last executing test programs: 12.170839591s ago: executing program 0 (id=1496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) r4 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r7, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11.162904512s ago: executing program 0 (id=1500): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000680)={0x0, 0x11}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x85, 0x4, 0xff}, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SETFMT(r2, 0x40045010, &(0x7f0000000200)=0x5aa) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) 9.562884204s ago: executing program 3 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv(r1, &(0x7f0000003540)=[{&(0x7f0000000180)=""/76, 0x4c}], 0x1, 0xfffffffe, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x10, 0xffffffff, 0x3, {{0x1b, 0x4, 0x1, 0x9, 0x6c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x57, 0x0, [{0x2, 0x9, "56a98c5a4ed51b"}, {0x2, 0x12, "e00d29d7ecea0183fd25aca859d3ff5e"}, {0x7, 0x8, "318cfba21404"}, {0x6, 0x8, "7e083da1fed9"}, {0x5, 0x4, "c652"}, {0x1, 0x10, "be03a91d888fbada9f2c4902fc31"}, {0x0, 0x4, "8b20"}, {0x2, 0xe, "367f9bd6c0d99d04f8b94a91"}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a00000000000061119c01000000001800000000000001000000000000000095fd000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 9.504852282s ago: executing program 3 (id=1508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) 8.902949051s ago: executing program 0 (id=1510): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 7.978998333s ago: executing program 0 (id=1513): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009048100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="4f3bf5835e00000000225121d6958c78cfc0e1f14f1b257f40", 0x19}], 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) unshare(0x22020600) r4 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) fcntl$addseals(r5, 0x409, 0x7) write(r5, &(0x7f0000000200)='D', 0x1) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x32700, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r10, 0x10f, 0x82, &(0x7f0000000080)=0x80, 0x4) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0011e4ffffff050e2ff4655f7c554e2739c7edf01f885d016bf07d31fc5060d38f46ab57adc631b614d3c88d5326cc6f37b93231e69eb0c736947375a791cc556d60dcfe545311313b9d74b662563953d83f359a091790394c9cc6f9a2d3d343f4b0ec83d6bcaa74cd336843d36185e4f10e2171b89d37adadb41a202f76b000f4aca716cd588a73494e137224b2904f0d5c8c9f06394296f2385db507f53a09f0b32fe535912e2a20ccad86295dbf949440239c2184"], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.856742658s ago: executing program 3 (id=1514): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0xb, 0x4008032, r0, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_clone3(&(0x7f0000000340)={0x10019180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r1, 0x0, &(0x7f0000000140)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300"], 0xf0}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r4, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$media(&(0x7f0000000000), 0x49e, 0x42) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000007d40)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000d80)={{0x9, 0x4, 0xfffffbdb, 0x4, 'syz1\x00', 0xfffff801}, 0x0, [0x10000009, 0xd, 0x2, 0x10001, 0x8c08, 0x9, 0x10000, 0x202, 0xf0f3, 0xffff, 0x87, 0x4, 0x6c2b, 0xfffffffffffffffe, 0x98f2, 0x4b05, 0x3ff, 0x400000004, 0x6, 0x8000000000000000, 0x0, 0x8, 0x2, 0x1ff, 0x1, 0x8, 0x6, 0x8, 0x6, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x7, 0x8000000000000000, 0x3, 0x4000000000000000, 0x2, 0x1ff, 0x2, 0x0, 0xdb4, 0x5, 0x16, 0x9, 0xe, 0x5, 0xc, 0x6, 0x2, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x4, 0x7fd, 0x5, 0x0, 0x8000, 0x5, 0x34b, 0x7, 0x7, 0x4, 0x15af, 0x1e, 0x8, 0xfff, 0x81, 0x8, 0x83, 0x7, 0xf8, 0x0, 0x6, 0x4, 0x5, 0x80, 0x0, 0xd, 0x8, 0xa, 0x8000000000000001, 0x12, 0x4, 0x2, 0x7, 0x7fffffff, 0x1, 0x4, 0x10000, 0xe72, 0x10000000000003ff, 0x7, 0xc08b, 0x410, 0x80000001, 0x40, 0x1, 0x200000100000002, 0x8000000000000001, 0x42, 0x3, 0x9, 0xc5, 0x0, 0x2, 0x3, 0x33, 0x2f6f, 0x7, 0x5a73, 0xfffffffffffffff9, 0x7fffffff, 0x8, 0xa, 0x4, 0xde, 0x6, 0x800000000, 0xfffffffffffffffe, 0x2, 0x105ba93c, 0x4000000000004, 0x7, 0xfffffffffffffff7, 0x10]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 6.930687495s ago: executing program 4 (id=1516): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="029000000080040008000a00", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x9115369378574f8a) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r7, 0x89a2, &(0x7f0000003280)={'macsec0\x00', @ifru_ivalue}) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000002"], 0x30}], 0x1, 0x0) 6.33669464s ago: executing program 3 (id=1517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x20}}, 0x40) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xfffffffffffffe3e}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x884}, 0x2000c014) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 6.270323434s ago: executing program 3 (id=1518): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYRES32=r6], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) sendmsg$inet_sctp(r9, &(0x7f00000007c0)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="ef6166bf1b5a5580b5878ecae0e880599010c4b2a43190ed5b", 0x19}, {&(0x7f0000000580)="04ca5e1c39b9c60dd689e3ad0e371800bf854b45ca8cc32993bccc3b1fdc2cdcf9609b4fa1059aa0d343c10896fb649fa18480c86177fd96f27bf780c23f1d5bfec4cdf10741fe7d223a372f1f906a64850f04bdb82865cc023e3a17397e1ea8be259d92da8f32566487e76778f2a603e07c929e657d50a1791376118da5c2e09ed5", 0x82}, {&(0x7f0000000640)="e924e254bc6c35f121db3657abb7a2d95c28e6ee1919e676c38224a316ccbf9579517cba458bce51d7c75832adbac083c518082546a2b8d0ed46fc5e509aa192d0534d392baa7037c44270eccc40a70b816f8d1435f9327f9fed92df35c67296e7c7077a65df9c9c4a", 0x69}], 0x3, &(0x7f00000006c0)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0x8, 0x8000, 0x1, 0x7f, 0x3, 0x5, 0x5, r7}}, @init={0x18, 0x84, 0x0, {0x3, 0x9, 0x2, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @init={0x18, 0x84, 0x0, {0xe64c, 0x9, 0x2c00, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x9, 0x8203, 0xfff, 0x9, 0x4, 0x15b2, 0x3, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x1, 0x0, 0x3, 0x41eb, 0x5, 0x4b5, 0x80000000, r7}}], 0xe0, 0x44}, 0x60040) 6.118434876s ago: executing program 4 (id=1519): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000280)={0xa, 0x4}, 0xc) r2 = syz_usb_connect$uac1(0x3, 0xee, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdc, 0x3, 0x1, 0x5, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xcb, 0xc0}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x6, 0x3, 0x2, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x7, 0x1, "a7", "36dd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x7, 0x81, "cc91"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x0, 0x6, "", "b6"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0xc1, 0x40}, @as_header={0x7, 0x24, 0x1, 0x5, 0x3, 0x4}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x5, 0x7, "389d67"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x7, 0x3, {0x7, 0x25, 0x1, 0x1, 0x0, 0xae3c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x3, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x10, 0x2, 0xf9, 0xaa, "00dd0c"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x4, 0x3, 0x6, "be9cb1c19af13451"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x5, 0x5f, "e5fc", "a8b764"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xec, 0x4, 0x4, 0x18, "0359", '\t'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3f7, 0x9, 0x1, 0x3, {0x7, 0x25, 0x1, 0x2, 0x0, 0xa}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7, 0x25, 0x0, 0x10, 0x6}, 0x107, &(0x7f0000000640)={0x5, 0xf, 0x107, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x8, 0x7, 0x81, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x10, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x3, 0x200, 0x9}, @generic={0xdf, 0x10, 0x3, "b02dbc63d2b37550d3781e8b3d6cdd71d3cdc03d95c4b311e0a83b60657815b14495133e88efc96cc9676dee5578e43ac2f3891039918e92a90fa2184c840883f875c955b7c47875af729e12de0f0c32c61ebe9c2857e49e7025804d17680e261de0af91f5b1cff2cd2f7f994ec2e9a88dd4bf1ad5a8e5f7c2317777ed07ae89281df4c9552fbce5df3aefaa7a705c538f9e30bd05622a305604c54a491d219acd1c678d51cd22806129b45cb45ec0e5fded3205879ff1811a53d1d9a5f2a09b6f00962cceacab1d9e6dcc65dad63f7b8082cf10ce542546a99c6761"}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1001}}, {0x1a, &(0x7f00000002c0)=@string={0x1a, 0x3, "22a986df07b8c461307cf19c04986fce0d212fd021216204"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0xc9, @string={0xc9, 0x3, "5d5f8682bd20278ddacdb457f717a3cd5dd82cc5c3041b77aefaa3e182dcc289f4ca019e81ddcf1a7d5f43beb6041f49bcf493a1d7b28d0fe455a72e40ca33c3b80f7dd15d2d3668046d789cdad7b7e4204ec86c9897575e36dfc454a36e2da77369e30280415ca10e102aa15c557d5ca4c9d8c5ccae3c167144ef5e9665b83a2c10e816e3a70f7fdd8bf1c32fe3288086ee589c0485197c1bfa41845c7cef77d0708d4b2d0e7c187bc9ac2c6ea0ac1cf9cbe71e71f9b523897eee692da2a40c67e2b1120ae9c6"}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xbe5, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000540)={0x14, &(0x7f0000000c80)=ANY=[@ANYBLOB="40006c0000006c10fc4a7b587d9c4eba43dc2a253c1b5e2a775f5bcb8996c2607089a5aa4bd0bdfb0445d549e46d7861cf6eb32f276d8b7b2863b3fa776004737b0d78bb77ce81fcbf097f9bb9f8cbf6d618ccad7ab6a3a74046fd7c8de3f18020e3679f0f43b7ced35b647c7a7dca50d1bbf3f66c27"], &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000880)={0x40, 0xb, 0xf7, "b5c0ee62a198355f4204ccae2b3da5387d5148c9621791955daf6887f50358ff0a02c490125a48f6700e56d3f182e8c26ce0f50db0618a7d88b39a0259c9b9d88881e760ca503f096fc57a82962c42feb6bbfbef98d93c4c981951708f43ab1509f5b9a6e0f954917200a389c9c338f9e4946644fca5942f79c4b261d1aadf231211366a3b813c15f76fc962691f3755de0d0e9c43e0c8adfbf6d1ff87b04ca9d0573e96f3984809a35aec5287f882d290571e80a8d926a34674798da0a8b9587844688e73b91aa79638478624aa203e94df32866e9b1d726d21f4fc6e54ace7bada186309a7701b589c6d0ae9060339f5bd55e8eef372"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x4, 0x8, 0x7fff, 0x8, 0x1, 0x9, 0xde, 0x3a738ae1, 0x81, 0x3a3f, 0xe0}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000b40)={0x20, 0x83, 0x2}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000bc0)={0x20, 0x89, 0x2, 0x1}}) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f0000000580)={0x1, 0x4, 0xc, 0xfb}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000003c0)={0x40, 0x6, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) socket$kcm(0x10, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) write$tun(0xffffffffffffffff, 0x0, 0xea) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "c64ae9e761820a80370b7311881b4a53e95ec176b4fd7895b908"}}}, 0x0) 5.628338123s ago: executing program 1 (id=1520): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000580)={{0x3, 0x100, 0x3, 0x1, 0x7, 0x40}, 0x155, [0xb0, 0x20000, 0x8, 0x1, 0x100, 0x0, 0x7, 0xab8, 0xe, 0x4, 0x4e8, 0xff, 0x4c, 0x1000, 0xaa, 0x7fffffff, 0x80, 0x1000, 0xa1a7, 0xb330, 0x82, 0x0, 0x0, 0x4, 0x1, 0xa, 0x8, 0x5, 0x7, 0x5, 0x4, 0xfffffff8, 0x10000, 0x5, 0xfffff626, 0x5, 0x0, 0x2, 0xbb8, 0x0, 0xe88, 0x7, 0xcb, 0x5f99, 0x3, 0x101, 0x6, 0x4, 0x6, 0x3, 0x8, 0x5, 0x8, 0x7, 0xfffff001, 0x0, 0x3, 0xfffffffa, 0xffffff00, 0xa, 0x1, 0x4, 0x3, 0x100, 0x2, 0xffffffff, 0xd, 0x2, 0x6, 0x9, 0x5, 0x18bb, 0x2, 0xc3, 0x4, 0x10001, 0x6, 0x9, 0xaf, 0x2400000, 0x0, 0x5, 0x4881a47c, 0x2, 0x5aef, 0x1, 0x6, 0x1, 0x0, 0x5, 0xfffffffb, 0x4, 0x2, 0xff, 0x7, 0x9, 0x0, 0x9, 0x9, 0x5c, 0x80000001, 0x3, 0x6, 0x140, 0x8, 0x8, 0x0, 0x92, 0x401, 0x3, 0x1, 0x86ff, 0x3, 0x7, 0x2, 0x1, 0x0, 0x399, 0x5, 0x2, 0x8, 0x80b, 0xbb07, 0x7fff, 0x4, 0x4, 0x101, 0x2, 0x5, 0x2, 0x1, 0x401, 0x5, 0x7f, 0x1, 0x5, 0x9, 0xab0, 0x9, 0x0, 0xdbe, 0x2, 0x278, 0x1, 0xca, 0x401, 0xfffffffb, 0x7, 0xf, 0x0, 0x89, 0x2, 0x7, 0x0, 0x7, 0x10000, 0x100, 0xc, 0x40, 0x9, 0x8, 0xffffff62, 0x200, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x8, 0xfffffffd, 0x4, 0x8001, 0x2, 0x0, 0x8, 0xa94, 0x81, 0x8, 0x3, 0x10381b97, 0x6, 0x6e3, 0xdf25, 0x6, 0x9, 0x6, 0x80000001, 0x4, 0x2, 0x1bf, 0x6, 0x5, 0x40, 0x4, 0x3, 0x6, 0x10001, 0x7, 0x7, 0x8, 0x10, 0x0, 0x0, 0x0, 0x9, 0x4, 0x2, 0x7, 0xe, 0x8000, 0xdb, 0x5, 0x3, 0x0, 0x2, 0x0, 0xbd, 0x9, 0x1ff, 0x2f43, 0x9, 0xc, 0x5, 0x6, 0xaff0, 0x2, 0x4, 0xfffffe00, 0x4911, 0x670, 0x4, 0x46d9, 0x6, 0x0, 0x8001, 0x8, 0xffff, 0x800, 0x4, 0x97c, 0x5, 0x3, 0x10000, 0xfffffff8, 0x7, 0xa, 0x81, 0x40, 0x288, 0xfff, 0x4, 0x0, 0x3562613f, 0x101, 0x265, 0x4, 0x0, 0x5, 0x7fff, 0x7f, 0x2, 0x8, 0x1, 0x4, 0x6, 0x6, 0xfff, 0x9, 0xf461, 0x5, 0x1, 0x8000, 0x7ff, 0x9, 0x4, 0x9, 0xe44, 0x8, 0x6, 0x80, 0x589, 0x8, 0x800, 0xd7f4, 0x2, 0x0, 0x1, 0x4, 0xffff, 0x9, 0x7, 0x0, 0x0, 0x63, 0x6, 0x2, 0x46, 0xfffffe75, 0x163, 0x3, 0x5, 0x4, 0x7, 0x35, 0xfffffd76, 0x9, 0x2, 0xd, 0x7, 0x2, 0x2, 0x8, 0x2, 0x6, 0x2, 0x1, 0xf, 0x32c, 0xffff, 0x4, 0x2, 0x7fffffff, 0xfffffffa, 0x9, 0xc217, 0x7, 0x4, 0xd, 0x3, 0x2, 0x9, 0x5, 0x1, 0xbc26, 0x4, 0x5, 0x2, 0x9, 0x2, 0xfffffffd, 0x0, 0xf8, 0x5, 0x3, 0x200, 0x7, 0x4e, 0x100, 0xeb, 0xf0, 0xb82f, 0x365, 0x3, 0xc95, 0xdfe9, 0x1000, 0x8, 0xd65, 0x5, 0x502, 0xb, 0x3, 0x5, 0x5, 0x4, 0x3, 0xfffffff8, 0xe090, 0x1, 0xa, 0x0, 0x5, 0x2, 0xfffffffe, 0x6, 0x0, 0x1, 0x4, 0x8, 0xfffffff7, 0x2, 0x7f, 0x7ff, 0x9, 0x1, 0x3, 0x101, 0x4, 0x7, 0x80000000, 0x6, 0x4, 0x6, 0xf0000000, 0x8000, 0x1ff, 0x8, 0x2, 0x3, 0x280, 0xd, 0x4, 0x7fff, 0x8001, 0x307d, 0x8, 0x0, 0x7, 0x7, 0x100, 0x4, 0x3, 0x4, 0x8, 0xbc57, 0x9, 0xdf, 0x5, 0x8, 0x7, 0x8, 0x10, 0x2, 0x8, 0xf, 0x3, 0x0, 0xfffffff4, 0x4, 0x5, 0x5, 0x7, 0x3, 0x10, 0x1, 0x8001, 0x7fffffff, 0x2, 0x4, 0x0, 0xd, 0x8001, 0x6, 0x2, 0x3, 0xaeb, 0x5, 0xf, 0x10001, 0x8, 0x8, 0x2, 0xc, 0x4, 0x3ff, 0x2, 0x10000, 0x8, 0xfbd1, 0x2, 0x5, 0x5, 0x800, 0x5, 0x7, 0xff9, 0x1, 0x20000000, 0x7fffffff, 0x1, 0xffffffff, 0x0, 0x6, 0x7ff, 0x2, 0x8, 0x6, 0xffffffff, 0xff, 0x1, 0xfff1, 0x9, 0x7, 0x7fe0, 0x4, 0x8d4, 0x5, 0x1, 0xf, 0x10, 0x2, 0x5, 0x80000001, 0xd, 0x7, 0x0, 0x5, 0x18000000, 0x0, 0x2, 0x6, 0x6, 0x6, 0x3, 0x5, 0x5, 0x2, 0x7fff, 0x0, 0x2, 0x3, 0x7, 0xa7b, 0x1, 0x63b2, 0xfff, 0x7, 0x6, 0x5, 0x5, 0xe2c, 0xfffffff9, 0xfff, 0xfffffff7, 0xcd, 0x8, 0xb, 0x2, 0x2, 0x4, 0x2d8, 0x10001, 0x100, 0x6, 0x1, 0x139a, 0xf, 0x3, 0x0, 0x7, 0x5, 0x2, 0x401, 0x1010000, 0x7, 0x3, 0x84, 0xe98, 0x1, 0x1, 0x6, 0x1, 0x96, 0x6, 0x90, 0x401, 0x4, 0x7f, 0x8, 0x1, 0x200, 0xebc, 0x80, 0x15a, 0x8000, 0x2, 0x3, 0x9, 0x8, 0xfffffff9, 0x7f, 0x55f, 0x0, 0x2b2e6523, 0x10000, 0x3ff, 0x1f, 0x1, 0x10001, 0x3, 0x3, 0x3, 0x40, 0xaf, 0x6, 0xfff, 0x0, 0x3529, 0x1, 0x6, 0xfffffff9, 0x6, 0x9, 0x7, 0x1, 0x8, 0xfff, 0x8, 0x7, 0x8, 0x7, 0xfffffffe, 0xcbb9, 0xfff, 0x2, 0x10, 0x1, 0x45, 0x1, 0xb, 0x4, 0x5, 0x9, 0x80000001, 0x5, 0x7, 0x10, 0x6, 0x4, 0x1, 0x9, 0x3, 0x8001, 0x5, 0x83, 0x1, 0x8bde, 0x0, 0x4, 0x2, 0xf, 0xe18, 0x8, 0x8, 0x8000, 0x9, 0x0, 0x3b, 0x7d7d, 0xfffffff9, 0xc6, 0x5, 0x452, 0x1, 0xe4, 0x80000, 0x9, 0x374, 0x0, 0xffffff80, 0x10000, 0xe5d, 0x28, 0x0, 0x80, 0x4, 0x58, 0x1, 0x8, 0x9, 0x401, 0x7, 0x6, 0x1, 0x8, 0x4, 0xc2f, 0x497d, 0xe, 0x527, 0x0, 0x21, 0xd00, 0xa0, 0x7fffffff, 0x7, 0x7, 0x9, 0x8, 0xa51b, 0x7, 0xba077d4, 0x5, 0x5, 0x3, 0xfffffe01, 0x1, 0x3, 0x800, 0x7, 0x4, 0x3, 0x4e, 0xfff, 0x2, 0x1, 0x6d6, 0xfffffff3, 0x4, 0x10, 0x40, 0x7, 0x1ff, 0x4, 0x88, 0x5, 0x1, 0x9, 0xec, 0x6, 0x1, 0x1, 0x9, 0xf49d, 0x4, 0x2, 0x3, 0x2e3, 0x8, 0x4f, 0x396, 0xa9, 0xfc5, 0x1, 0x7, 0x4, 0x2, 0x5, 0x2, 0x1, 0x3, 0x4, 0x3, 0x9, 0x3ff, 0x3b3, 0x3ff, 0x2, 0x7, 0x40, 0x7000, 0xba0c, 0x9, 0x1, 0x404, 0x9, 0x9, 0x3, 0x7, 0x10, 0x80, 0x6, 0x5, 0x2, 0x4, 0x8, 0x1a6, 0x91, 0x3, 0x13885189, 0x0, 0x8, 0x1, 0xb, 0xfffffe01, 0xc, 0x7fffffff, 0xffff, 0x8, 0x5, 0x2, 0x7, 0xb894, 0x4, 0x70, 0x5c3d, 0x7, 0x0, 0x8, 0x5, 0x0, 0x6, 0x1, 0x1, 0x4, 0xffff, 0x0, 0xffff, 0x6, 0x101, 0x1, 0x2, 0x9, 0x1, 0xfffff0a4, 0x2, 0x0, 0x5, 0x0, 0x0, 0x9, 0xed, 0x9, 0x3, 0x3, 0x10, 0x0, 0x1, 0x1, 0x7, 0xff, 0xb, 0x0, 0x81, 0x4, 0x7, 0x5, 0x4, 0x1, 0x120, 0x10001, 0x2, 0x4, 0x0, 0xffffffff, 0x5, 0x3, 0xf, 0xf, 0x0, 0xffffffff, 0x8, 0x2, 0x7fff, 0x5, 0xfff, 0xa, 0x80000000, 0xf, 0x0, 0x1, 0x2, 0x2, 0x7, 0x7, 0x3, 0x3, 0xd0aa, 0x2, 0x8000, 0x10, 0x4, 0xfffffffb, 0x7fffffff, 0xf6d5, 0x6, 0x60, 0xff, 0x7, 0x0, 0xf531, 0xffdb, 0xf4d4, 0x3, 0xe4, 0xcdcc, 0x7, 0xe26, 0x1, 0xee, 0xfffffff7, 0x9, 0x3, 0x9, 0x3fffc0, 0x6, 0x81, 0xc, 0xc, 0xfffffffa, 0x9, 0xa, 0x200, 0x8, 0x5, 0x6, 0xde, 0x6, 0x3ff, 0x2, 0x1, 0x7, 0x6, 0xf, 0x0, 0x3ff, 0x2f6, 0x7f, 0x4, 0x80000001, 0x10, 0x8, 0x3, 0x6, 0x9, 0x7, 0x695e, 0xfffffffc, 0x49eb1b57, 0x1000, 0x100, 0x25c, 0x5, 0x10, 0x9, 0x6, 0x7f, 0x8, 0x439ae2e4, 0x9, 0x0, 0x6, 0x7, 0x0, 0x3, 0x0, 0xa, 0xc, 0x9, 0x4, 0x8, 0xf, 0xb, 0x6, 0x8, 0x4, 0x2, 0x6, 0xa3e3, 0x4, 0x8, 0x3, 0xfffffff7, 0x6, 0x6, 0x7fff, 0x0, 0x1, 0x800, 0x0, 0xe, 0xdff1, 0x80000001, 0x9, 0x34, 0xb4, 0x6, 0xffff, 0x0, 0x7, 0x3ff, 0x7f, 0x0, 0x2, 0xfffffffb, 0xffffffff, 0x9, 0x2, 0xe, 0x8, 0x2, 0x158, 0x100, 0x200, 0xfffffffc, 0x0, 0x0, 0x3, 0x8, 0xa, 0x1, 0x4, 0x5, 0x4, 0x0, 0x0, 0x8, 0x3, 0x3, 0x4, 0xe83, 0x8, 0x7f, 0x401, 0x3, 0xa, 0x6, 0x5, 0x9, 0x6, 0x810, 0x22d5a7e5, 0x3, 0xc6, 0xcb, 0x1ff, 0xd106, 0xfffffffc, 0x7, 0x5, 0x9, 0xfff, 0x8, 0x7, 0x5, 0x998, 0x9, 0x13, 0x3ff, 0x6, 0x9c, 0x1, 0x9, 0x9]}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) (async) syz_open_dev$sndctrl(0x0, 0x2, 0xca080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) (async) listen(r6, 0xffffffff) (async) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r7, &(0x7f0000000080)=@file={0x1}, 0x6e) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.557838938s ago: executing program 4 (id=1521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x6, 0x4, 0x3, "1a78fc24446c"}}) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001800)=[{{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="df1ab033c46e3252abbca9a0222373340975e8af3310cf6606e08bddf246381da552f4db86f7fb9d115ba2b39b46b3e72e453119a54a0dd7957e172eb70b0362378287f973598315b5325ce1945a080dec398d2177759bcca91ed752dbe7ea2e0f7919cb402dcfae1282b7700df7a1295f07a8d0a289784513b8b4f82c9abd13fe646b6c6a2709cf0495af08fa94574abd1bf34c18f3904ba2abbc6a8d04cb6e93eed8cf3f91", 0xa6}, {&(0x7f00000006c0)="c68a5b94bda40fd5f5ad96827d64a9d2ed2aa7c4282cad79ea8a09e3f79cd8e2036df025f066e94ac6cd680b92dbec738de01fa9505a2166a9b895ea6433c0bae3a7ea06bf18129adb7b3ff6fd8d", 0x4e}], 0x3, &(0x7f0000000a00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x80, 0x4000000}}, {{&(0x7f0000000ac0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000b40)="e290bd87f3e70943a14a24f3ce8b4ca84ef18287b340ed670c38956c894488069efcf3123ee5c364a22b3dcbdc464bd4502fe93785df0c79b827dffc2e1bcdca7a1e09be1c45", 0x46}, {&(0x7f0000000bc0)="720d13083c26148b34", 0x9}, {&(0x7f0000000c00)="935266aec38af8261a5c08b4a42e3458833e27338dcd1275ad65c8788ba4faf1cc83d801d298f66917e54fe017da4ef09d7021b8586f6ef45d9d06ee9ac57591dc60eb7d9bab9f2265315b60ee3633dbb3ef8a0bd651c9d5a83567cd7dd3573edad8db2e4658235b1ad8551749759edfba3f484086d80528f1e1f4af76912951ce2869d97bac81dd63a579dceea95b2610d596bc07e8dd522ab8a81bce0f49914b665e27bc", 0xa5}, {&(0x7f0000000cc0)="57fcf878f61e0ea186faceaf08866ba06ea865feed9320bf766e03b6face3aa801e82d3da9fa9073edce0edf82d46215a81cdae185e72122b8ff8ea5d0faecde5ffebce247d112978d87dd1b429f240fe6d0c6f614dc1dbc81b12412317bdd189eec2e0e1f8bb2afc0869e7ea253d69bd1d7c796b86f9dc7465b0e66c4293a603b38c05d3530b3cfe77a1a5a7f3742c856418c14094387c7da277a04b0f44850f7ca8d2bde00afc058aac8f610769812b0465005b0485799856b847570091283b9501f6d8c95e5f1195518d22bd4ae15e448569378a5f5f85f7fe81cfed8ad28d8cf599c35597bb294c86f60ae4afd0bd482c713", 0xf4}, {&(0x7f0000000dc0)="a77d06fcc079db495d9015c09bf29461df33c3a0a7f7f418301661ce3e7645266ea438a2a710bad7b826590e22815f4797f58b7b7de52c753580bbb46463c6947c5976c42755cd1f8ee0d2a4b10d71e093a45ac4856cb3f747233cad2709ba11dc4c974455af4d8fb6472db356b49bd004c6c4526e37244a6964463a2091a73ff29c2893d7130fdd1a23d876c489cbae838aabfe39a48f0680ac1088f0476db592dc6033413a7c655d9621bcaa1ec860cd7f8331ec12c3fd84760c55c293d0a64212be588b81099db36fb8faf533e4a0dad7ac9f1243827fbfe882c8ab128787b275f157ea6b213ec5fa", 0xea}, {&(0x7f0000000ec0)="6dc79693698037418b6dcc0ac5debdf361aaea571380460a0c4e6c633d2fe3b6491cfa9d970812d31242b0f292f7e33d6e49d23bb80ff1e7ff1a5033086b7817b31425e0aded79287f16e3c89a1a0985b3abb116c05f65f62a660ad8daf997a20ebfeda451ef32cc0f33204a47", 0x6d}], 0x6, &(0x7f0000001080)=ANY=[@ANYBLOB="2000eb60d7f80000ecffffff01000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2], 0x20, 0x4000000}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000010c0)="c97b4d3c71cd4b519283e31b211a2dc1ab0715ac75258637fdb9fbababed67821850ce34906d657e68f3cfc15a044319ba7c75e05f8b4c2e5c17d0873b84e17ea3966368efdc9b70a51a754e457f66c9b13dfbdf57a46f8a364fb264d0ace736e613633b7de2baf7a9e0fddbc5566e2c8f4bd7", 0x73}, {&(0x7f0000001140)="9507874932b1f58f71bbe385e736d3bdc4d5530a9cf4116b4301db775681a4601da98e3593fea1b57f091c7e83dc24c56a42b16570d3543beb91d0e11cbbae2f357c5efff1bca90d8460960978012c3ebb97f3b63ede2f5e45de30bf14412872de5ba20d80c1f8676bab4eb0aba75990b0600824e006233736ef9aaa78769202beb0115a2be96d85ffd07ac25707b2d414576dcfae00326c50d2ef47607ab2a64e0605f7e7aab09e74a386d25de3cc040558dbafc76d8b3e92c1479ebd812bd891a22c90fc8ad33651da5e0f2cc37015d27ae1b3cc6c573f4ba5d112cd87b25841e2aac6ac1c8e381b", 0xe9}, {&(0x7f0000001240)="510bbd72c74700fad87d125336923420b7f341fd8ecb7f9a276b915833ce5fd18653870b7fb6c33267fa11c30ef4edcf97ab335734d02a159d6c9a537d025a67f85f1f58d0d6a38368789f7c8d2ca82ec1055be4aded0a5c77f75a07b1dce8bb4c3efa742a6aa5cb6db9533c760598d795e5ce37039954e618e9c98771c6243bcb62ae8caf0e3e5857", 0x89}, {&(0x7f0000001300)="fe74be21c2ed584b22a843459329d95ef045e081aa93c6c50a2929290e400f4e33ed4aa3416eea7b6e2e60f38259b1492daf37e671c7848a81479da806a69854ef64d552e29003164c8f464e711f71b8389542c8188f297b1bae58cfd614e56a0e6c21abeb47b26d747fa6829ea1c79db314211f4f3e55fdaad4668ee1cd37bbf9c7967235c73043a9c501fca6836b79d64fe3035448", 0x96}, {&(0x7f00000013c0)="f7be4f5b826fd472ed4bd5b2e5ded33adcce94b9a27ff241b28a50378787cfc8d9eba064e3eb001d2f3f564750048ee3062556e7392486b2743f0c6a3ee816dc57cd08383d4ec8334128bfddfa278f7bb1b3d87c6248c4f8598b7f0d68a2930c56a4f1db29540d884d3d7bbd70c3cb353e43d256f8533a9f1af241fe", 0x7c}], 0x5, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r3]}}, @rights={{0x38, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r1, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c}}], 0xa8, 0x800}}, {{&(0x7f0000001580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)="c126cea39fa9a358dcca399ebd8a296a3a4f43a6c6f2417b75801ee239efec1456bba56e00aabd4664b4662583ce5e05f3ab13897e910dbc6b9ce86c1760707b91a2499babc266b6cba897b3954de37c5a35596f31618d1e5568", 0x5a}, {&(0x7f0000001680)="45613504f4c0400633d89789cbf613ca3e43e7f1e31e", 0x16}, {&(0x7f00000016c0)="1082fa870bdd391db64a91273dc406b4fb1a5af95d1574275ca33566611c6b88cc777f58653d6c83ee8807d4d264d2d67e00d50a91cb0d845397c8e32cbd1c251d04ad290527d5bc3de74fbf8745c969895d165163e7f330c9e9b1ec6bb5d09d99758a55d9bf08d2caddb55f75e4a50a2bc584a540718da57ce22a2126aecbee2a2a1d7482fdd3743c5888a946fee662eaaf518e56bee19092b1a9404088c5ae6ddf244191664cde18b19eb8702a68bab7cc5d04bd21122196661c814682dfcf6edc8f423855725166f218de2f9d7c90f148b698c3605cfad40a791a0553639f3ed40b00639e5b461a6f", 0xea}], 0x3, 0x0, 0x0, 0x20004881}}], 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000201feffffff000000000600800a00000800028004001180"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet6(0xa, 0x6, 0x79) recvmmsg(r1, &(0x7f0000005a40)=[{{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000002900)=[{&(0x7f00000008c0)=""/252, 0xfc}, {&(0x7f00000007c0)=""/113, 0x71}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/106, 0x6a}, {&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000000a80)=""/59, 0x3b}], 0x6, &(0x7f0000001040)}, 0x793}, {{&(0x7f0000002980)=@xdp, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002a00)=""/28, 0x1c}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/129, 0x81}, {&(0x7f0000003b00)=""/118, 0x76}, {&(0x7f0000003b80)=""/252, 0xfc}, {&(0x7f0000003c80)=""/178, 0xb2}], 0x6, &(0x7f0000003dc0)=""/8, 0x8}, 0x8}, {{&(0x7f0000003e00)=@caif=@dbg, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e80)=""/175, 0xaf}], 0x1, &(0x7f0000003f80)=""/90, 0x5a}, 0xffffff07}, {{&(0x7f0000004000)=@isdn, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004080)=""/230, 0xe6}, {&(0x7f0000004180)=""/46, 0x2e}, {&(0x7f00000041c0)=""/22, 0x16}, {&(0x7f0000004200)=""/217, 0xd9}, {&(0x7f0000004300)=""/158, 0x9e}, {&(0x7f00000043c0)=""/170, 0xaa}, {&(0x7f00000054c0)=""/171, 0xab}], 0x7, &(0x7f0000004640)=""/211, 0xd3}, 0x6}, {{&(0x7f0000004740)=@ax25={{0x3, @bcast}, [@netrom, @default, @remote, @rose, @remote, @remote, @remote, @rose]}, 0x80, &(0x7f0000004e40)=[{&(0x7f00000047c0)=""/238, 0xee}, {&(0x7f00000048c0)=""/215, 0xd7}, {&(0x7f00000049c0)=""/69, 0x45}, {&(0x7f0000004a40)=""/137, 0x89}, {&(0x7f0000004480)=""/15, 0xf}, {&(0x7f0000004b00)=""/141, 0x8d}, {&(0x7f0000004bc0)=""/192, 0xc0}, {&(0x7f0000004c80)=""/187, 0xbb}, {&(0x7f0000004d40)=""/85, 0x55}, {&(0x7f0000004dc0)=""/71, 0x47}], 0xa, &(0x7f0000004f00)=""/6, 0x6}, 0x7a07}, {{&(0x7f0000004f40)=@caif=@dgm, 0x80, &(0x7f0000005140)=[{&(0x7f0000004fc0)=""/174, 0xae}, {&(0x7f0000005080)=""/157, 0x9d}], 0x2, &(0x7f0000005180)=""/54, 0x36}, 0x2}, {{&(0x7f00000051c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005380)=[{&(0x7f0000005240)=""/41, 0x29}, {&(0x7f0000005280)=""/250, 0xfa}], 0x2, &(0x7f00000053c0)=""/66, 0x42}, 0x3b59}, {{&(0x7f0000005440), 0x80, &(0x7f0000005900), 0x0, &(0x7f0000005980)=""/140, 0x8c}, 0x7}], 0x8, 0x2023, &(0x7f0000005c40)={0x77359400}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) madvise(&(0x7f00006a6000/0x800000)=nil, 0x800000, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000043000701fdfffffffcdbdf25027c0000040045800809000008000480"], 0x20}}, 0x810) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f00000001c0)=0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000048398b10b810141e23850102030109021200010000000009044800000553ed91"], 0x0) 5.410812722s ago: executing program 1 (id=1522): r0 = semget$private(0x0, 0x8, 0xa) semop(r0, &(0x7f0000000140)=[{0x3, 0x3, 0x1000}, {0x2, 0x2, 0x800}, {0x2, 0x1, 0x800}, {0x1, 0xfff9, 0x1000}], 0x4) semop(r0, &(0x7f0000000380)=[{0x1, 0x7}], 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfffffffe}}}}}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000080)={0x3, 0x2c, {0x0}, {0xee00}, 0xc0, 0xeaf4}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0xd13b}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x3, r3, 0x0, 0x0, 0x0, 0x40000023, 0x1, {0x2}}) io_uring_enter(r4, 0x6e2, 0x600, 0x1, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) syz_open_procfs(r2, &(0x7f00000000c0)='loginuid\x00') syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a40)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r7, 0x0, &(0x7f00000003c0)=""/79}, 0x20) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 5.215105109s ago: executing program 1 (id=1523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70010000010a01010000000000000000030000005a0006007800bc4db957d23981223bd8237138ee5fc9d0d111b3255afd16a0d5ff6689659c551f34897f57a7e99b554b68c08dbb95f1635847c5056f83e3ed299b5547e75781b1f5a2fc20ff92a48a950319dec343ed9de03022000008000240000000030500044000000000000000030900010073797a31000000000900010073797a3100000000ba000600918226294a89b9d551646c35d36d7d3c6751c4f2f6d69202885c19da8eeb14197c2e70f440a4ec0b81fae2774b40de144bd81626c1679da5411f50f9563bbbc4d4aef2b350495fc2b22a197cea4bb367deb20c2074c5a01b4aaf80d9cb4c425ec6cc161cf8f4c264abf6654092aab166ecdc6b894b76a3ad73f67c521f9110a74aee10984f7629ce2478ea6f91a92507caf04a46684d5ccec1849bd2a577fbe2907d31707a080c4a86ba6853b49c7255226c0a2182282800000c00048500000000000000030900010073797a3000000000"], 0x170}, 0x1, 0x0, 0x0, 0x4040880}, 0x4044895) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000054000000030a01020000000000000000010000000900030073797a31000000002800048008000240000000000800014000000000140003007665746831736d61633888cd973ec3191400010073797a310000000014000000050a0102000000000000000003002000140000001100010000000000000000000000000a"], 0xb0}}, 0x0) 4.515784397s ago: executing program 0 (id=1524): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"8538d42fc13e585b97a7ba4a0e6e9abda14b9d3901f1cafb5318a73b1caae962", 0xffffffffffffffff, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x7, 0x1, 0xe4b, 0x6, 0x6, 0x0, 0x9, 0x5, 0x7b, 0x7, 0x3d95, 0x2, 0x40, 0x6, 0x3, 0x6, [0x200, 0x7ff]}}) close_range(r0, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000"], 0x13) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000"], 0x13) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4800) socket(0x2a, 0x2, 0x0) (async) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(0x3) (async) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001810f400e8d671acf81ae4a4f9c60b0c63b89682eb43d46e7013fead8c03c10947af5dc65b7332bb54595f05a97494345140277737ff3f39bcd173d818d2f9e5294288fe56c412c4c1e43d12d2c0c42e942aca7fa747d9f723", @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001810f400e8d671acf81ae4a4f9c60b0c63b89682eb43d46e7013fead8c03c10947af5dc65b7332bb54595f05a97494345140277737ff3f39bcd173d818d2f9e5294288fe56c412c4c1e43d12d2c0c42e942aca7fa747d9f723", @ANYRESOCT=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x10) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r9 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}], 0x18, 0x801}], 0x1, 0x54) write$FUSE_NOTIFY_RESEND(r9, &(0x7f0000002200)={0x14}, 0x14) timerfd_create(0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.518379183s ago: executing program 0 (id=1529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x10800, 0x7fffffff, 0x0, 0x8, 0x230, 0x8}) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc8902, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000600)={0x17}) ptrace(0x10, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpcgss_svc_seqno_low\x00', r3}, 0x18) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r7, &(0x7f00000005c0)=ANY=[@ANYRES16=r4], 0x258) close(r7) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) 2.4509425s ago: executing program 2 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)) r4 = dup(r3) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000640)=0x13) syz_open_procfs(0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r4}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x101, 0x3f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x8800) 2.450259251s ago: executing program 1 (id=1531): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) copy_file_range(r0, &(0x7f0000000280)=0x4, r0, &(0x7f0000000380)=0x3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x9, 0x2002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x14, 0x12, 0x1, 0x70bd2a, 0x0, {0x28}}, 0x14}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x40010) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000300000018000000000000000000000000000000950007b4510a7ecd0d0b00000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$sock_bt_hci(r3, 0x400448cc, &(0x7f00000003c0)="bba291560000000000000033cc8c22a5") setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x4e) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x7) sendmsg$can_bcm(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0600000012030000e700000000000000", @ANYRES64=0x0, @ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001000000000000e005000000b395ac5160fbdac3"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4048aecb, &(0x7f0000001440)={{0x5, 0x0, 0x80, {0xffffffffffffffff, 0x1, 0x1}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b31cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e977e67b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8cd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeeb473f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 2.369029786s ago: executing program 4 (id=1532): r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x4a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, r2, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xfffffffffffffcb7) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="009432b6be54144a990000000097adbd5014000000b70400000800020085000000950000003b66479ef1cb8c9a8f8e6877daa4d648b30b7a15e1246177145177351ffdf2c962247c1ec2cd36f139a1ce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r8 = socket$unix(0x1, 0x1, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000200)={0x1, 0x4, 0x401, 0x0, 0x6, 0xbbe}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf}, {}, {0x7, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0x2c}}, 0x404c004) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x5, @loopback, 0x2002}, 0x1c) 2.340286639s ago: executing program 2 (id=1533): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) 2.281117167s ago: executing program 3 (id=1534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="9a6445c64daf"}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xaa4, 0x12) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x0, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xa, 0xffff}, {0xd, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4011}, 0x0) socket(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, 0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x309002) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x24}]) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r6 = socket$l2tp6(0xa, 0x2, 0x73) dup3(r6, 0xffffffffffffffff, 0x0) 1.971207638s ago: executing program 4 (id=1535): r0 = socket$inet6(0xa, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0xfffffffffffffe16, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="880e617d8553ebc0cc964c49a8382b41540f529fb2128b753d269e73709f09de4d3492b45c558954b122aabea973cb8ab0bf7fdf200c91af3d4935834136fc527e50fd3263ba0ecd32dbef9b267b3b697e9f9f742795bc5659138d37a038eb38a278a0c3ee568e22a81397263e8b5b13fed1715b39120b887c33e610", 0x7c}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x89f2, &(0x7f00000000c0)={0x7, 0x2, 0x0, 0x7f, 0x8b, "5dee00000059400000000000000100"}) 1.47448499s ago: executing program 4 (id=1536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.330858902s ago: executing program 2 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000b001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000100feffffff0800050001000000"], 0x44}}, 0x0) 1.166310979s ago: executing program 2 (id=1538): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c4}, 0x805) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:getty_var_run_t:s0\x00'}]}, 0x40}}, 0x44) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004000) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000004c0)={@multicast2, @broadcast, 0x0, "312e55ce1aff146852d676603dcb0f84b41d0419f73ec85247d94ee0e91f4a94", 0x4, 0xdb4, 0x8, 0x6}, 0x3c) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x500, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r3, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x20, &(0x7f0000000740)={&(0x7f0000000580)=""/194, 0xc2, 0x0, &(0x7f0000000680)=""/171, 0xab}}, 0x10) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000007c0)) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x9}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000880)=@assoc_value={r6, 0x5af0}, &(0x7f00000008c0)=0x8) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900), 0x361040, 0x0) (async) r8 = syz_clone3(&(0x7f0000000c00)={0x2000a0000, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00), {0x32}, &(0x7f0000000a40)=""/238, 0xee, &(0x7f0000000b40)=""/126, &(0x7f0000000bc0)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r3}}, 0x58) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000c80)=0x0) sendmsg$nl_route(r7, &(0x7f0000000d80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@RTM_NEWNSID={0x4c, 0x58, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_PID={0x8, 0x2, r9}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x4c}}, 0x4000) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000001dc0)=0x0, &(0x7f0000001e00)=0x4) sendto$packet(r7, &(0x7f0000000dc0)="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", 0x1000, 0x2000c800, &(0x7f0000001e40)={0x11, 0x10, r10, 0x1, 0x3}, 0x14) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001ec0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x28, r11, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x63}]}, 0x28}, 0x1, 0x0, 0x0, 0xc8c1}, 0x80045) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@bloom_filter={0x1e, 0x200, 0x3, 0x0, 0x80e1, r4, 0x8000000, '\x00', r10, r2, 0x5, 0x1, 0x0, 0x5, @value=r7}, 0x50) r12 = accept4$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @fixed}, &(0x7f00000020c0)=0xe, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000002100)={'wlan0\x00'}) (async) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000002140), 0x86, 0x0) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f00000021c0), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r13, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x3c, r14, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x24e6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 248.285388ms ago: executing program 2 (id=1539): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f0000004880)=[{{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/254, 0xfe}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/89, 0x59}], 0x3, &(0x7f00000009c0)=""/254, 0xfe}, 0x81}, {{&(0x7f0000000ac0)=@caif=@dbg, 0x80, &(0x7f0000002140)=[{&(0x7f0000000b40)=""/48, 0x30}, {&(0x7f0000000b80)=""/129, 0x81}, {&(0x7f0000000c40)=""/208, 0xd0}, {&(0x7f0000000d40)=""/131, 0x83}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/249, 0xf9}, {&(0x7f0000001f00)=""/133, 0x85}, {&(0x7f0000001fc0)=""/159, 0x9f}, {&(0x7f0000002080)=""/158, 0x9e}], 0xa, &(0x7f0000002200)=""/219, 0xdb}, 0x2}, {{&(0x7f0000002300)=@caif, 0x80, &(0x7f0000002700)=[{&(0x7f0000002380)=""/163, 0xa3}, {&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)=""/152, 0x98}, {&(0x7f0000002540)=""/242, 0xf2}, {&(0x7f0000002640)=""/177, 0xb1}], 0x5, &(0x7f0000002780)=""/170, 0xaa}, 0x2}, {{&(0x7f0000002840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000028c0)=""/199, 0xc7}, {&(0x7f0000002a40)=""/207, 0xcf}, {&(0x7f0000002b40)=""/76, 0x4c}, {&(0x7f00000029c0)=""/48, 0x30}, {&(0x7f0000002bc0)=""/184, 0xb8}, {&(0x7f0000002c80)=""/223, 0xdf}], 0x6, &(0x7f0000002e00)=""/78, 0x4e}, 0x9}, {{&(0x7f0000002e80)=@generic, 0x80, &(0x7f0000003040)=[{&(0x7f0000002f00)=""/91, 0x5b}, {&(0x7f0000002f80)=""/133, 0x85}], 0x2, &(0x7f0000003080)=""/35, 0x23}, 0x7}, {{&(0x7f00000030c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003140)=""/164, 0xa4}, {&(0x7f0000003200)=""/138, 0x8a}], 0x2}, 0x6}, {{&(0x7f0000003300)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003380)=""/87, 0x57}], 0x1, &(0x7f0000003440)=""/41, 0x29}, 0x8}, {{&(0x7f0000003480)=@phonet, 0x80, &(0x7f0000003600)=[{&(0x7f0000003500)=""/239, 0xef}], 0x1, &(0x7f0000003640)=""/165, 0xa5}, 0x5}], 0x8, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) (async) mmap(&(0x7f00006a8000/0x3000)=nil, 0x3000, 0x300000a, 0x13, 0xffffffffffffffff, 0x380b3000) (async) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, &(0x7f0000000000)=0x3, 0x4, 0x1) (async) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x20048004) (async, rerun: 64) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x4000840) (async, rerun: 32) writev(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x200000005c831, 0xffffffffffffffff, 0x0) (rerun: 64) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/253, 0xfd, 0xadc) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000009533ff3b63badc42636c89bc037dc0aa3af8317e52529034b2635d", @ANYRES64=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(r6, 0x6, &(0x7f0000000240)=0xf) 166.717867ms ago: executing program 1 (id=1540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x2c060000) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) (async) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x5, 0x4f, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 61.016311ms ago: executing program 2 (id=1541): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$inet(0x2, 0x1, 0x100) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r5, &(0x7f0000000040)=[{&(0x7f0000002240)="c3", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 0s ago: executing program 1 (id=1542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r2}, 0x40) (async) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[], 0x0) kernel console output (not intermixed with test programs): [ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 280.715392][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.728170][ T24] usb 4-1: Product: syz [ 280.732692][ T24] usb 4-1: Manufacturer: syz [ 280.740028][ T24] usb 4-1: SerialNumber: syz [ 280.848945][ T24] usb 4-1: config 0 descriptor?? [ 280.861876][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 281.285377][ T30] audit: type=1400 audit(1766768220.029:594): avc: denied { setopt } for pid=11228 comm="syz.2.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 281.321027][ T4494] usb 4-1: Failed to submit usb control message: -71 [ 281.328638][ T24] usb 4-1: USB disconnect, device number 23 [ 281.334573][ T4494] usb 4-1: unable to send the bmi data to the device: -71 [ 281.362780][ T4494] usb 4-1: unable to get target info from device [ 281.427575][ T4494] usb 4-1: could not get target info (-71) [ 281.444386][ T4494] usb 4-1: could not probe fw (-71) [ 281.738129][ T5960] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 282.473474][ T5960] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 282.496958][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.531917][ T5960] usb 1-1: config 0 descriptor?? [ 282.984316][T11240] hfs: unable to load iocharset "io#harset" [ 282.998040][ T5960] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 283.006005][ T30] audit: type=1400 audit(1766768222.089:595): avc: denied { connect } for pid=11254 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.026914][ T5960] hackrf 1-1:0.0: Could not detect board [ 283.036770][ T5960] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 283.095652][ T30] audit: type=1400 audit(1766768222.119:597): avc: denied { write } for pid=11254 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.116575][ T5960] usb 1-1: USB disconnect, device number 47 [ 283.151506][ T30] audit: type=1400 audit(1766768222.119:596): avc: denied { write } for pid=11254 comm="syz.3.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.491377][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 283.501760][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 283.575054][T11268] netlink: 'syz.1.865': attribute type 3 has an invalid length. [ 284.998619][T11295] macvtap0: entered allmulticast mode [ 285.009674][T11295] veth0_macvtap: entered allmulticast mode [ 285.476069][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 285.514448][T11306] Unknown options in mask b7f2 [ 285.536643][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 285.603135][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 285.766319][ T5960] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 285.928189][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.951240][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.961843][ T5960] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 285.972483][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.983329][ T5960] usb 1-1: config 0 descriptor?? [ 286.188135][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'. [ 286.412569][ T30] audit: type=1400 audit(1766768225.499:598): avc: denied { set_context_mgr } for pid=11310 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 286.480796][ T5889] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 286.531643][T11311] binder: BINDER_SET_CONTEXT_MGR already set [ 286.561165][T11311] binder: 11310:11311 ioctl 4018620d 200000004a80 returned -16 [ 286.802631][ T5960] usbhid 1-1:0.0: can't add hid device: -71 [ 286.810075][ T5960] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 286.821143][ T5960] usb 1-1: USB disconnect, device number 48 [ 286.912978][ T5889] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 286.926740][ T5889] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 286.938624][T11336] netlink: 52 bytes leftover after parsing attributes in process `syz.0.885'. [ 286.954159][ T5889] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.965210][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.974510][ T5889] usb 2-1: Product: 罶Ȉ䎱뢬拮㸹慪袽ꂗꡀ畊곻㿇纫î¢í‹ï½”孢⚊ⳑꠂ혊枸̹ [ 286.995724][ T5889] usb 2-1: Manufacturer: á [ 287.004065][ T5889] usb 2-1: SerialNumber: á„ [ 287.840205][ T5889] cdc_ncm 2-1:1.0: bind() failure [ 287.854917][ T5889] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 287.861885][ T5889] cdc_ncm 2-1:1.1: bind() failure [ 287.878433][ T5889] usb 2-1: USB disconnect, device number 36 [ 288.791711][ T30] audit: type=1400 audit(1766768227.879:599): avc: denied { write } for pid=11379 comm="syz.4.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 290.132899][T11411] netlink: 35 bytes leftover after parsing attributes in process `syz.2.903'. [ 290.154712][T11411] netlink: 'syz.2.903': attribute type 4 has an invalid length. [ 290.386242][ T5960] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 290.963698][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 290.979285][ T5960] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 291.001150][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.017942][ T5960] usb 4-1: Product: syz [ 291.028140][ T5960] usb 4-1: Manufacturer: syz [ 291.044673][ T5960] usb 4-1: SerialNumber: syz [ 291.128220][ T5960] usb 4-1: config 0 descriptor?? [ 291.202874][ T5960] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 291.246207][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 291.255492][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 291.961976][ T6046] usb 4-1: Failed to submit usb control message: -71 [ 291.992479][ T5960] usb 4-1: USB disconnect, device number 24 [ 291.996283][ T6046] usb 4-1: unable to send the bmi data to the device: -71 [ 292.046358][ T6046] usb 4-1: unable to get target info from device [ 292.057005][ T6046] usb 4-1: could not get target info (-71) [ 292.072472][ T6046] usb 4-1: could not probe fw (-71) [ 292.079993][T11440] netlink: 360 bytes leftover after parsing attributes in process `syz.1.912'. [ 292.426351][ T5960] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 292.595444][ T5960] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x46, changing to 0x6 [ 292.613221][ T5960] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 292.616316][T10238] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 292.625677][ T5960] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 292.683671][ T5960] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 292.714195][ T5960] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 292.758913][ T5960] usb 4-1: Manufacturer: syz [ 292.775655][ T5960] usb 4-1: SerialNumber: syz [ 292.878981][T10238] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 292.888069][T10238] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 292.904773][T11467] netlink: 666 bytes leftover after parsing attributes in process `syz.4.920'. [ 292.914191][T10238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.926695][T10238] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 292.945036][T10238] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 292.965206][T10238] usb 2-1: Product: syz [ 292.969502][T10238] usb 2-1: Manufacturer: syz [ 292.975292][T10238] usb 2-1: SerialNumber: syz [ 292.985239][T10238] usb 2-1: config 0 descriptor?? [ 292.992929][T10238] hub 2-1:0.0: bad descriptor, ignoring hub [ 292.999369][T10238] hub 2-1:0.0: probe with driver hub failed with error -5 [ 293.012469][T10238] usb 2-1: selecting invalid altsetting 0 [ 293.022418][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.036102][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.140681][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 293.326508][T10238] usb 2-1: USB disconnect, device number 37 [ 293.603037][ T5960] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 293.631624][ T5960] usb 4-1: USB disconnect, device number 25 [ 293.883736][T11498] sp0: Synchronizing with TNC [ 294.756526][T11492] [U] è [ 295.280363][T11519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.933'. [ 295.289916][T11519] Unknown options in mask b7f2 [ 295.302517][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'. [ 295.366346][T10238] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 295.588235][T10238] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 295.597708][T10238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.608906][T10238] usb 1-1: config 0 descriptor?? [ 296.113709][T11508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.139266][T11508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.313453][T11533] xt_TCPMSS: Only works on TCP SYN packets [ 296.466318][ T6164] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 296.609760][T11540] lo speed is unknown, defaulting to 1000 [ 296.617349][T11540] lo speed is unknown, defaulting to 1000 [ 296.627562][ T6164] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.645206][ T6164] usb 2-1: not running at top speed; connect to a high speed hub [ 296.663582][ T6164] usb 2-1: config 7 has an invalid interface number: 145 but max is 0 [ 296.679223][ T6164] usb 2-1: config 7 has an invalid descriptor of length 32, skipping remainder of the config [ 296.708394][ T6164] usb 2-1: config 7 has no interface number 0 [ 296.719458][ T6164] usb 2-1: config 7 interface 145 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 296.736197][ T6164] usb 2-1: config 7 interface 145 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 296.748615][ T6164] usb 2-1: config 7 interface 145 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 296.763020][ T6164] usb 2-1: config 7 interface 145 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 296.775617][ T6164] usb 2-1: config 7 interface 145 altsetting 6 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 296.789731][ T6164] usb 2-1: config 7 interface 145 has no altsetting 0 [ 296.800464][ T6164] usb 2-1: string descriptor 0 read error: -22 [ 296.820768][ T6164] usb 2-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=9a.92 [ 296.830583][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.846095][T11526] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 296.858994][ T6164] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 297.243388][ T30] audit: type=1400 audit(1766768236.329:600): avc: denied { ioctl } for pid=11545 comm="syz.3.943" path="socket:[24753]" dev="sockfs" ino=24753 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.490373][T11552] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 297.769779][ T6164] gspca_sn9c20x: Write register 1001 failed -110 [ 297.776254][ T6164] gspca_sn9c20x: Device initialization failed [ 297.783460][ T6164] gspca_sn9c20x 2-1:7.145: probe with driver gspca_sn9c20x failed with error -110 [ 297.795426][T11551] IPv6: sit1: Disabled Multicast RS [ 297.816234][ T6164] usb 2-1: USB disconnect, device number 38 [ 297.989669][T11556] netlink: 156 bytes leftover after parsing attributes in process `syz.4.945'. [ 297.999116][T11556] netlink: 156 bytes leftover after parsing attributes in process `syz.4.945'. [ 298.096285][ T5932] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 298.130345][T10238] usb 1-1: string descriptor 0 read error: -71 [ 298.139370][T10238] hub 1-1:0.0: bad descriptor, ignoring hub [ 298.145328][T10238] hub 1-1:0.0: probe with driver hub failed with error -5 [ 298.177352][T10238] usb 1-1: USB disconnect, device number 49 [ 298.276279][ T5932] usb 4-1: Using ep0 maxpacket: 32 [ 298.285078][ T5932] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac [ 298.320469][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.438570][ T5932] usb 4-1: config 0 descriptor?? [ 298.451912][ T5932] gl620a 4-1:0.0: probe with driver gl620a failed with error -22 [ 298.690309][ T5932] usb 4-1: USB disconnect, device number 26 [ 298.862457][T11566] 9pnet_fd: Insufficient options for proto=fd [ 298.904034][T11572] netlink: 'syz.1.949': attribute type 4 has an invalid length. [ 298.995496][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 299.245197][T11590] overlayfs: conflicting options: userxattr,redirect_dir=on [ 299.373881][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 299.382780][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 299.391883][T11592] netlink: 'syz.1.954': attribute type 18 has an invalid length. [ 302.853874][ T30] audit: type=1326 audit(1766768241.939:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11624 comm="syz.1.966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f188e78f749 code=0x0 [ 302.955553][ T30] audit: type=1400 audit(1766768242.039:602): avc: denied { bind } for pid=11624 comm="syz.1.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 303.008189][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 303.626213][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 303.636672][ T24] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 303.651875][ T24] usb 4-1: config 0 has no interface number 0 [ 303.661994][ T24] usb 4-1: config 0 interface 50 has no altsetting 0 [ 303.668796][ T5932] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 303.688998][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=94.35 [ 303.706317][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.722427][ T24] usb 4-1: Product: syz [ 303.732628][ T24] usb 4-1: Manufacturer: syz [ 303.739711][ T24] usb 4-1: SerialNumber: syz [ 303.751094][ T24] usb 4-1: config 0 descriptor?? [ 303.828979][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.848487][ T5932] usb 1-1: not running at top speed; connect to a high speed hub [ 303.865072][ T5932] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 303.884266][ T5932] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 303.915392][ T5932] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 303.924503][ T5932] usb 1-1: config 17 has no interface number 0 [ 303.934862][ T5932] usb 1-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 303.960862][ T5932] usb 1-1: config 17 interface 8 has no altsetting 0 [ 304.018389][ T5932] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 304.036255][ T5960] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 304.043935][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.059131][ T5932] usb 1-1: Product: syz [ 304.063660][ T5932] usb 1-1: Manufacturer: syz [ 304.070340][ T5932] usb 1-1: SerialNumber: syz [ 304.147287][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 304.162010][ T24] gspca_sn9c2028: read1 error -71 [ 304.175669][ T24] gspca_sn9c2028: read1 error -71 [ 304.182087][ T24] gspca_sn9c2028: read1 error -71 [ 304.188846][ T24] sn9c2028 4-1:0.50: probe with driver sn9c2028 failed with error -71 [ 304.199577][ T24] usb 4-1: USB disconnect, device number 27 [ 304.206463][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 304.225995][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.248253][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.258565][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.273290][ T5960] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 304.299719][ T5932] usb 1-1: selecting invalid altsetting 0 [ 304.316500][ T5932] usb 1-1: USB disconnect, device number 50 [ 304.322514][ T5960] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 304.349340][ T5960] usb 2-1: Manufacturer: syz [ 304.453966][ T5960] usb 2-1: config 0 descriptor?? [ 304.485652][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.684089][T11643] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 304.762707][T11643] bond1: entered promiscuous mode [ 304.803072][T11643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.873328][T11680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.882431][T11680] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 304.892722][T11680] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 304.926738][ T5931] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 304.947330][T11680] bond1: (slave vcan1): making interface the new active one [ 304.954759][T11680] vcan1: entered promiscuous mode [ 304.980088][T11680] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 305.166577][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 305.238633][ T5931] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 305.305074][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.307298][ T5960] usbhid 2-1:0.0: can't add hid device: -71 [ 305.313284][ T5931] usb 1-1: Product: syz [ 305.323179][ T5931] usb 1-1: Manufacturer: syz [ 305.331857][ T5960] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 305.346281][ T5931] usb 1-1: SerialNumber: syz [ 305.382462][ T5931] usb 1-1: config 0 descriptor?? [ 305.388302][ T5960] usb 2-1: USB disconnect, device number 39 [ 305.390299][ T5931] gspca_main: sq905-2.14.0 probing 2770:9120 [ 305.708373][ T30] audit: type=1400 audit(1766768244.789:603): avc: denied { connect } for pid=11688 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 305.767769][ T30] audit: type=1400 audit(1766768244.789:604): avc: denied { mount } for pid=11688 comm="syz.4.984" name="/" dev="autofs" ino=24572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 305.815815][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.846827][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.877190][ T5931] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 305.896661][T11691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.937774][ T5931] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 305.985420][ T5931] usb 1-1: USB disconnect, device number 51 [ 306.542862][T11700] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.987'. [ 306.713536][T11701] hfsplus: unable to find HFS+ superblock [ 307.206477][T11711] comedi comedi0: Minor 3 specified more than once! [ 307.330369][T11712] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 307.888939][T11719] lo speed is unknown, defaulting to 1000 [ 307.896021][T11719] lo speed is unknown, defaulting to 1000 [ 307.902205][T11722] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 307.961782][T11723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.256797][T11733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11733 comm=syz.1.996 [ 308.274148][ T30] audit: type=1400 audit(1766768247.359:605): avc: denied { bind } for pid=11734 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 308.494810][T11737] netlink: 128 bytes leftover after parsing attributes in process `syz.2.995'. [ 308.504362][T11737] netlink: 128 bytes leftover after parsing attributes in process `syz.2.995'. [ 308.587274][ T30] audit: type=1400 audit(1766768247.649:606): avc: denied { write } for pid=11734 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 309.344814][T11751] xt_nat: multiple ranges no longer supported [ 309.406563][ T5960] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 309.586284][ T5960] usb 1-1: Using ep0 maxpacket: 16 [ 309.609419][ T5960] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 309.628698][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 309.644059][ T5960] usb 1-1: Product: syz [ 309.655529][ T5960] usb 1-1: Manufacturer: syz [ 309.667790][ T5960] usb 1-1: SerialNumber: syz [ 309.683026][ T5960] usb 1-1: config 0 descriptor?? [ 309.794221][T11738] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 309.821018][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 310.194938][ T30] audit: type=1400 audit(1766768249.279:607): avc: denied { ioctl } for pid=11761 comm="syz.4.1005" path="socket:[25108]" dev="sockfs" ino=25108 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 310.412436][ T30] audit: type=1400 audit(1766768249.499:608): avc: denied { mounton } for pid=11763 comm="syz.3.1006" path="/proc/2623/task" dev="proc" ino=25745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 310.412524][T11764] fuse: Bad value for 'group_id' [ 310.553938][T11764] fuse: Bad value for 'group_id' [ 310.896351][ T5960] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 311.130137][ T5960] usb 2-1: device descriptor read/64, error -71 [ 311.456478][ T5960] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 311.577578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 311.787018][ T6164] usb 1-1: USB disconnect, device number 52 [ 311.846244][ T5960] usb 2-1: device descriptor read/64, error -71 [ 311.989638][ T5960] usb usb2-port1: attempt power cycle [ 312.220153][T11794] netlink: 'syz.0.1014': attribute type 7 has an invalid length. [ 312.363071][ T5960] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 312.394085][ T30] audit: type=1400 audit(1766768251.479:609): avc: denied { ioctl } for pid=11791 comm="syz.0.1014" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 312.438625][ T5960] usb 2-1: device descriptor read/8, error -71 [ 312.914082][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'. [ 312.942937][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 312.977440][T11801] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 313.056597][ T3825] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.146235][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 313.163960][ T5960] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 313.178639][T11803] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002 [ 313.207314][ T3825] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.216690][ T3825] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.238065][ T3825] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.253475][ T5960] usb 2-1: device descriptor read/8, error -71 [ 313.268892][T11809] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 313.414443][ T5960] usb usb2-port1: unable to enumerate USB device [ 313.447935][ T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 313.461588][T11815] 9p: Bad value for 'rfdno' [ 313.466774][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.476738][ T24] usb 1-1: Product: syz [ 313.481218][ T24] usb 1-1: Manufacturer: syz [ 313.486517][ T24] usb 1-1: SerialNumber: syz [ 314.183536][ T24] usb 1-1: config 0 descriptor?? [ 314.251133][ T24] hso 1-1:0.0: Not our interface [ 314.289940][ T24] usb-storage 1-1:0.0: USB Mass Storage device detected [ 314.569685][ T30] audit: type=1326 audit(1766768253.649:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 314.624867][ T30] audit: type=1326 audit(1766768253.659:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 314.909688][ T30] audit: type=1326 audit(1766768253.689:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 314.962807][ T30] audit: type=1326 audit(1766768253.689:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 315.097781][T11838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64615 sclass=netlink_route_socket pid=11838 comm=syz.1.1024 [ 315.223301][ T30] audit: type=1326 audit(1766768253.689:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 315.458847][ T30] audit: type=1326 audit(1766768253.689:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 315.494524][ T30] audit: type=1326 audit(1766768253.689:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 315.606583][T11849] lo speed is unknown, defaulting to 1000 [ 315.624141][T11849] lo speed is unknown, defaulting to 1000 [ 315.637586][ T30] audit: type=1326 audit(1766768253.689:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 315.711337][ T5960] usb 1-1: USB disconnect, device number 53 [ 315.762349][ T30] audit: type=1326 audit(1766768253.689:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11834 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f188e78f749 code=0x7ffc0000 [ 316.891694][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.898395][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.946265][T10238] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 317.116350][T10238] usb 1-1: Using ep0 maxpacket: 16 [ 317.124413][T10238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.137227][T10238] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 317.151546][T10238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.176794][T10238] usb 1-1: config 0 descriptor?? [ 317.608876][T10238] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 317.812643][ T24] usb 1-1: USB disconnect, device number 54 [ 317.946258][T10415] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 318.457622][T10415] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 318.465787][T10415] usb 2-1: config 0 has no interface number 0 [ 318.474367][T10415] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 318.484960][T10415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.493183][T10415] usb 2-1: Product: syz [ 318.497506][T10415] usb 2-1: Manufacturer: syz [ 318.504216][T10415] usb 2-1: SerialNumber: syz [ 318.512589][T10415] usb 2-1: config 0 descriptor?? [ 318.523571][T10415] yurex 2-1:0.50: Could not find endpoints [ 318.912409][ T30] audit: type=1400 audit(1766768257.999:619): avc: denied { mounton } for pid=11912 comm="syz.3.1044" path="/syzcgroup/unified/syz3" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 319.152971][T11923] trusted_key: encrypted_key: master key parameter 'use>:}@^/!-{' is invalid [ 319.163061][T11923] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 319.956813][T11936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1048'. [ 320.597223][T11935] delete_channel: no stack [ 320.667547][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 320.667562][ T30] audit: type=1400 audit(1766768259.759:622): avc: denied { read } for pid=11937 comm="syz.0.1049" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 320.706251][ T30] audit: type=1400 audit(1766768259.789:623): avc: denied { open } for pid=11937 comm="syz.0.1049" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 320.808533][ T30] audit: type=1400 audit(1766768259.789:624): avc: denied { ioctl } for pid=11937 comm="syz.0.1049" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 320.840161][ T24] usb 2-1: USB disconnect, device number 44 [ 321.117384][T11950] hfsplus: unable to find HFS+ superblock [ 321.860736][T11958] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.129994][ T30] audit: type=1400 audit(1766768261.219:625): avc: denied { bind } for pid=11959 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.666293][ T24] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 323.316231][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 323.322697][ T24] usb 1-1: config 0 has an invalid interface number: 244 but max is 2 [ 323.348427][ T24] usb 1-1: config 0 has an invalid interface number: 191 but max is 2 [ 323.376655][ T24] usb 1-1: config 0 has an invalid interface number: 132 but max is 2 [ 323.400158][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.439860][ T24] usb 1-1: config 0 has no interface number 0 [ 323.451997][ T24] usb 1-1: config 0 has no interface number 1 [ 323.466346][ T24] usb 1-1: config 0 has no interface number 2 [ 323.526475][ T24] usb 1-1: config 0 interface 244 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 323.581657][ T24] usb 1-1: config 0 interface 244 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 323.611146][T11987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1063'. [ 323.620286][ T24] usb 1-1: too many endpoints for config 0 interface 191 altsetting 176: 117, using maximum allowed: 30 [ 323.639568][ T24] usb 1-1: config 0 interface 191 altsetting 176 has a duplicate endpoint with address 0x4, skipping [ 323.650908][ T24] usb 1-1: config 0 interface 191 altsetting 176 has 5 endpoint descriptors, different from the interface descriptor's value: 117 [ 323.756547][T11990] bridge2: entered promiscuous mode [ 323.767983][T11990] bridge2: entered allmulticast mode [ 323.816266][T10415] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 323.886210][ T5138] Bluetooth: hci4: command 0x0405 tx timeout [ 323.998895][ T24] usb 1-1: config 0 interface 132 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 324.026346][ T24] usb 1-1: config 0 interface 244 has no altsetting 0 [ 324.043285][ T24] usb 1-1: config 0 interface 191 has no altsetting 0 [ 324.058165][ T24] usb 1-1: config 0 interface 132 has no altsetting 0 [ 324.073675][ T24] usb 1-1: New USB device found, idVendor=0b05, idProduct=170c, bcdDevice=6d.8c [ 324.088552][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.106204][ T24] usb 1-1: Product: syz [ 324.114745][ T24] usb 1-1: Manufacturer: syz [ 324.125182][ T24] usb 1-1: SerialNumber: syz [ 324.136284][T10415] usb 2-1: Using ep0 maxpacket: 8 [ 324.149076][T10415] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.158202][ T24] usb 1-1: config 0 descriptor?? [ 324.169118][T10415] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 324.193385][T10415] usb 2-1: can't read configurations, error -61 [ 324.336461][T10415] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 325.096221][T10415] usb 2-1: Using ep0 maxpacket: 8 [ 325.113828][T10415] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.157854][T10415] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 325.174493][T10415] usb 2-1: can't read configurations, error -61 [ 325.181450][T10415] usb usb2-port1: attempt power cycle [ 325.426022][T12005] netlink: 'syz.2.1065': attribute type 11 has an invalid length. [ 325.526311][T10415] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 325.559238][T10415] usb 2-1: Using ep0 maxpacket: 8 [ 325.576629][T10415] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.611782][T10415] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 325.633286][T10415] usb 2-1: can't read configurations, error -61 [ 325.786271][T10415] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 325.816712][T10415] usb 2-1: Using ep0 maxpacket: 8 [ 325.827910][T10415] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.838533][T10415] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 325.846396][T10415] usb 2-1: can't read configurations, error -61 [ 325.852856][T10415] usb usb2-port1: unable to enumerate USB device [ 326.023218][ T5820] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 326.086015][T12016] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1068'. [ 326.252773][ T24] usb 1-1: USB disconnect, device number 55 [ 326.386701][T10415] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 326.400566][T12022] overlayfs: failed to clone lowerpath [ 326.407729][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 326.416605][T12022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.431953][ T30] audit: type=1400 audit(1766768265.489:626): avc: denied { mount } for pid=12020 comm="syz.2.1071" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 326.623481][T10415] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 326.632327][T10415] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 326.641831][T10415] usb 4-1: config 1 has no interface number 1 [ 326.648124][T10415] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 326.661787][T10415] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 326.675005][T10415] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.151372][T10415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.165900][T10415] usb 4-1: Product: syz [ 327.171325][T10415] usb 4-1: Manufacturer: syz [ 327.178563][T10415] usb 4-1: SerialNumber: syz [ 327.203005][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 327.377534][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1076'. [ 327.450706][T10415] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 327.543562][T10415] usb 4-1: USB disconnect, device number 28 [ 327.558079][ T5932] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 327.583993][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.620093][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.638396][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.737642][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.749378][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.760936][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 327.771536][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.786563][ T5932] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.795670][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.805886][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1080'. [ 327.815145][T12049] Unknown options in mask b7f2 [ 327.819985][ T5960] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 327.830861][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'. [ 327.841095][ T5932] usb 1-1: config 0 descriptor?? [ 327.956226][ T5960] usb 2-1: device descriptor read/64, error -71 [ 328.196307][ T5960] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 328.254735][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.262240][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.270358][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.280044][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.291212][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.301632][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.315417][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.328076][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.335951][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.346192][ T5960] usb 2-1: device descriptor read/64, error -71 [ 328.356297][ T5932] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 328.394541][ T5932] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 328.459249][ T5960] usb usb2-port1: attempt power cycle [ 328.523337][ T5932] usb 1-1: USB disconnect, device number 56 [ 328.590864][T12057] fido_id[12057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 328.806272][ T5960] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 328.836743][ T5960] usb 2-1: device descriptor read/8, error -71 [ 328.914445][T12076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.076525][ T5960] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 329.116780][ T5960] usb 2-1: device descriptor read/8, error -71 [ 329.226662][ T5960] usb usb2-port1: unable to enumerate USB device [ 329.331604][T12085] lo speed is unknown, defaulting to 1000 [ 329.338758][T12085] lo speed is unknown, defaulting to 1000 [ 329.485862][ T5866] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 329.872904][ T5866] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 329.882063][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.391705][ T5866] usb 1-1: Product: syz [ 330.415753][ T5866] usb 1-1: Manufacturer: syz [ 330.428454][ T5866] usb 1-1: SerialNumber: syz [ 330.445024][ T5866] hub 1-1:24.0: bad descriptor, ignoring hub [ 330.467148][ T5866] hub 1-1:24.0: probe with driver hub failed with error -5 [ 330.714786][ T5866] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 330.799246][T12108] pim6reg: entered allmulticast mode [ 331.242711][ T5866] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 331.521072][T12116] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 331.536217][ T5866] dib0700: firmware download failed at 7 with -22 [ 331.572209][T12116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.585124][T12116] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 331.596007][ T5866] usb 1-1: USB disconnect, device number 57 [ 331.637296][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1099'. [ 331.649724][T12116] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 331.661863][T12116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1097'. [ 331.712344][T12116] batadv0: entered promiscuous mode [ 331.736057][T12116] batadv0: entered allmulticast mode [ 331.935678][T12116] bond0: (slave batadv0): Releasing backup interface [ 331.950698][T12116] bridge0: port 3(batadv0) entered blocking state [ 331.957834][T12116] bridge0: port 3(batadv0) entered disabled state [ 332.003521][T12129] netlink: zone id is out of range [ 332.010541][T12125] syz.1.1097 (12125) used obsolete PPPIOCDETACH ioctl [ 332.015134][T12124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 332.027404][T12124] Unknown options in mask b7f2 [ 332.067335][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1100'. [ 332.136352][ T5866] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 332.286400][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 332.288090][ T5866] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 332.288108][ T5866] usb 1-1: config 0 has no interface number 0 [ 332.289806][ T5866] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 332.289822][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.289833][ T5866] usb 1-1: Product: syz [ 332.289842][ T5866] usb 1-1: Manufacturer: syz [ 332.289851][ T5866] usb 1-1: SerialNumber: syz [ 332.291063][ T5866] usb 1-1: config 0 descriptor?? [ 332.293172][ T5866] smsc95xx v2.0.0 [ 332.406570][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 332.416044][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 332.718440][ T30] audit: type=1400 audit(1766768271.809:627): avc: denied { read } for pid=12146 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 332.781460][ T5866] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 332.814756][ T5866] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 332.837364][ T5866] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 332.870285][ T5866] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 332.918995][T12151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.054135][ T5866] usb 1-1: USB disconnect, device number 58 [ 333.483623][ T30] audit: type=1400 audit(1766768272.569:628): avc: denied { getopt } for pid=12157 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.150905][ T30] audit: type=1326 audit(1766768273.179:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d98f749 code=0x7ffc0000 [ 334.180117][ T30] audit: type=1326 audit(1766768273.179:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d98f749 code=0x7ffc0000 [ 334.213970][ T30] audit: type=1326 audit(1766768273.179:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd82d98f749 code=0x7ffc0000 [ 334.316250][ T30] audit: type=1326 audit(1766768273.179:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d98f749 code=0x7ffc0000 [ 334.706286][T10415] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 334.817040][ T30] audit: type=1326 audit(1766768273.179:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd82d98df90 code=0x7ffc0000 [ 334.856783][ T30] audit: type=1326 audit(1766768273.179:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d98f749 code=0x7ffc0000 [ 334.889227][ T30] audit: type=1326 audit(1766768273.179:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd82d98f749 code=0x7ffc0000 [ 335.009073][T12186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.019310][T10415] usb 2-1: Using ep0 maxpacket: 8 [ 335.025447][ T30] audit: type=1326 audit(1766768273.179:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.0.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82d98f749 code=0x7ffc0000 [ 335.025822][T10415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 335.106689][T12186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.119789][T10415] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.132805][T10415] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 335.146476][T10415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.173448][T12186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.184026][T10415] usb 2-1: config 0 descriptor?? [ 335.187278][T12186] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.447779][T12194] netlink: 'syz.0.1119': attribute type 4 has an invalid length. [ 335.455558][T12194] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1119'. [ 335.469560][T12194] .`: renamed from bond0 (while UP) [ 335.496765][T12194] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 335.612312][T10415] hid_parser_main: 5 callbacks suppressed [ 335.612332][T10415] logitech 0003:046D:C298.000F: unknown main item tag 0x0 [ 335.625373][T10415] logitech 0003:046D:C298.000F: unknown main item tag 0x0 [ 335.632907][T10415] logitech 0003:046D:C298.000F: unknown main item tag 0x0 [ 335.640191][T10415] logitech 0003:046D:C298.000F: unknown main item tag 0x0 [ 335.647954][T10415] logitech 0003:046D:C298.000F: unknown main item tag 0x0 [ 335.661086][T10415] logitech 0003:046D:C298.000F: hidraw0: USB HID v0.09 Device [HID 046d:c298] on usb-dummy_hcd.1-1/input0 [ 335.683016][T10415] logitech 0003:046D:C298.000F: no inputs found [ 335.786314][ T24] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 335.977404][T10415] usb 2-1: USB disconnect, device number 53 [ 336.016200][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 336.102788][ T24] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 336.113022][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.166243][ T24] usb 1-1: Product: syz [ 336.175003][ T24] usb 1-1: Manufacturer: syz [ 336.190211][ T24] usb 1-1: SerialNumber: syz [ 336.216765][ T24] usb 1-1: config 0 descriptor?? [ 336.275310][T10415] kernel write not supported for file /uhid (pid: 10415 comm: kworker/1:11) [ 336.369390][T12221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1127'. [ 336.385191][T12221] Unknown options in mask b7f2 [ 336.405048][T12223] lo speed is unknown, defaulting to 1000 [ 336.427151][T12223] lo speed is unknown, defaulting to 1000 [ 336.434347][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 336.464018][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1127'. [ 336.898636][T12198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.935605][T12198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.992147][ T24] gspca_sunplus: reg_w_riv err -71 [ 337.008559][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 337.042661][ T24] usb 1-1: USB disconnect, device number 59 [ 337.270033][T12245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=12245 comm=syz.2.1133 [ 337.288133][T12245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1133'. [ 337.298884][T12245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1133'. [ 337.309504][T12245] 9pnet_virtio: no channels available for device syz [ 337.431477][T12252] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 338.096310][ T8801] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 338.838264][ T8801] usb 4-1: Using ep0 maxpacket: 16 [ 338.860310][ T8801] usb 4-1: config index 0 descriptor too short (expected 804, got 36) [ 338.878068][ T8801] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 338.895651][ T8801] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 338.914300][ T8801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.947319][ T8801] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 338.967416][ T8801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.970816][T12278] lo speed is unknown, defaulting to 1000 [ 338.987072][T12278] lo speed is unknown, defaulting to 1000 [ 339.057441][ T8801] usb 4-1: config 0 descriptor?? [ 339.090400][T12283] 9p: Bad value for 'wfdno' [ 339.424462][T12290] fuse: Unknown parameter 'rootmod' [ 339.446593][T12290] fuse: Unknown parameter 'rootmod' [ 339.497750][T12290] fuse: Unknown parameter 'rootmod' [ 339.503322][T12290] fuse: Unknown parameter 'rootmod' [ 339.504954][ T8801] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 339.509106][T12290] fuse: Unknown parameter 'rootmod' [ 339.583360][T12289] lo speed is unknown, defaulting to 1000 [ 339.691771][T12287] lo speed is unknown, defaulting to 1000 [ 339.793535][T12287] lo speed is unknown, defaulting to 1000 [ 339.809792][T12289] lo speed is unknown, defaulting to 1000 [ 339.929670][ T8801] usb 4-1: USB disconnect, device number 29 [ 341.014336][T12320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 341.024929][T12320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12320 comm=syz.0.1150 [ 341.236445][ T5960] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 341.255036][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 341.255048][ T30] audit: type=1400 audit(1766768280.339:650): avc: denied { create } for pid=12325 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 341.476243][ T5960] usb 4-1: device descriptor read/64, error -71 [ 342.207666][ T5960] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 342.438085][T12340] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 342.796842][ T5960] usb 4-1: device descriptor read/64, error -71 [ 342.909117][ T5960] usb usb4-port1: attempt power cycle [ 343.987180][ T5960] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 344.032800][ T5960] usb 4-1: device descriptor read/8, error -71 [ 344.414916][ T30] audit: type=1400 audit(1766768283.499:651): avc: denied { getopt } for pid=12357 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.556320][ T30] audit: type=1400 audit(1766768283.499:652): avc: denied { ioctl } for pid=12357 comm="syz.0.1160" path="socket:[27277]" dev="sockfs" ino=27277 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.666219][ T30] audit: type=1400 audit(1766768283.559:653): avc: denied { read } for pid=12357 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.717486][T12389] atomic_op ffff888031854198 conn xmit_atomic 0000000000000000 [ 344.800381][ T30] audit: type=1400 audit(1766768283.889:654): avc: denied { append } for pid=12390 comm="syz.3.1167" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 344.844298][ T30] audit: type=1400 audit(1766768283.919:655): avc: denied { map } for pid=12390 comm="syz.3.1167" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 344.876879][ T30] audit: type=1400 audit(1766768283.919:656): avc: denied { execute } for pid=12390 comm="syz.3.1167" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 344.971424][T12395] ucma_write: process 2752 (syz.3.1169) changed security contexts after opening file descriptor, this is not allowed. [ 345.908653][T12415] overlayfs: failed to clone upperpath [ 345.932103][T12414] overlayfs: failed to clone upperpath [ 345.953523][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 347.061753][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'. [ 347.377900][T12433] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1178'. [ 347.458942][T12435] netlink: 'syz.3.1179': attribute type 2 has an invalid length. [ 348.156592][T12461] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1163'. [ 348.255130][ T30] audit: type=1400 audit(1766768287.339:657): avc: denied { recv } for pid=5800 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.113 dest=40472 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 348.333453][T10415] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 348.429445][ T30] audit: type=1400 audit(1766768287.519:658): avc: denied { ioctl } for pid=12468 comm="syz.0.1187" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 348.507084][T10415] usb 4-1: Using ep0 maxpacket: 32 [ 348.519951][T10415] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 348.534785][T10415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.561433][T10415] usb 4-1: config 0 descriptor?? [ 348.731655][ T30] audit: type=1400 audit(1766768287.819:659): avc: denied { sys_module } for pid=12473 comm="syz.2.1189" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 348.770447][T12480] netlink: 'syz.2.1189': attribute type 4 has an invalid length. [ 348.779929][T12480] netlink: 'syz.2.1189': attribute type 4 has an invalid length. [ 348.862212][T10415] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 348.940236][T10415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.944262][T12489] xt_cgroup: invalid path, errno=-2 [ 348.960344][T10415] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 348.983953][T10415] usb 4-1: media controller created [ 349.016490][T12490] xt_cgroup: invalid path, errno=-2 [ 349.051773][T12492] ALSA: mixer_oss: invalid OSS volume '' [ 349.067956][T12492] ALSA: mixer_oss: invalid OSS volume '›î+]OØ“OG”§eÐÔc¦Íï¯9bx'Ä®Cú' [ 349.096369][T12492] ALSA: mixer_oss: invalid OSS volume '_ü¨²å*[bYcqî~l¬r‹=V' [ 349.615032][T12492] ALSA: mixer_oss: invalid OSS volume '+ˆ®ê×Í¿èºê‰…nU<$³È^EKʘürÈ+' [ 349.632705][T12492] ALSA: mixer_oss: invalid OSS volume '+8çµiYJzËåý' [ 349.956318][T10415] rc_core: IR keymap rc-dib0700-rc5 not found [ 350.096200][T10415] Registered IR keymap rc-empty [ 350.105352][T10415] dvb-usb: could not initialize remote control. [ 350.115298][T10415] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 350.184430][ T30] audit: type=1400 audit(1766768289.269:660): avc: denied { read } for pid=12512 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 350.625819][T10415] usb 4-1: USB disconnect, device number 34 [ 350.626761][T12518] overlayfs: failed to clone lowerpath [ 350.737455][T10415] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 350.916382][T10238] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 351.039122][ T30] audit: type=1400 audit(1766768290.119:661): avc: denied { mount } for pid=12525 comm="syz.4.1199" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 351.068868][T10238] usb 2-1: config 8 interface 0 altsetting 249 endpoint 0xC has invalid wMaxPacketSize 0 [ 351.078229][T10415] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 351.084806][T10238] usb 2-1: config 8 interface 0 has no altsetting 0 [ 351.136072][T10238] usb 2-1: New USB device found, idVendor=15c2, idProduct=0038, bcdDevice=69.a3 [ 351.150962][T10238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.172343][T10238] usb 2-1: Product: syz [ 351.179929][T10238] usb 2-1: Manufacturer: syz [ 351.200052][T10238] usb 2-1: SerialNumber: syz [ 351.257625][T10415] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 351.266783][T10415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.278617][T10415] usb 4-1: config 0 descriptor?? [ 351.545563][T10238] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 351.566001][T10238] imon 2-1:8.0: unable to initialize intf0, err -19 [ 351.580378][T10238] imon:imon_probe: failed to initialize context! [ 351.587203][ T30] audit: type=1400 audit(1766768290.679:662): avc: denied { setopt } for pid=12503 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 351.587431][T10238] imon 2-1:8.0: unable to register, err -19 [ 351.616257][T10415] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 351.683808][T10238] usb 2-1: USB disconnect, device number 54 [ 351.816867][T10415] [drm:udl_init] *ERROR* Selecting channel failed [ 351.864296][T10415] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 351.888707][T10415] [drm] Initialized udl on minor 2 [ 351.914821][T10415] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 351.952011][T10415] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 352.001002][ T5889] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 352.012365][T10415] usb 4-1: USB disconnect, device number 35 [ 352.051437][ T5889] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 352.532509][ T30] audit: type=1400 audit(1766768291.619:663): avc: denied { egress } for pid=12552 comm="syz.1.1208" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 352.539892][ T30] audit: type=1400 audit(1766768291.619:664): avc: denied { sendto } for pid=12552 comm="syz.1.1208" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 353.035625][T10415] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 353.308092][T12581] overlayfs: missing 'lowerdir' [ 353.319813][ T30] audit: type=1400 audit(1766768292.309:665): avc: denied { ioctl } for pid=12575 comm="syz.4.1214" path="socket:[28751]" dev="sockfs" ino=28751 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 353.348906][T10415] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 353.638132][T10415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.671872][T10415] usb 4-1: Product: syz [ 353.679283][T10415] usb 4-1: Manufacturer: syz [ 353.712573][ T30] audit: type=1400 audit(1766768292.309:666): avc: denied { write } for pid=12575 comm="syz.4.1214" path="socket:[28751]" dev="sockfs" ino=28751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 353.743363][T10415] usb 4-1: SerialNumber: syz [ 353.769414][T10415] usb 4-1: config 0 descriptor?? [ 353.791427][T10415] hso 4-1:0.0: Not our interface [ 353.801019][T10415] usb-storage 4-1:0.0: USB Mass Storage device detected [ 353.898889][T12598] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1220'. [ 353.999194][T10415] usb 4-1: USB disconnect, device number 36 [ 354.459428][T12604] tc_dump_action: action bad kind [ 355.528599][T12619] ceph: No mds server is up or the cluster is laggy [ 355.535499][ T24] libceph: connect (1)[c::]:6789 error -101 [ 355.546840][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 355.961796][ T30] audit: type=1400 audit(1766768295.049:667): avc: denied { audit_write } for pid=12611 comm="syz.0.1224" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 356.021898][T12636] netlink: 87 bytes leftover after parsing attributes in process `syz.1.1228'. [ 356.164521][T12630] lo speed is unknown, defaulting to 1000 [ 356.171005][T12630] lo speed is unknown, defaulting to 1000 [ 357.376237][T10415] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 357.549146][T10415] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.570304][T10415] usb 2-1: not running at top speed; connect to a high speed hub [ 357.597446][T10415] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 357.616540][T10415] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 357.636416][T10415] usb 2-1: config 5 has no interface number 0 [ 357.642742][T10415] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 357.666347][T10415] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 357.706228][T10415] usb 2-1: config 5 interface 246 has no altsetting 0 [ 357.714964][T10415] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 357.736593][T10415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.744608][T10415] usb 2-1: Product: syz [ 357.754706][T10415] usb 2-1: Manufacturer: syz [ 357.861817][T10415] usb 2-1: SerialNumber: syz [ 358.887772][ T8801] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 359.474860][ T8801] usb 1-1: Using ep0 maxpacket: 32 [ 359.477370][ T8801] usb 1-1: config 40 has an invalid interface number: 103 but max is 0 [ 359.477395][ T8801] usb 1-1: config 40 has no interface number 0 [ 359.477419][ T8801] usb 1-1: config 40 interface 103 has no altsetting 0 [ 359.479423][ T8801] usb 1-1: New USB device found, idVendor=0586, idProduct=3427, bcdDevice=2f.20 [ 359.479448][ T8801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.479466][ T8801] usb 1-1: Product: syz [ 359.479480][ T8801] usb 1-1: Manufacturer: syz [ 359.479493][ T8801] usb 1-1: SerialNumber: syz [ 359.541274][ T30] audit: type=1400 audit(1766768298.629:668): avc: denied { setattr } for pid=12685 comm="syz.3.1240" name="RAW" dev="sockfs" ino=29044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.692384][T12666] syzkaller1: entered promiscuous mode [ 359.692413][T12666] syzkaller1: entered allmulticast mode [ 359.957539][ T8801] dm9601 1-1:40.103: probe with driver dm9601 failed with error -22 [ 359.991144][ T8801] usb 1-1: USB disconnect, device number 60 [ 360.090287][ T30] audit: type=1400 audit(1766768299.179:669): avc: denied { create } for pid=12695 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 360.122755][T12699] fuse: Bad value for 'fd' [ 360.152139][T12699] bond0: (slave syz_tun): Releasing backup interface [ 360.300335][T10415] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 360.302733][ T1099] usb 2-1: Failed to submit usb control message: -71 [ 360.318506][T10415] usb 2-1: USB disconnect, device number 55 [ 360.356201][ T1099] usb 2-1: unable to send the bmi data to the device: -71 [ 360.363347][ T1099] usb 2-1: unable to get target info from device [ 360.386592][ T1099] usb 2-1: could not get target info (-71) [ 360.392433][ T1099] usb 2-1: could not probe fw (-71) [ 360.581273][ T30] audit: type=1400 audit(1766768299.669:670): avc: denied { shutdown } for pid=12702 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 360.666174][T12709] input: syz1 as /devices/virtual/input/input18 [ 360.799149][ T30] audit: type=1400 audit(1766768299.889:671): avc: denied { read write } for pid=5818 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.897089][ T30] audit: type=1400 audit(1766768299.909:672): avc: denied { open } for pid=5818 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.957970][ T30] audit: type=1400 audit(1766768299.909:673): avc: denied { ioctl } for pid=5818 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 361.486627][T12732] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 363.306282][ T5960] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 363.440897][T12758] x_tables: duplicate underflow at hook 2 [ 363.457015][ T30] audit: type=1400 audit(1766768302.549:674): avc: denied { ioctl } for pid=12757 comm="syz.3.1255" path="socket:[29151]" dev="sockfs" ino=29151 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 363.504910][T12761] loop7: detected capacity change from 0 to 16384 [ 363.513654][ T5960] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 363.534553][ T5960] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 363.561977][ T5960] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 363.588009][ T5960] usb 1-1: config 220 has no interface number 2 [ 363.588284][T12761] loop7: detected capacity change from 16384 to 0 [ 363.606208][ T5960] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 363.647224][ T5960] usb 1-1: config 220 interface 0 has no altsetting 0 [ 363.654162][ T5960] usb 1-1: config 220 interface 76 has no altsetting 0 [ 363.675987][ C1] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 363.719798][ T5960] usb 1-1: config 220 interface 1 has no altsetting 0 [ 363.739932][ T5960] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 363.759359][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.773818][ T5960] usb 1-1: Product: syz [ 363.780266][ T5960] usb 1-1: Manufacturer: syz [ 363.784934][ T5960] usb 1-1: SerialNumber: syz [ 364.089134][ T5960] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 364.096725][ T5960] uvcvideo 1-1:220.0: No valid video chain found. [ 364.103189][ T5960] usb 1-1: selecting invalid altsetting 0 [ 364.176617][T10415] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 364.304459][ T5960] usb 1-1: selecting invalid altsetting 0 [ 364.310345][ T5960] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 364.335522][ T5960] usb 1-1: USB disconnect, device number 61 [ 364.384488][T10415] usb 2-1: unable to get BOS descriptor or descriptor too short [ 364.449907][T10415] usb 2-1: config 64 has an invalid interface number: 227 but max is 0 [ 364.472637][T10415] usb 2-1: config 64 has no interface number 0 [ 364.485647][T10415] usb 2-1: config 64 interface 227 altsetting 9 endpoint 0x4 is Bulk; changing to Interrupt [ 364.495845][T10415] usb 2-1: config 64 interface 227 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 364.508925][T10415] usb 2-1: config 64 interface 227 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 364.524534][T10415] usb 2-1: config 64 interface 227 has no altsetting 0 [ 364.534630][T10415] usb 2-1: string descriptor 0 read error: -22 [ 364.544694][T12790] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 364.545460][T10415] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 364.576260][T10415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.614128][T10415] imon_raw 2-1:64.227: IR endpoint missing [ 364.779482][ T30] audit: type=1400 audit(1766768304.867:675): avc: denied { mount } for pid=12792 comm="syz.0.1264" name="/" dev="hugetlbfs" ino=30074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 364.892592][T12802] bond0: entered allmulticast mode [ 364.904169][T12802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.911660][T12802] bridge0: port 3(bond0) entered blocking state [ 364.912542][ T30] audit: type=1400 audit(1766768304.997:676): avc: denied { recv } for pid=12749 comm="syz.2.1253" saddr=10.128.0.169 src=39770 daddr=10.128.0.113 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 364.960087][T12802] bridge0: port 3(bond0) entered disabled state [ 364.988375][T12806] netlink: 'syz.0.1265': attribute type 1 has an invalid length. [ 364.999682][T12802] bond0: entered promiscuous mode [ 365.004999][T12802] bridge0: port 3(bond0) entered blocking state [ 365.011361][T12802] bridge0: port 3(bond0) entered forwarding state [ 365.072409][ T33] bridge0: port 3(bond0) entered disabled state [ 365.223883][ T30] audit: type=1400 audit(1766768305.307:677): avc: denied { write } for pid=12801 comm="syz.0.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 366.337545][T12834] syzkaller0: entered promiscuous mode [ 366.352298][T12834] syzkaller0: entered allmulticast mode [ 367.365872][ T8801] usb 2-1: USB disconnect, device number 56 [ 368.079525][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 368.192336][T12865] siw: device registration error -23 [ 368.450596][ T30] audit: type=1400 audit(1766768308.537:678): avc: denied { create } for pid=12872 comm="syz.0.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 368.512341][ T30] audit: type=1400 audit(1766768308.597:679): avc: denied { getopt } for pid=12876 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 369.766990][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 370.579904][T12904] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 370.712760][T12911] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1293'. [ 370.726536][ T5931] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 370.945148][ T5931] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 370.964556][ T5931] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 370.985215][ T5931] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 371.005774][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 371.029125][ T5931] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 371.040182][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 371.131391][ T5931] usb 2-1: Product: syz [ 371.135577][ T5931] usb 2-1: Manufacturer: syz [ 371.150638][ T5931] usb 2-1: SerialNumber: syz [ 371.176942][ T5931] usb 2-1: config 0 descriptor?? [ 371.198880][T12899] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.239243][ T5931] usb 2-1: selecting invalid altsetting 0 [ 371.242082][ T30] audit: type=1400 audit(1766768311.327:680): avc: denied { ioctl } for pid=12920 comm="syz.0.1295" path="socket:[30235]" dev="sockfs" ino=30235 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 371.402606][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 371.459826][ T8801] usb 2-1: USB disconnect, device number 57 [ 371.604185][T12928] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1296'. [ 371.649343][T12929] cgroup: Name too long [ 372.026436][ T8801] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 372.196358][ T8801] usb 4-1: Using ep0 maxpacket: 8 [ 372.202910][ T8801] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 372.241436][ T8801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 372.254234][ T8801] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 372.271682][ T8801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.279902][ T8801] usb 4-1: Product: syz [ 372.284381][ T8801] usb 4-1: Manufacturer: syz [ 372.295124][ T8801] usb 4-1: SerialNumber: syz [ 372.300289][ T5931] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 372.313051][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1303'. [ 372.313480][ T8801] usb 4-1: config 0 descriptor?? [ 372.421718][ T8801] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 372.453763][T12950] macsec2: entered promiscuous mode [ 372.459021][T12950] macsec2: entered allmulticast mode [ 372.530448][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 372.560547][ T8801] usb 4-1: USB disconnect, device number 37 [ 372.567484][ T5931] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 372.675184][ T5931] usb 2-1: config 0 has no interface number 0 [ 372.856421][ T5931] usb 2-1: config 0 interface 184 has no altsetting 0 [ 372.867277][ T5931] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 372.962999][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.971135][ T5931] usb 2-1: Product: syz [ 372.979604][ T5931] usb 2-1: Manufacturer: syz [ 372.986182][ T5931] usb 2-1: SerialNumber: syz [ 372.997863][ T5931] usb 2-1: config 0 descriptor?? [ 373.006581][ T5931] smsc75xx v1.0.0 [ 373.630504][T12968] lo speed is unknown, defaulting to 1000 [ 373.661323][T12968] lo speed is unknown, defaulting to 1000 [ 373.682171][T12969] overlayfs: failed to clone upperpath [ 374.011436][ T5931] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 374.151998][ T5931] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 374.166777][ T5931] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 374.181252][ T5931] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 374.623336][ T5931] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 374.648481][ T5931] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 374.673959][ T5931] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 374.685715][T12980] binder: BINDER_SET_CONTEXT_MGR already set [ 374.717648][ T5931] usb 2-1: USB disconnect, device number 58 [ 374.725784][T12980] binder: 12979:12980 ioctl 4018620d 200000000100 returned -16 [ 374.758913][T12985] binder_alloc: binder_alloc_mmap_handler: 12979 200000ffd000-200001000000 already mapped failed -16 [ 375.089609][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1314'. [ 375.133277][T12999] Unknown options in mask b7f2 [ 375.215687][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 375.396209][ T5931] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 375.536256][ T5931] usb 2-1: device descriptor read/64, error -71 [ 375.986189][ T5931] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 376.156525][ T5931] usb 2-1: device descriptor read/64, error -71 [ 376.277559][ T5931] usb usb2-port1: attempt power cycle [ 376.484282][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1319'. [ 376.737943][ T30] audit: type=1400 audit(1766768316.827:681): avc: denied { accept } for pid=13022 comm="syz.4.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 376.777571][ T5931] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 376.816837][ T5931] usb 2-1: device descriptor read/8, error -71 [ 376.904253][ T30] audit: type=1400 audit(1766768316.987:682): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 377.056291][ T5931] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 377.076227][ T5960] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 377.106629][ T5931] usb 2-1: device descriptor read/8, error -71 [ 377.248019][ T5931] usb usb2-port1: unable to enumerate USB device [ 377.260399][ T5960] usb 1-1: device descriptor read/64, error -71 [ 377.576228][ T5960] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 378.126377][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.140295][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.146849][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.206831][ T5960] usb 1-1: device descriptor read/64, error -71 [ 378.297787][ T30] audit: type=1400 audit(1766768318.387:683): avc: denied { create } for pid=13044 comm="syz.3.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 378.422622][ T5960] usb usb1-port1: attempt power cycle [ 378.966234][ T5960] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 378.986707][ T5960] usb 1-1: device descriptor read/8, error -71 [ 379.036258][T10415] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 379.186322][T10415] usb 4-1: Using ep0 maxpacket: 16 [ 379.222406][T10415] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 379.236233][ T5960] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 379.255319][T10415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 379.271920][T13053] netlink: 'syz.2.1331': attribute type 1 has an invalid length. [ 379.281776][T10415] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 379.292456][ T5960] usb 1-1: device descriptor read/8, error -71 [ 379.304526][T10415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.315771][T10415] usb 4-1: Product: syz [ 379.320071][T10415] usb 4-1: Manufacturer: syz [ 379.325501][T10415] usb 4-1: SerialNumber: syz [ 379.332493][T10415] usb 4-1: config 0 descriptor?? [ 379.347761][T10415] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 379.366566][T10415] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 379.406768][ T5960] usb usb1-port1: unable to enumerate USB device [ 379.480473][ T5820] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 379.568270][T13068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1335'. [ 379.577388][T13068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1335'. [ 379.744319][ T30] audit: type=1400 audit(1766768319.827:684): avc: denied { read write } for pid=13044 comm="syz.3.1329" dev="sockfs" ino=29623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 379.746869][T13045] 9p: Bad value for 'wfdno' [ 380.101256][T10415] em28xx 4-1:0.0: unknown em28xx chip ID (47) [ 380.298557][T10415] em28xx 4-1:0.0: Config register raw data: 0x2f [ 380.305250][T10415] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 380.398581][T10415] em28xx 4-1:0.0: No AC97 audio processor [ 380.795613][T10415] usb 4-1: USB disconnect, device number 38 [ 381.077446][T13095] syzkaller0: entered promiscuous mode [ 381.089276][T13095] syzkaller0: entered allmulticast mode [ 381.518449][ T5931] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 381.689956][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 381.711055][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.727912][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.744726][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 381.760437][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.801543][ T5931] usb 2-1: config 0 descriptor?? [ 381.818595][T10415] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 381.820587][ T5931] hub 2-1:0.0: USB hub found [ 382.057401][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.106441][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.169132][ T5931] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 382.881142][ T5931] usbhid 2-1:0.0: can't add hid device: -71 [ 382.899527][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 382.937452][ T5931] usb 2-1: USB disconnect, device number 63 [ 383.380667][T10415] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 383.396801][T10415] usb 4-1: can't read configurations, error -71 [ 383.488361][ T5820] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 383.497968][ T5820] Bluetooth: hci0: Injecting HCI hardware error event [ 383.506608][ T5138] Bluetooth: hci0: hardware error 0x00 [ 383.760837][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 383.769926][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 383.828144][ T30] audit: type=1400 audit(1766768323.907:685): avc: denied { map } for pid=13147 comm="syz.0.1353" path="socket:[30846]" dev="sockfs" ino=30846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 384.896221][ T5933] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 385.059739][ T5933] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 385.085013][ T5933] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 385.091624][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 385.119473][ T5933] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 385.569912][ T5138] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 385.585277][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.604764][ T5933] usb 4-1: Product: syz [ 385.612905][ T5933] usb 4-1: Manufacturer: syz [ 385.623342][ T5933] usb 4-1: SerialNumber: syz [ 385.634689][ T5933] usb 4-1: config 0 descriptor?? [ 385.640742][T13160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.653147][T13160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.698630][T13169] SET target dimension over the limit! [ 385.765379][T13171] syzkaller0: entered promiscuous mode [ 385.780211][T13171] syzkaller0: entered allmulticast mode [ 385.903062][T13160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.911269][T13160] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 386.348440][T13178] xt_cgroup: invalid path, errno=-2 [ 386.839397][ T5933] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 386.853617][ T5933] usb 4-1: USB disconnect, device number 41 [ 387.323426][ T30] audit: type=1400 audit(1766768327.407:686): avc: denied { mount } for pid=13191 comm="syz.2.1366" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 387.676271][ T8624] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 387.856574][ T8624] usb 4-1: Using ep0 maxpacket: 32 [ 387.865095][ T8624] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 387.873842][ T8624] usb 4-1: config 0 has no interface number 0 [ 387.883982][ T8624] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=b3.be [ 388.489995][ T8624] usb 4-1: New USB device strings: Mfr=164, Product=196, SerialNumber=3 [ 388.503354][ T8624] usb 4-1: Product: syz [ 388.512566][ T8624] usb 4-1: Manufacturer: syz [ 388.521607][ T8624] usb 4-1: SerialNumber: syz [ 388.540712][ T8624] usb 4-1: config 0 descriptor?? [ 388.561801][ T8624] smsc95xx v2.0.0 [ 388.681988][T13205] slcan: can't register candev [ 388.750667][ T30] audit: type=1400 audit(1766768328.837:687): avc: denied { getopt } for pid=13208 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 389.508383][T13199] bridge0: entered promiscuous mode [ 389.514129][T13199] macsec3: entered promiscuous mode [ 389.826248][T13230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1375'. [ 390.132900][T13230] Unknown options in mask b7f2 [ 390.269736][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1375'. [ 390.947620][ T5960] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 391.007502][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 391.132686][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 391.170888][ T8624] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 391.197370][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 391.207287][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.228794][ T8624] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 391.238647][ T5960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 391.253224][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.270064][ T5960] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 391.282646][ T8624] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 391.297545][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 391.309045][ T5960] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 391.320601][ T8624] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 391.329565][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 391.346213][ T5960] usb 2-1: Product: syz [ 391.353872][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.363705][ T5960] usb 2-1: Manufacturer: syz [ 391.370033][ T8624] usb 4-1: USB disconnect, device number 42 [ 391.378698][ T5960] usb 2-1: SerialNumber: syz [ 391.387531][ T24] usb 1-1: config 0 descriptor?? [ 391.478150][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f17800: rx timeout, send abort [ 391.505642][T13263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1382'. [ 391.784199][ T5960] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 391.866826][ T5960] visor 2-1:1.0: probe with driver visor failed with error -110 [ 391.916710][ T24] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 391.929883][ T24] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 391.938516][ T24] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 391.955141][ T24] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 391.978246][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a06800: rx timeout, send abort [ 391.987156][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058f17800: abort rx timeout. Force session deactivation [ 391.991091][ T24] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 392.037876][ T24] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 392.198532][ T24] usb 1-1: USB disconnect, device number 66 [ 392.242010][T13272] fido_id[13272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 392.440156][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1388'. [ 392.450454][T13284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1388'. [ 392.459549][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1388'. [ 392.468994][T13284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1388'. [ 392.479289][T13284] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1388'. [ 392.488391][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a06800: abort rx timeout. Force session deactivation [ 393.214820][T13295] netlink: 'syz.2.1389': attribute type 12 has an invalid length. [ 393.378091][T13298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1390'. [ 393.387048][ T6164] usb 2-1: USB disconnect, device number 64 [ 393.397403][T13298] Unknown options in mask b7f2 [ 393.419883][T13301] netlink: 'syz.3.1392': attribute type 1 has an invalid length. [ 393.431594][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 393.612020][ T5138] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 393.620816][ T30] audit: type=1400 audit(1766768333.697:688): avc: denied { lock } for pid=13309 comm="syz.1.1393" path="socket:[31213]" dev="sockfs" ino=31213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 393.675078][T13317] futex_wake_op: syz.3.1397 tries to shift op by -1; fix this program [ 394.018707][T13325] syzkaller0: entered promiscuous mode [ 394.024415][T13325] syzkaller0: entered allmulticast mode [ 394.291084][ T1099] Bluetooth: Error in BCSP hdr checksum [ 394.603151][ T6046] Bluetooth: Error in BCSP hdr checksum [ 395.132407][ T61] Bluetooth: Error in BCSP hdr checksum [ 395.386351][ T1099] Bluetooth: Error in BCSP hdr checksum [ 395.649525][ T1107] Bluetooth: Error in BCSP hdr checksum [ 395.753511][T13353] could not allocate digest TFM handle cryptd(blake2b-160) [ 395.916690][ T61] Bluetooth: Error in BCSP hdr checksum [ 395.968355][ T5138] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 395.980297][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 396.176566][ T4494] Bluetooth: Error in BCSP hdr checksum [ 396.289489][T13337] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 396.464990][ T4494] Bluetooth: Error in BCSP hdr checksum [ 396.512805][T13372] overlayfs: failed to clone lowerpath [ 396.744293][T13374] lo speed is unknown, defaulting to 1000 [ 396.751999][T13374] lo speed is unknown, defaulting to 1000 [ 396.846508][ T6164] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 397.018541][ T6164] usb 2-1: Using ep0 maxpacket: 8 [ 397.040999][ T6164] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 397.054083][ T6164] usb 2-1: config 0 has no interface number 0 [ 397.063045][T13397] __nla_validate_parse: 2 callbacks suppressed [ 397.063060][T13397] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1415'. [ 397.087672][ T6164] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 397.097305][ T6164] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.105371][ T6164] usb 2-1: Product: syz [ 397.132468][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 397.182531][ T6164] usb 2-1: Manufacturer: syz [ 397.193930][T13398] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.222678][ T6164] usb 2-1: SerialNumber: syz [ 397.391679][ T6164] usb 2-1: config 0 descriptor?? [ 397.617559][T13409] syzkaller0: entered promiscuous mode [ 397.626830][T13409] syzkaller0: entered allmulticast mode [ 397.703924][ T6164] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 397.715167][ T6164] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 397.727351][ T6164] uvcvideo 2-1:0.31: Failed to create links for entity 5 [ 397.736559][ T6164] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 398.205291][ T6164] usb 2-1: USB disconnect, device number 65 [ 398.265307][ T5834] udevd[5834]: setting owner of /dev/bus/usb/002/065 to uid=0, gid=0 failed: No such file or directory [ 398.490203][T13422] ip6t_srh: unknown srh match flags 4000 [ 398.853928][ T30] audit: type=1400 audit(1766768338.937:689): avc: denied { create } for pid=13428 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 399.466877][ T8624] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 399.626508][ T8624] usb 4-1: Using ep0 maxpacket: 16 [ 399.641682][ T8624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.664345][ T8624] usb 4-1: New USB device found, idVendor=056a, idProduct=0011, bcdDevice= 0.00 [ 399.688962][ T8624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.716964][ T8624] usb 4-1: config 0 descriptor?? [ 400.068797][ T30] audit: type=1400 audit(1766768340.157:690): avc: denied { append } for pid=13442 comm="syz.1.1426" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 400.098331][T13443] loop6: detected capacity change from 0 to 2640 [ 400.105323][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.114911][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.123465][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.131555][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.139659][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.150794][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.168893][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.187969][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.203547][T13443] ldm_validate_partition_table(): Disk read failed. [ 400.219028][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.236438][T13443] Buffer I/O error on dev loop6, logical block 0, async page read [ 400.257066][T13443] Dev loop6: unable to read RDB block 0 [ 400.300305][T13443] loop6: unable to read partition table [ 400.325602][T13443] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 400.555753][ T30] audit: type=1400 audit(1766768340.637:691): avc: denied { listen } for pid=13442 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 400.931443][T13450] openvswitch: netlink: IP tunnel dst address not specified [ 401.001430][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'. [ 401.099915][T13450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1428'. [ 401.330156][T13462] lo speed is unknown, defaulting to 1000 [ 401.337782][T13462] lo speed is unknown, defaulting to 1000 [ 401.414791][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 402.033328][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 403.034374][ T8624] usbhid 4-1:0.0: can't add hid device: -71 [ 403.043297][ T24] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 403.066523][ T8624] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 403.085136][ T24] usb 1-1: config 0 has no interface number 0 [ 403.101958][ T24] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 403.126543][ T8624] usb 4-1: USB disconnect, device number 43 [ 403.137310][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.145314][ T24] usb 1-1: Product: syz [ 403.164724][ T24] usb 1-1: Manufacturer: syz [ 403.181000][ T24] usb 1-1: SerialNumber: syz [ 403.210340][ T24] usb 1-1: config 0 descriptor?? [ 404.195255][ T24] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 404.268308][ T24] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 404.330876][ T30] audit: type=1400 audit(1766768344.407:692): avc: denied { bind } for pid=13489 comm="syz.2.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 404.387834][ T24] usb 1-1: USB disconnect, device number 67 [ 404.523258][ T30] audit: type=1400 audit(1766768344.607:693): avc: denied { mounton } for pid=13497 comm="syz.2.1442" path="/bus" dev="hugetlbfs" ino=32554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 404.588287][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 404.602079][T13501] xfrm1: entered promiscuous mode [ 404.603828][T13499] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 404.631292][T13499] overlayfs: failed to set xattr on upper [ 404.637172][T13499] overlayfs: ...falling back to redirect_dir=nofollow. [ 404.644384][T13499] overlayfs: ...falling back to index=off. [ 404.650298][T13499] overlayfs: ...falling back to uuid=null. [ 404.656232][T13499] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 404.665030][T13499] overlayfs: maximum fs stacking depth exceeded [ 404.865034][T13501] xfrm1: entered allmulticast mode [ 404.870560][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 404.918237][ T30] audit: type=1400 audit(1766768345.007:694): avc: denied { prog_load } for pid=13507 comm="syz.3.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 405.089470][ T30] audit: type=1400 audit(1766768345.027:695): avc: denied { bpf } for pid=13507 comm="syz.3.1443" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 405.214140][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 405.516861][ T6164] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 405.719123][ T6164] usb 1-1: Using ep0 maxpacket: 8 [ 405.748957][ T6164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 405.777443][ T6164] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 405.791099][ T6164] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 405.800864][ T6164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.809411][ T6164] usb 1-1: Product: syz [ 405.813734][ T6164] usb 1-1: Manufacturer: syz [ 405.819097][ T6164] usb 1-1: SerialNumber: syz [ 405.841402][ T6164] usb 1-1: config 0 descriptor?? [ 406.128639][T13528] netlink: 'syz.4.1448': attribute type 9 has an invalid length. [ 406.173344][T13528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1107 sclass=netlink_route_socket pid=13528 comm=syz.4.1448 [ 406.380976][T13534] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1448'. [ 406.392142][T13528] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1448'. [ 406.868151][ T5953] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 406.921015][ T6164] usb 1-1: USB disconnect, device number 68 [ 407.013869][T13539] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1450'. [ 407.035533][ T30] audit: type=1400 audit(1766768347.117:696): avc: denied { perfmon } for pid=13538 comm="syz.2.1450" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.221075][ T30] audit: type=1400 audit(1766768347.117:698): avc: denied { prog_run } for pid=13538 comm="syz.2.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.250320][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.263686][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.275902][ T5953] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a14, bcdDevice= 0.00 [ 407.350952][ T30] audit: type=1400 audit(1766768347.117:697): avc: denied { map_create } for pid=13542 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.589050][ T30] audit: type=1400 audit(1766768347.147:699): avc: denied { map_read map_write } for pid=13542 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 407.608970][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.709822][ T5953] usb 2-1: config 0 descriptor?? [ 408.078133][T13555] netlink: 'syz.4.1454': attribute type 21 has an invalid length. [ 408.209473][T13558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.218252][T13558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.287883][ T5931] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 408.855101][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.899104][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.937419][ T5931] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 408.963291][ T5931] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 408.980778][ T5931] usb 1-1: Manufacturer: syz [ 408.998555][ T5931] usb 1-1: config 0 descriptor?? [ 409.146070][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1456'. [ 409.947197][ T5953] usbhid 2-1:0.0: can't add hid device: -71 [ 409.963823][T13575] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 409.966423][ T5953] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 410.017667][T13575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 410.032612][ T5953] usb 2-1: USB disconnect, device number 66 [ 410.057970][T13577] overlayfs: failed to clone upperpath [ 410.204864][ T5931] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input20 [ 410.297998][ T5931] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input21 [ 410.331040][ T5931] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input22 [ 410.352593][ T5931] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0012/input/input23 [ 410.380325][ T5931] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 410.391383][ T5953] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 410.550723][ T5953] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 410.589299][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.623136][ T5953] usb 4-1: Product: syz [ 410.633413][ T5953] usb 4-1: Manufacturer: syz [ 410.646993][ T5953] usb 4-1: SerialNumber: syz [ 410.693070][ T5953] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 410.807759][T13605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.825765][ T5931] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 410.843405][T13605] sctp: [Deprecated]: syz.2.1465 (pid 13605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 410.843405][T13605] Use struct sctp_sack_info instead [ 411.121158][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 411.130535][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 411.396198][ T5932] usb 1-1: reset high-speed USB device number 69 using dummy_hcd [ 411.921822][ T5931] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 411.936596][ T30] audit: type=1400 audit(1766768352.017:700): avc: denied { read append } for pid=13619 comm="syz.0.1469" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 411.936803][ T5931] ath9k_htc: Failed to initialize the device [ 412.637358][ T30] audit: type=1400 audit(1766768352.017:701): avc: denied { open } for pid=13619 comm="syz.0.1469" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 412.650114][ T5931] usb 4-1: ath9k_htc: USB layer deinitialized [ 412.794777][T13624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 412.811462][T13624] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 412.827041][ T5960] usb 1-1: USB disconnect, device number 69 [ 412.867544][T13624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 412.893115][T13624] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 412.906169][ T5931] usb 4-1: USB disconnect, device number 44 [ 412.936218][T13624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 412.979996][T13624] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 412.999332][T13624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 413.018252][T13624] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 413.171226][T13633] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1472'. [ 413.286469][ T5931] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 413.571850][T13637] ip6gretap0: entered promiscuous mode [ 413.578417][T13637] vlan0: entered promiscuous mode [ 413.609457][ T30] audit: type=1400 audit(1766768353.587:702): avc: denied { connect } for pid=13634 comm="syz.0.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 413.769777][ T5931] usb 2-1: config 6 has an invalid interface number: 28 but max is 0 [ 413.833650][ T5931] usb 2-1: config 6 has no interface number 0 [ 413.849724][ T5931] usb 2-1: config 6 interface 28 has no altsetting 0 [ 413.881196][ T5931] usb 2-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=44.74 [ 413.899002][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.912779][ T5931] usb 2-1: Product: syz [ 413.917384][ T5931] usb 2-1: Manufacturer: syz [ 413.925901][ T5931] usb 2-1: SerialNumber: syz [ 414.151861][ T5932] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 414.244126][T13648] syzkaller0: entered promiscuous mode [ 414.249715][T13648] syzkaller0: entered allmulticast mode [ 414.307852][ T5932] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 414.316343][ T5932] usb 4-1: config 0 has no interface number 0 [ 414.324242][ T5932] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 414.334523][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.344229][ T5932] usb 4-1: Product: syz [ 414.349009][ T5932] usb 4-1: Manufacturer: syz [ 414.353734][ T5932] usb 4-1: SerialNumber: syz [ 414.366049][ T5932] usb 4-1: config 0 descriptor?? [ 414.581438][ T5932] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 414.604484][ T5932] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 414.622989][T13659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 414.639079][ T5932] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 414.659154][ T5932] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 414.690462][ T5932] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 414.776216][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 414.936196][ T5138] Bluetooth: hci3: command 0x0406 tx timeout [ 415.016301][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 415.022447][ T5138] Bluetooth: hci4: command 0x0405 tx timeout [ 415.242161][ T5931] usb 2-1: USB disconnect, device number 67 [ 415.347956][T13672] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 415.471145][ T30] audit: type=1400 audit(1766768355.557:703): avc: denied { append } for pid=13673 comm="syz.1.1482" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 415.933621][T13653] lo: entered allmulticast mode [ 415.938702][T13653] lo: left allmulticast mode [ 415.943913][T13639] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1474'. [ 415.956197][ T5931] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 415.964158][T13639] tipc: Invalid UDP bearer configuration [ 415.964200][T13639] tipc: Enabling of bearer rejected, failed to enable media [ 416.006509][T13663] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1474'. [ 416.015889][T13663] tipc: Invalid UDP bearer configuration [ 416.015933][T13663] tipc: Enabling of bearer rejected, failed to enable media [ 416.077355][ T5933] usb 4-1: USB disconnect, device number 45 [ 416.087741][ T5933] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 416.097284][ T5931] usb 2-1: device descriptor read/64, error -71 [ 416.105256][ T5933] keyspan 4-1:0.133: device disconnected [ 416.797785][T13684] input: syz1 as /devices/virtual/input/input24 [ 416.847081][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 416.848106][ T5931] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 417.013325][ T5138] Bluetooth: hci3: command 0x0406 tx timeout [ 417.094487][ T5138] Bluetooth: hci4: command 0x0405 tx timeout [ 417.105860][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 417.259189][T13690] geneve2: entered promiscuous mode [ 417.270436][ T30] audit: type=1400 audit(1766768357.357:704): avc: denied { write } for pid=13689 comm="syz.0.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 417.291968][ T5931] usb 2-1: device descriptor read/64, error -71 [ 417.299641][T13692] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 417.307946][T13692] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 417.315183][T13692] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 417.324804][T13692] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 417.332188][T13692] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 417.339866][T13692] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 417.347333][T13692] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 417.406444][ T5931] usb usb2-port1: attempt power cycle [ 417.416029][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 417.592022][T13710] syzkaller0: entered promiscuous mode [ 417.598797][T13710] syzkaller0: entered allmulticast mode [ 417.756255][ T5931] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 417.786782][ T5931] usb 2-1: device descriptor read/8, error -71 [ 418.028599][ T5931] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 418.066785][ T5931] usb 2-1: device descriptor read/8, error -71 [ 418.179675][ T5931] usb usb2-port1: unable to enumerate USB device [ 419.336281][ T5932] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 419.446213][ T5960] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 419.508559][ T5932] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 419.524311][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.628576][ T5932] usb 2-1: config 0 has no interface number 0 [ 419.692848][ T5960] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.791823][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 419.809535][ T5960] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 419.874935][ T30] audit: type=1400 audit(1766768359.957:705): avc: denied { write } for pid=13745 comm="syz.2.1503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 419.895311][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.904722][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.922246][ T5932] usb 2-1: Product: syz [ 419.934879][ T5932] usb 2-1: Manufacturer: syz [ 419.941849][ T5960] usb 1-1: config 0 descriptor?? [ 419.970352][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 419.978733][ T5932] usb 2-1: SerialNumber: syz [ 419.991736][ T30] audit: type=1400 audit(1766768359.987:706): avc: denied { read } for pid=13745 comm="syz.2.1503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 420.026340][ T5932] usb 2-1: config 0 descriptor?? [ 420.043925][ T5932] hub 2-1:0.31: bad descriptor, ignoring hub [ 420.059580][ T5932] hub 2-1:0.31: probe with driver hub failed with error -5 [ 420.081734][ T30] audit: type=1400 audit(1766768360.067:707): avc: denied { write } for pid=13745 comm="syz.2.1503" name="file0" dev="tmpfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 420.110052][ T5932] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 420.134511][ T5932] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 420.147803][ T5932] uvcvideo 2-1:0.31: Failed to create links for entity 6 [ 420.154845][ T5932] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 420.372484][ T5960] pwc: recv_control_msg error -32 req 02 val 2b00 [ 420.519418][ T5932] usb 2-1: USB disconnect, device number 72 [ 420.679694][T13737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.710002][T13737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.755627][ T5960] pwc: recv_control_msg error -71 req 02 val 2c00 [ 420.790375][ T5960] pwc: recv_control_msg error -71 req 04 val 1000 [ 420.811037][ T5960] pwc: recv_control_msg error -71 req 04 val 1300 [ 420.825291][ T5960] pwc: recv_control_msg error -71 req 04 val 1400 [ 420.839885][ T5960] pwc: recv_control_msg error -71 req 02 val 2000 [ 420.855847][ T5960] pwc: recv_control_msg error -71 req 02 val 2100 [ 420.871496][ T5960] pwc: recv_control_msg error -71 req 04 val 1500 [ 420.882479][ T5960] pwc: recv_control_msg error -71 req 02 val 2500 [ 420.892169][ T5960] pwc: recv_control_msg error -71 req 02 val 2400 [ 420.902932][ T5960] pwc: recv_control_msg error -71 req 02 val 2600 [ 420.911204][ T5960] pwc: recv_control_msg error -71 req 02 val 2900 [ 420.919294][ T5960] pwc: recv_control_msg error -71 req 02 val 2800 [ 420.928357][ T5960] pwc: recv_control_msg error -71 req 04 val 1100 [ 420.941135][ T5960] pwc: recv_control_msg error -71 req 04 val 1200 [ 420.951573][ T5960] pwc: Registered as video103. [ 420.958641][ T5960] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 420.982557][ T5960] usb 1-1: USB disconnect, device number 70 [ 421.491735][ T30] audit: type=1400 audit(1766768361.487:708): avc: denied { link } for pid=13770 comm="syz.1.1509" name="#1b" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 422.051879][ T30] audit: type=1400 audit(1766768361.487:709): avc: denied { rename } for pid=13770 comm="syz.1.1509" name="#1c" dev="tmpfs" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 422.332035][T13780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.346754][ T30] audit: type=1400 audit(1766768362.417:710): avc: denied { connect } for pid=13782 comm="syz.4.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 422.367714][T13780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.597785][ T5931] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 422.675116][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 422.684336][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 422.746280][ T5933] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 422.787770][ T5931] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 422.797689][ T5931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.818299][ T5931] usb 2-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 61 [ 422.889127][T13795] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 422.897894][T13795] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.047648][T13795] infiniband !yz!: set active [ 423.052505][T13795] infiniband !yz!: added team_slave_0 [ 423.276653][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 423.338815][ T5933] usb 1-1: config 0 has an invalid interface number: 129 but max is 0 [ 423.347378][ T5933] usb 1-1: config 0 has no interface number 0 [ 423.353584][ T5933] usb 1-1: config 0 interface 129 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.372388][T13795] RDS/IB: !yz!: added [ 423.377061][T13795] smc: adding ib device !yz! with port count 1 [ 423.383384][T13795] smc: ib device !yz! port 1 has no pnetid [ 423.420912][ T5933] usb 1-1: config 0 interface 129 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.431559][ T5933] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 423.441896][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.907899][ T5933] usb 1-1: config 0 descriptor?? [ 423.913673][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.923507][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.933504][ T5931] usb 2-1: Product: syz [ 423.940849][ T5931] usb 2-1: Manufacturer: syz [ 423.945551][ T5931] usb 2-1: SerialNumber: syz [ 423.993868][T13799] netlink: 'syz.4.1516': attribute type 1 has an invalid length. [ 424.024089][T13802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1517'. [ 424.087814][T13799] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1516'. [ 424.116674][T13804] syzkaller0: entered promiscuous mode [ 424.122307][T13804] syzkaller0: entered allmulticast mode [ 424.141228][ T30] audit: type=1400 audit(1766768364.227:711): avc: denied { relabelfrom } for pid=13803 comm="syz.3.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 424.177835][ T30] audit: type=1400 audit(1766768364.247:712): avc: denied { relabelto } for pid=13803 comm="syz.3.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 424.225126][ T5931] usb 2-1: USB disconnect, device number 73 [ 424.233545][T13807] netlink: 406 bytes leftover after parsing attributes in process `syz.4.1519'. [ 424.280528][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.363892][T13810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.391483][T13810] team0: Port device batadv0 added [ 424.747779][T13813] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1520'. [ 424.782008][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 425.304206][ T5933] usbhid 1-1:0.129: can't add hid device: -71 [ 425.310607][ T5933] usbhid 1-1:0.129: probe with driver usbhid failed with error -71 [ 425.324508][ T5933] usb 1-1: USB disconnect, device number 71 [ 425.605982][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 425.947545][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1521'. [ 427.491282][T13856] overlayfs: failed to clone upperpath [ 427.562830][T13856] tipc: Can't bind to reserved service type 0 [ 427.925773][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 428.011957][T13864] ptrace attach of "./syz-executor exec"[5812] was attempted by "./syz-executor exec"[13864] [ 428.646234][T10415] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 428.742882][T13878] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1535'. [ 428.856246][T10415] usb 1-1: Using ep0 maxpacket: 16 [ 428.874524][T10415] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 428.921228][T10415] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 428.968723][T10415] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 429.002485][T10415] usb 1-1: config 0 interface 0 has no altsetting 0 [ 429.039998][T10415] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 429.143257][T10415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.181893][T10415] usb 1-1: Product: syz [ 429.214708][T10415] usb 1-1: Manufacturer: syz [ 429.230544][T10415] usb 1-1: SerialNumber: syz [ 429.257829][T10415] usb 1-1: config 0 descriptor?? [ 429.817134][T10415] usb 1-1: Can not set alternate setting to 1, error: -71 [ 429.842100][T10415] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -71 [ 429.893233][T10415] usb 1-1: USB disconnect, device number 72 [ 535.716086][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 535.723049][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P296/1:b..l [ 535.731436][ C1] rcu: (detected by 1, t=10502 jiffies, g=46637, q=481 ncpus=2) [ 535.739143][ C1] task:kworker/u8:6 state:R running task stack:23544 pid:296 tgid:296 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 535.753316][ C1] Workqueue: kvfree_rcu_reclaim kfree_rcu_monitor [ 535.759757][ C1] Call Trace: [ 535.763028][ C1] [ 535.765950][ C1] ? __schedule+0x10b9/0x6150 [ 535.770708][ C1] __schedule+0x1139/0x6150 [ 535.775221][ C1] ? __pfx___schedule+0x10/0x10 [ 535.780070][ C1] ? mark_held_locks+0x49/0x80 [ 535.784834][ C1] preempt_schedule_irq+0x51/0x90 [ 535.789855][ C1] irqentry_exit+0x1d8/0x8c0 [ 535.794448][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 535.800422][ C1] RIP: 0010:unwind_next_frame+0xb59/0x20b0 [ 535.806230][ C1] Code: 3d 75 30 00 e9 c0 f7 ff ff e8 53 ff bb 00 e9 f4 f4 ff ff 4c 89 f7 e8 e6 fe bb 00 e9 19 f6 ff ff e8 0c ff bb 00 e9 d6 f5 ff ff <49> 8d 76 f8 ba 08 00 00 00 4d 8d 7d 34 4c 89 ef 4c 89 44 24 28 48 [ 535.825837][ C1] RSP: 0018:ffffc90003157630 EFLAGS: 00000246 [ 535.831901][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff912fbd62 [ 535.839866][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 535.847832][ C1] RBP: ffffc900031576e8 R08: ffffffff912fbd66 R09: 000000001a54d674 [ 535.855797][ C1] R10: 0000000000000002 R11: 000000000001288a R12: ffffc900031576f0 [ 535.863763][ C1] R13: ffffc900031576a0 R14: ffffc90003157a00 R15: ffffc900031579f0 [ 535.871751][ C1] ? kasan_save_track+0x14/0x30 [ 535.876605][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 535.882754][ C1] arch_stack_walk+0x94/0x100 [ 535.887517][ C1] ? kasan_save_track+0x14/0x30 [ 535.892374][ C1] stack_trace_save+0x8e/0xc0 [ 535.897062][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 535.902429][ C1] ? __lock_acquire+0x436/0x2890 [ 535.907366][ C1] kasan_save_stack+0x33/0x60 [ 535.912035][ C1] ? kasan_save_stack+0x33/0x60 [ 535.916880][ C1] ? kasan_save_track+0x14/0x30 [ 535.921855][ C1] kasan_save_track+0x14/0x30 [ 535.926532][ C1] kasan_save_free_info+0x3b/0x60 [ 535.931571][ C1] __kasan_slab_free+0x5f/0x80 [ 535.936332][ C1] kmem_cache_free_bulk+0x2bf/0x680 [ 535.941529][ C1] ? kvfree_rcu_bulk+0x1b7/0x1e0 [ 535.946489][ C1] kvfree_rcu_bulk+0x1b7/0x1e0 [ 535.951259][ C1] kfree_rcu_monitor+0x1d0/0x2f0 [ 535.956207][ C1] ? rcu_is_watching+0x12/0xc0 [ 535.960975][ C1] process_one_work+0x9ba/0x1b20 [ 535.965963][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 535.972732][ C1] ? __pfx_process_one_work+0x10/0x10 [ 535.978115][ C1] ? assign_work+0x1a0/0x250 [ 535.982797][ C1] worker_thread+0x6c8/0xf10 [ 535.987394][ C1] ? __kthread_parkme+0x19e/0x250 [ 535.992422][ C1] ? __pfx_worker_thread+0x10/0x10 [ 535.997537][ C1] kthread+0x3c5/0x780 [ 536.001610][ C1] ? __pfx_kthread+0x10/0x10 [ 536.006197][ C1] ? rcu_is_watching+0x12/0xc0 [ 536.010955][ C1] ? __pfx_kthread+0x10/0x10 [ 536.015568][ C1] ret_from_fork+0x983/0xb10 [ 536.020185][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 536.025312][ C1] ? __switch_to+0x7af/0x10d0 [ 536.029998][ C1] ? __pfx_kthread+0x10/0x10 [ 536.034583][ C1] ret_from_fork_asm+0x1a/0x30 [ 536.039360][ C1] [ 536.042399][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g46637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 536.054724][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=24212 [ 536.062607][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g46637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 536.073983][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 536.083951][ C1] rcu: RCU grace-period kthread stack dump: [ 536.089842][ C1] task:rcu_preempt state:I stack:28440 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 536.101795][ C1] Call Trace: [ 536.105078][ C1] [ 536.108004][ C1] ? __schedule+0x10b9/0x6150 [ 536.112678][ C1] __schedule+0x1139/0x6150 [ 536.117173][ C1] ? __lock_acquire+0x436/0x2890 [ 536.122110][ C1] ? __mod_timer+0x8f2/0xd30 [ 536.126705][ C1] ? __pfx___schedule+0x10/0x10 [ 536.131562][ C1] ? find_held_lock+0x2b/0x80 [ 536.136241][ C1] ? schedule+0x2d7/0x3a0 [ 536.140570][ C1] schedule+0xe7/0x3a0 [ 536.144653][ C1] schedule_timeout+0x123/0x290 [ 536.149502][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 536.154865][ C1] ? __pfx_process_timeout+0x10/0x10 [ 536.160154][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 536.165959][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 536.171422][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 536.176185][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 536.181469][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 536.186406][ C1] ? rcu_is_watching+0x12/0xc0 [ 536.191165][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 536.196970][ C1] rcu_gp_kthread+0x26d/0x380 [ 536.201646][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 536.206840][ C1] ? rcu_is_watching+0x12/0xc0 [ 536.211606][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 536.216802][ C1] ? __kthread_parkme+0x19e/0x250 [ 536.221823][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 536.227108][ C1] kthread+0x3c5/0x780 [ 536.231175][ C1] ? __pfx_kthread+0x10/0x10 [ 536.235767][ C1] ? rcu_is_watching+0x12/0xc0 [ 536.240525][ C1] ? __pfx_kthread+0x10/0x10 [ 536.245200][ C1] ret_from_fork+0x983/0xb10 [ 536.249792][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 536.254909][ C1] ? __switch_to+0x7af/0x10d0 [ 536.259582][ C1] ? __pfx_kthread+0x10/0x10 [ 536.264174][ C1] ret_from_fork_asm+0x1a/0x30 [ 536.268952][ C1] [ 536.271965][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 536.278274][ C1] Sending NMI from CPU 1 to CPUs 0: [ 536.283483][ C0] NMI backtrace for cpu 0 [ 536.283498][ C0] CPU: 0 UID: 0 PID: 13911 Comm: syz.2.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.283519][ C0] Tainted: [L]=SOFTLOCKUP [ 536.283524][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 536.283533][ C0] RIP: 0010:preempt_count_sub+0x0/0x160 [ 536.283549][ C0] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 c7 c7 60 5c b9 93 e9 a0 ee 6b 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c0 80 32 c2 9a 53 89 fb 48 ba 00 00 00 00 00 fc [ 536.283563][ C0] RSP: 0018:ffffc90000007d30 EFLAGS: 00000046 [ 536.283575][ C0] RAX: 0000000000000046 RBX: ffffffff9ae77b48 RCX: ffffffff819a47b3 [ 536.283584][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 536.283593][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff35cef69 [ 536.283601][ C0] R10: ffffffff9ae77b4b R11: ffff8880285454b0 R12: 0000000000000001 [ 536.283610][ C0] R13: dffffc0000000000 R14: ffff888054efc300 R15: 1ffff92000000fac [ 536.283619][ C0] FS: 00007fc835f926c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 536.283633][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.283643][ C0] CR2: 000020000033f030 CR3: 000000004a85c000 CR4: 00000000003526f0 [ 536.283652][ C0] Call Trace: [ 536.283658][ C0] [ 536.283663][ C0] _raw_spin_unlock_irqrestore+0x3b/0x80 [ 536.283682][ C0] debug_object_deactivate+0x1ec/0x3a0 [ 536.283701][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 536.283717][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 536.283735][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 536.283757][ C0] __hrtimer_run_queues+0x46f/0xc40 [ 536.283781][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 536.283801][ C0] ? read_tsc+0x9/0x20 [ 536.283823][ C0] hrtimer_interrupt+0x397/0x8e0 [ 536.283841][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 536.283860][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 536.283879][ C0] [ 536.283883][ C0] [ 536.283888][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.283904][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 536.283921][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 0d 1f f6 48 89 df e8 7e 60 1f f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 63 0f f6 65 8b 05 2e c9 37 08 85 c0 74 16 5b [ 536.283934][ C0] RSP: 0018:ffffc9001b8e7760 EFLAGS: 00000246 [ 536.283945][ C0] RAX: 0000000000000002 RBX: ffff888069a75880 RCX: 0000000000000006 [ 536.283953][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 536.283963][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 536.283971][ C0] R10: ffffffff9088b4d7 R11: ffff8880285454b0 R12: ffff88801eb87640 [ 536.283980][ C0] R13: 0000000000000246 R14: ffff888069a75868 R15: ffffc9001b8e78e8 [ 536.283996][ C0] __skb_try_recv_datagram+0x172/0x4f0 [ 536.284020][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 536.284039][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 536.284062][ C0] __unix_dgram_recvmsg+0x1bc/0xc30 [ 536.284088][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 536.284110][ C0] ? __schedule+0x3bbb/0x6150 [ 536.284129][ C0] ? iovec_from_user+0xbb/0x140 [ 536.284150][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 536.284171][ C0] ____sys_recvmsg+0x5f9/0x6b0 [ 536.284190][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 536.284210][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 536.284226][ C0] ? rcu_is_watching+0x12/0xc0 [ 536.284241][ C0] ___sys_recvmsg+0x114/0x1a0 [ 536.284255][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 536.284274][ C0] ? __pfx___might_resched+0x10/0x10 [ 536.284289][ C0] do_recvmmsg+0x2fe/0x750 [ 536.284304][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 536.284325][ C0] ? find_held_lock+0x2b/0x80 [ 536.284346][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 536.284367][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 536.284385][ C0] do_syscall_64+0xcd/0xf80 [ 536.284403][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.284417][ C0] RIP: 0033:0x7fc83518f749 [ 536.284430][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.284442][ C0] RSP: 002b:00007fc835f92038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 536.284455][ C0] RAX: ffffffffffffffda RBX: 00007fc8353e6090 RCX: 00007fc83518f749 [ 536.284464][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 536.284472][ C0] RBP: 00007fc835213f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.284480][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 536.284488][ C0] R13: 00007fc8353e6128 R14: 00007fc8353e6090 R15: 00007ffc37f45878 [ 536.284502][ C0]