] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 650.672886][T10211] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.674230][T10211] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 650.676654][ T30] audit: type=1400 audit(2000000082.439:1999): avc: denied { read } for pid=13299 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 650.676898][ T30] audit: type=1400 audit(2000000082.439:2000): avc: denied { open } for pid=13299 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 650.678425][ T30] audit: type=1400 audit(2000000082.439:2001): avc: denied { mounton } for pid=13299 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 650.701980][T13299] Failed to initialize the IGMP autojoin socket (err -2) [ 652.710592][T10211] Bluetooth: hci5: command tx timeout [ 655.666898][T10211] Bluetooth: hci5: command tx timeout [ 657.700305][ T30] audit: type=1400 audit(2000000089.449:2002): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 658.975935][T10211] Bluetooth: hci5: command tx timeout [ 662.155325][T10211] Bluetooth: hci5: command tx timeout [ 662.714632][ T30] audit: type=1400 audit(2000000094.469:2003): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.718050][ T30] audit: type=1400 audit(2000000094.469:2004): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.718098][ T30] audit: type=1400 audit(2000000094.469:2005): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 662.718141][ T30] audit: type=1400 audit(2000000094.479:2006): avc: denied { read } for pid=5480 comm="dhcpcd" name="n115" dev="tmpfs" ino=7596 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 662.718183][ T30] audit: type=1400 audit(2000000094.479:2007): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n115" dev="tmpfs" ino=7596 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 662.718226][ T30] audit: type=1400 audit(2000000094.479:2008): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n115" dev="tmpfs" ino=7596 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 669.207048][ T5820] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.225182][ T5820] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 670.725125][ T5820] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 671.230881][ T5820] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 671.231584][ T5820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 672.747534][ T5820] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 672.759853][ T30] audit: type=1400 audit(2000000104.519:2009): avc: denied { read open } for pid=13316 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.765956][ T5136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 672.775113][ T30] audit: type=1400 audit(2000000104.529:2010): avc: denied { getattr } for pid=13316 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.775475][ T5136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 672.775846][ T5136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 674.200053][ T5136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 675.196850][ T5136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 675.199801][ T5820] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 675.225361][ T5820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 675.226320][ T5820] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 675.226896][ T5820] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 677.271944][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 677.274216][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 677.274958][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 677.276601][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 677.277690][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 677.754510][T10211] Bluetooth: hci7: command tx timeout [ 679.759861][T10211] Bluetooth: hci6: command tx timeout [ 680.232868][T13317] Bluetooth: hci7: command tx timeout [ 680.232945][T13317] Bluetooth: hci4: command tx timeout [ 680.234555][T13317] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 680.277718][T10211] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 680.278510][T10211] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 680.279490][T10211] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 680.280070][T10211] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 680.303232][T10211] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 680.304697][T10211] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 680.306125][T10211] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 681.826376][T10211] Bluetooth: hci6: command tx timeout [ 681.860017][T10211] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 681.860606][T10211] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 682.244213][T13313] Failed to initialize the IGMP autojoin socket (err -2) [ 682.262184][T13321] Failed to initialize the IGMP autojoin socket (err -2) [ 682.280881][T13324] Failed to initialize the IGMP autojoin socket (err -2) [ 682.859728][ T5820] Bluetooth: hci8: command tx timeout [ 682.860422][ T5820] Bluetooth: hci4: command tx timeout [ 682.860456][ T5820] Bluetooth: hci7: command tx timeout [ 685.237651][T13317] Bluetooth: hci7: command tx timeout [ 685.237694][T13317] Bluetooth: hci4: command tx timeout [ 685.237725][T13317] Bluetooth: hci8: command tx timeout [ 685.237878][ T5820] Bluetooth: hci6: command tx timeout [ 685.303678][T13327] Failed to initialize the IGMP autojoin socket (err -2) [ 685.856733][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.277522][ T30] audit: type=1400 audit(2000000117.079:2011): avc: denied { relabelfrom } for pid=13313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 686.277575][ T30] audit: type=1400 audit(2000000117.079:2012): avc: denied { relabelto } for pid=13313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 687.272350][ T5820] Bluetooth: hci6: command tx timeout [ 687.272392][ T5820] Bluetooth: hci8: command tx timeout [ 687.272420][ T5820] Bluetooth: hci4: command tx timeout [ 687.865075][T10211] Bluetooth: hci9: command tx timeout [ 689.955090][T10211] Bluetooth: hci8: command tx timeout [ 689.955139][T10211] Bluetooth: hci9: command tx timeout [ 690.302115][ T30] audit: type=1400 audit(2000000122.059:2013): avc: denied { add_name } for pid=13314 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.302172][ T30] audit: type=1400 audit(2000000122.059:2014): avc: denied { create } for pid=13314 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 690.302220][ T30] audit: type=1400 audit(2000000122.059:2015): avc: denied { write } for pid=13314 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb6.link" dev="tmpfs" ino=7613 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 690.302267][ T30] audit: type=1400 audit(2000000122.059:2016): avc: denied { append } for pid=13314 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" dev="tmpfs" ino=7613 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 692.316103][ T5820] Bluetooth: hci9: command tx timeout [ 694.942012][ T5820] Bluetooth: hci9: command tx timeout [ 695.282980][ T30] audit: type=1400 audit(2000000127.039:2017): avc: denied { remove_name } for pid=13338 comm="rm" name="resolv.conf.lapb6.link" dev="tmpfs" ino=7613 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.283037][ T30] audit: type=1400 audit(2000000127.039:2018): avc: denied { unlink } for pid=13338 comm="rm" name="resolv.conf.lapb6.link" dev="tmpfs" ino=7613 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 700.473640][T10211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 700.476242][T10211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 700.477002][T10211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 700.477879][T10211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 700.478468][T10211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 703.444584][T10211] Bluetooth: hci4: command tx timeout [ 705.505959][T10211] Bluetooth: hci4: command tx timeout [ 706.477366][T13347] Failed to initialize the IGMP autojoin socket (err -2) [ 707.969712][T10211] Bluetooth: hci4: command tx timeout [ 708.465112][ T30] audit: type=1400 audit(2000000139.779:2019): avc: denied { module_request } for pid=13327 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 709.986147][T10211] Bluetooth: hci4: command tx timeout [ 712.002043][T13327] chnl_net:caif_netlink_parms(): no params data found [ 724.985213][ T31] INFO: task syz.4.1662:13255 blocked for more than 146 seconds. [ 724.985240][ T31] Not tainted syzkaller #0 [ 724.985253][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 724.985263][ T31] task:syz.4.1662 state:D stack:28744 pid:13255 tgid:13250 ppid:5817 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 724.985329][ T31] Call Trace: [ 724.985338][ T31] [ 724.985352][ T31] __schedule+0x1190/0x5de0 [ 724.985399][ T31] ? __lock_acquire+0x622/0x1c90 [ 724.985438][ T31] ? __pfx___schedule+0x10/0x10 [ 724.985475][ T31] ? find_held_lock+0x2b/0x80 [ 724.985503][ T31] ? schedule+0x2d7/0x3a0 [ 724.985535][ T31] ? commit_echoes+0x4c/0x210 [ 724.985567][ T31] schedule+0xe7/0x3a0 [ 724.985596][ T31] schedule_preempt_disabled+0x13/0x30 [ 724.985626][ T31] __mutex_lock+0x818/0x1060 [ 724.985648][ T31] ? commit_echoes+0x4c/0x210 [ 724.985692][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 724.985722][ T31] ? irqentry_exit+0x3b/0x90 [ 724.985752][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 724.985791][ T31] ? commit_echoes+0x4c/0x210 [ 724.985821][ T31] ? echo_char.isra.0+0x1c2/0x2f0 [ 724.985842][ T31] commit_echoes+0x4c/0x210 [ 724.985877][ T31] n_tty_receive_char+0x3d7/0x600 [ 724.985907][ T31] n_tty_receive_buf_standard+0x6aa/0x3140 [ 724.985941][ T31] ? __pfx_down_read+0x10/0x10 [ 724.985965][ T31] ? __ldsem_down_read_nested+0xe3/0x8a0 [ 724.985995][ T31] n_tty_receive_buf_common+0x8eb/0x1980 [ 724.986039][ T31] ? __pfx_n_tty_receive_buf+0x10/0x10