last executing test programs: 45.39535262s ago: executing program 0 (id=1927): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000180)={0xe, {0x5, 0x2, 0x80000001, 0x87f0}}) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4c494e45330a535045414b455220274d617374657220506c61796261636b20566f6c756d65272030303030303030303030303030303030303030300a4c494e453120274d6963272030303030303030303041b23030303030303030300a434420274c696e652043616cca4239707475726520537769746368272030303030303030303030303030303030303030300a4d4943202753796e7468200c007074757265272030303030303030303030303030303030303030300a4449474954414c330a4449c74954"], 0xc6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0xffffffd7, &(0x7f0000000240)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={r7, 0x101, 0xfffffffb}, 0x10) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, r0, 0x0) 44.718127615s ago: executing program 0 (id=1931): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r6, 0x0, r5, 0x0, 0x1000, 0x0) write$binfmt_misc(r7, &(0x7f00000000c0), 0xfdef) splice(r4, 0x0, r7, 0x0, 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, r8}}, 0x30) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@host}) 42.804203379s ago: executing program 0 (id=1936): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r6, 0xc0285443, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001000)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x7}]}, {0x4}]}]}}]}, 0xa0}}, 0x0) 41.48739603s ago: executing program 0 (id=1939): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 39.993033839s ago: executing program 1 (id=1943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000015b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x9, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb", 0x1f, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x94}}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYRES16=r3], 0x6c}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f0000000800)}, {0x0}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) r7 = openat$uinput(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = openat$snapshot(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) flock(0xffffffffffffffff, 0x3) ioctl$SNAPSHOT_FREE(r8, 0x3305) ioctl$UI_GET_VERSION(r7, 0x405c5503, &(0x7f0000000780)) 38.775302818s ago: executing program 1 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b080000090503dec8002a00000905", @ANYRES8], 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3, &(0x7f0000000180)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x1, &(0x7f0000000080)) write$UHID_CREATE2(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb0000000100008040000000e5940000e771000053c9f78ebab2cfae131e3c6dffcb02d8341e0c28015258cec0af115e29bc5fb89f89be546aaffaf5353c2302b89dacd22ab6a3e0a85104320b378286321aa0468d1cbe0ceb9655a566648be42b6ebfec9fa2dc8678ad82d5f9f1367931a95e9eb1b53a20e3f68f10accdd1f0739d4c70bc05a60e4c2e155fc61de90800000000000000e914d69756ef081d778382f277e0c46ff08bd4ea248d864eef625136f3fcf50d32631222e798dba1c7ced0cf9de71755347141d014411ef7dd6153084ff8e856d3699ffe2e4491d035bda3b422ee67f79c4321d911aa716309cee370a7f77f60211b77883e90a3fe"], 0x203) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x54, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010105}]}]}, 0x54}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) 38.059187947s ago: executing program 0 (id=1949): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x1000000}]}, 0x3c}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0xa, 0x4}, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}}], 0x1, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 36.642141367s ago: executing program 1 (id=1950): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x44800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000001440)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000000ffff000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xba, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) syz_open_dev$loop(&(0x7f00000001c0), 0x4000000000, 0x94b382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eN\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000008000100090c100000000000224e0000", 0x58}], 0x1) 34.424198922s ago: executing program 1 (id=1955): mkdirat(0xffffffffffffffff, 0x0, 0x148) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c001880080001400000000008000240000000000800834000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}}, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) dup(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vbi#\x00'}}, {@audit}, {@euid_lt}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x65, 0x30, 0x63, 0x61, 0x31, 0x64, 0x66], 0x2d, [0x66, 0x66, 0x7, 0x66], 0x2d, [0x62, 0x63, 0x38, 0x39], 0x2d, [0x36, 0x34, 0x66], 0x2d, [0x36, 0x66, 0x5f, 0x62, 0x66, 0x63, 0x9, 0x31]}}}, {@fowner_lt={'fowner<', 0xee01}}]}) sync() capset(&(0x7f0000000000)={0x19980330}, 0x0) 30.055063664s ago: executing program 0 (id=1961): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c200820", @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x408102, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 15.565360626s ago: executing program 32 (id=1955): mkdirat(0xffffffffffffffff, 0x0, 0x148) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000000101040000000000000000020000001c001880080001400000000008000240000000000800834000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}}, 0x0) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) dup(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vbi#\x00'}}, {@audit}, {@euid_lt}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x65, 0x30, 0x63, 0x61, 0x31, 0x64, 0x66], 0x2d, [0x66, 0x66, 0x7, 0x66], 0x2d, [0x62, 0x63, 0x38, 0x39], 0x2d, [0x36, 0x34, 0x66], 0x2d, [0x36, 0x66, 0x5f, 0x62, 0x66, 0x63, 0x9, 0x31]}}}, {@fowner_lt={'fowner<', 0xee01}}]}) sync() capset(&(0x7f0000000000)={0x19980330}, 0x0) 15.445900903s ago: executing program 4 (id=1969): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000006540), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000006580), &(0x7f00000065c0)='./file0\x00', 0x8, 0x3) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001580)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000006500)={0x3, 0x10001, 0x9c, 0x47b9289b0fe0dafc}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb01f213"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmmsg(r2, &(0x7f0000006300)=[{{&(0x7f0000000080)=@caif=@rfm={0x25, 0x96, "0be13b2503c51520533f82cf20ccfd92"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="0818c82778423a294aa9ced076c2e8bc8fc8e43f270dcf7c1030aeb135c571013f0c20ab01eaebeaab9e828d1c5a6e322a608ce9871cb71fd8455dd4355eaea990f7f11ec8eed22a1438f741ad2d2c10982df65f31b7dab7437662db4971f19fe67037d40e687fbfc64ecbeeab516ed4e1c31012f93abb4f9b7a83d70b83c31ff0aab238a40d594b2910f6c40d0fe835f553d9d9829111c4e818bad6612ca2ff90a7075846763316d1e1d40b85404efd03e31b4e1e2c7fa274b9c7bd8e5188191346f4912ae3350fdd44e9ef2f766d314c00d8b0e7fe49c1b4e7434292", 0xdd}, {&(0x7f0000001340)="7f842ce20f835d02d3ed901f76a6c95ada84f3efde93526c3190804f4f94a8d5fb45408f9ded9fcb697782ab2965037214d563957c6d22879db9f8c4f67b37f24c0b91a0cd21fc256a230a728c7d8cdff9b7b586002c8d3c4e9d89a8c2ed89732d960852c8732f3e42103e073ad7f8458a86da908780c9566ce020f9f70e74eb94c061b6972f2537c107603ef2bacbc0204504e8f4df12757c882df958bbb74482a202fab100cbb6de8b16fc21caa5f1f02bf37274d23941ca886067f46eaaf84bade0408be4283c71ef2bba2fb2b9f580a57f83c317e2b251a0d97a38bc925bf58f9f24acb4cba26202c474bc324f8185f7", 0xf2}, {&(0x7f0000000100)="5f22c5246d71bba854c5e0db5310cd9bb0e9cbf42cb43d4412e0fed65723f7b20efa8db8fd8930216528a6877584815ac94896c489e9f986af47", 0x3a}], 0x4, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001440)="323bbb1ef5abbdb1d5f8eb3e0cab1c43d474fd531f40e5febf5f1e791476d04d579882455840650b", 0x28}, {&(0x7f0000001480)="fcf099ccd25c04a8d45a23bc59a8f4ca9cbda4197b762006da5d5db5015d53ad52d2c1aa13003bb096bbe0cb04b479ff89c367ac35686fb8950464bb0acd40f005d2e0", 0x43}], 0x2}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001540)="c6eee1a40e8b8917691fa3fb3c604c5ad07336e9e249bb6046fd4e7ac2ca0d94207f4325410d11f7659b6bb2d3ca752b2151a065b77a8dec42d6a8011c8e85cca691731e05a2995e6804661de6dad0f8805240", 0x53}, {&(0x7f00000015c0)="b81b93ab4bd51b317eca9089ba34b42d935fad75d1e4ae03166ae61271a5ddaf6a6de625cb6e8c090e716f622c89a2", 0x2f}, {&(0x7f0000001600)="da6bbc4f8b47784b0fc85a551799c730cfecaa6c1b2aea9463dd0ab1ada8d23c556dd02a18b7901169336482ec412dfc7278a43ae7b8f9ec229b40908bca228f4305fe63dc53f86903f8b89fe983678a5c6f82f3f9cb304060cfc9d7c0e82ac0f44947cdf9ffa612f2d31710451acdaac08d165872e144139043b5c282c7f1325f1c185c9da7d836dd3a1b77ac6154fd46a862b43a439a245315febcc372d13c2a9d6a2e9abbc11b090c140387f7", 0xae}, {&(0x7f00000016c0)="9c5c721211bc2ff7e172e569a06e6dffb752302e15e74183ea131521", 0x1c}], 0x4, &(0x7f0000001740)=[{0x80, 0x29, 0xa, "1eaaa38b55d575d4368226ed7588d56814f4b87787e9e6c00f6833c823db9217256073814f98766b480741cb03cb58bb29c670577a7dcebf140004ab9a904e526926d32652951017ddd7d23f5a43b85dc27b4483252161fddf56fba2f26709bba6e3f43cf7ff30a2c417d9"}], 0x80}}, {{&(0x7f00000017c0)=@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0x6}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001840)="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", 0xfe}, {&(0x7f0000001940)="66345a0267ee3000f1bde8", 0xb}, {&(0x7f0000001980)="b808c4526a943b4a42ad6237745b5e881a5b737fb95cbba1bb2049cb67d4a45c21b82b66", 0x24}, {&(0x7f00000019c0)="fb90fd955570fcdc04f4abd6cd93a9", 0xf}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="391fb42e3471b900319c21f1a125d4bd83148bc8201f8304fdc9d88d1c60a35de073e2d478b7f4de3b5546d3c9892b67898306e9e0ebf73184abf0ed0fc27b9c810eeacdec10e46dfc0de1b07cfb5ed272590df38216c17afbb33f36dbd3cb6ba6e454feadc5eb5b55c39bd9995067a21c1f76422ab5949c8a", 0x79}, {&(0x7f0000002a80)="0768ab0592d8fec5c4f6ef4412697f9f4466b48e75ab614da8ee3573e14e05ca5d02dc23c076fbd5154a55640281702148bd7e694da5e025057a180da48dbbc2e50eea4634488cd8c83dd6429de9a7a6b85cfc798fcad80f76724bafb00ef66189ecb214a0632c8141f1be58238506817948acf4b6e8cebe854e7db2449fba492a8a48aae41033c81314687fc9f6bcab4565159f89c95441", 0x98}], 0x7, &(0x7f0000002bc0)=[{0x1010, 0x115, 0x0, "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"}, {0x40, 0x0, 0x1000, "0dbf172447ea6cacc09b799914595bdb342e99cc632a3db1148e67084717196ac51e1f790eab4825ee77"}, {0xe8, 0x107, 0x7, "e7d91e4ec9c1295583a6795aa57c1012afbb53fa4c08ee13d4cffa5668a37c000463f3bfb737e8d4496efd5b9e31bb372604698b3851f579aa597ef3fba002dcd684dca45112a052b7012c486b332ec912b814e15c6069bd6f16db1a9073ca63cb99d62872e85d6e478da70ae9e0af2df87105c163b99df7ef888f759b5ef835429ef3375347ea842834c5581c69a7eef98715afd135de9d5e18c3bdbc1b4fbfaed4c2bd7685b204cf1a822096674dcb8ebfe3b6fccc2e1955cece28074e1a0d29e7e95ddf8a45bf4fc24d2eb027edcdf2e4"}, {0xa8, 0x29, 0xb2, "95f484440769544a0594a2dbb915451ca8ead69996c46e5cbcc1c2e3c577dcb7b147b3623f84ad8761f3801ebd85af78ba78293f2ba10757c3ad0476da7af628b95425ab0e20024fd855b0d0796e6b4864b89ac8e251499dd64eb18b5e5f4388c5c00cba9e06a16b12c9d2ceaed30f19d21c35ee9f03dd148e4bba0cbaeeaf567543caa031ab42e13ebc976416115de9dcba"}, {0x80, 0x108, 0x1000, "15c5a8d313fbdf8ebfd32be013ea1a933086e7c794aad425840c108198d9a553097ab9e536c022e5be04176dab9776c9f92c8e1df510579dac15a7e0e115c278f04efb23827b43ebb6ef9d7d908af233d79ebe0563ed9433ee322e886b94b6ccb0e7197c7c6508369c"}], 0x1260}}, {{&(0x7f0000003e40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003ec0)="f3c1603abc", 0x5}], 0x1, &(0x7f0000003f40)=[{0x90, 0x118, 0x80, "1fc58fd164bf09299bc331970fb9c38489b24751a4e35fb08aace2fd23be8aa0923524edbbc48dfec1e0946515c125a8355babb489df6946d2968616cd2830eb9960b74013cfabd86defd1eaae83a403ad7dcc5490d46c2243e2ecb9f6543c69c4076911f233675f6ac06825fe1d9a7db431f5128c91ba7eb5dae9e01e"}, {0x10, 0x102, 0x1000}, {0x48, 0x3b, 0x7, "3362be4c714e2638255ec882c42210873743cb9e4aa27f4528c1878487b1063cc48f59b6cb39c9860a83ee6e8920ab599f7bf3"}, {0x30, 0x117, 0x2, "008d91d0d401a35624e87bd8b756bc31ecd23657d613039215d96c7a142bd7"}, {0x90, 0x1, 0x3, "d7bf6fd786fb085d08c1c07144121743624a4ddfe4a033e81178b5d05b7ff817a30fce729613f21210d7777ad5e10e2b55b1f3194e03bc6e729157d418aa1c2b79f33bf04d8f43f4af627b805cb063ed9f4855227923d946888f1e36844dee08518a0f704d724d591c9bfe5b15f921f543c187b56e87ccae5d8823158ed1"}, {0x10, 0x117, 0x1}, {0x50, 0x107, 0x373, "77168b12cb6091098876832883f17e1fa3e865ec2e065098acec742c3ac67119d53db2d166fc7b0d6bcff6e46184e558eb9a980ff0187e5e7b5fe2ed8128"}, {0x88, 0x104, 0xfff, "15fc7acf35fa7621b33113789869ab787ca9f48b5a4f306284f64cef3d0cd42677d4dd83e8c0c34d62d2d788df528431532bec6750b99bbd814e56bce4f3bf5502f951e7cb6f6f9266bfaf36bb3448132c05d53d57de2bc9bfc2f7f1f3f63ae944c7cc7eb2ee6af19be110565dc8d90a56e84da9"}], 0x290}}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000004200)="5417cdb4ea15e10c64d72786392d03e24bc1b6453e11729204d1611530d2fde4c97dfb7fd383c18878e575703215ca6f3d1c892a50f6b574f9784110844c4bd2bc4e3060acd9ecac8bb565fe0d22eef9019c4b408d2d7931a64f460ff4100aa9cf1bbf46ece955", 0x67}, {&(0x7f0000004280)="d8634d3c9d1d92cf22792b064dab16569772e9a6194deadaf99d205dc02f890e130ae030548d076ed04a0b758bf5b1c7a56f8c5436e7647637e4daf99eb4ce5353dc1452730c2d8fbadc5776a5bdfd9e0a6c4775549f9766e2961dbefada356f55be42bb69daedd2b0787afcfca64e3874d28f6f20f89084375f8b6dfba7de8d94130f179cf519cd04f78850c3b042e1aa8988439b95a36dca377e58e11657242f187e", 0xa3}, {&(0x7f0000004340)="28c65be0cc2d772c5a43bbc7ba213e7b981c1c363e55b481617668740842e2d55c4352dc8dfed8727b9234782da0875cc7123533477b70a9b0e9c5d05378fcae4d3cabe0c49a783402ad2f88d754aa7e183721982f957f0441179db95d4e2c", 0x5f}, {&(0x7f00000043c0)="30b967e22c16c0e912602ffb992540a75ef38769a31a389cfb7a77eacce1677d5da29e3488be53734c8b", 0x2a}, {&(0x7f0000004400)="20ee987859c18f9e0ee630e64858f24065edb40ee4d04f26d87b3f6c281ac724d909a99d26ab4d5b0641e3f7f507e08444b815c55ef600ab7b028823b7d135f1dbdb", 0x42}, {&(0x7f0000004480)="ec8ff976768332ebf443a1337028ede3d70816f03338ddc576940ee9e456dad91d0024a1342aa16dd7eb16731e83bf4f68d283cd7da8decad6ff375f1c0cb91b36ce27c91426b32b5a21e0eeb1535165496b5b89bfb855933ec704dac6503a8dc6d2c6a5f12e819f69c88297b324da0f3d9e63bd52cd5f50d1f1e051c61bf195f6a6a6dd0c293468b6da37f640cf7d5fa9a22883d5a22dcd8c5a32f623a2a9", 0x9f}, {&(0x7f0000004540)="6aa5fc355a4575fa6bd642cad1afea3ddd9c9279ad80c7c3bc892f98dd0a7c8ae01374b8715aad0f", 0x28}, {&(0x7f0000004580)="39d905863bc0445e2d3fdb59639b0f80adfbfbcd26885a7c53a2b964b7e4b6a92b22c82df9f8715cd855e19c202e6e1fb2b3e5bbb62f348a169303e726c3f849acaa6c157884ab3d1cf3bf3f2a2a06aaa80cc8dd75bce4438615f117e9a03c799f33314fc2bd22403e97e9e22b8aadda011add0e62acb83dd36721863fd92431cc8534183275750188f9439b7a197073e9b2ddd245133a1754cc65abdbbc1ea8cb47c3dd8a8308879bb709e3055e26057d5c59671fb4bbe282e5dd39d9", 0xbd}, {&(0x7f0000004640)="21fcbdc26ed20121c7f0ee89f555cf135c05bcb55d2489", 0x17}, {&(0x7f0000004680)="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", 0x1000}], 0xa, &(0x7f0000005740)=[{0x98, 0x88, 0x7, "97312645207f07886204f08f49095f8b2de061f4052501111b8d12a044b947d8c0596cfff0f83fabd2ae7239ef59bc0ab2abfc1a7847df6028781f21a297f446ef3fe4a6e50e17217b948c6d92ee3f9448c2fc96af12695e9bfc13a2a95fb8ab3eae058e8262177528909a715d2ac94db0b337c6850cc17f07aab999d7263de8041d058758b8"}, {0xa8, 0x112, 0xd, "ef0769182cdc799c68e639b17c2cab34aa958f777e3bc50e959089a34d6219a97545416a47ca2087d3f55323f968bac4edfe8b6ee9aedf8bffe0161b3361c75ecac731e3bcd1b5a3f3085e80bd981f75874ab45ed5023b1e1fe5566cae08da82eb047d2a40fde45e5e64d27a063fb7dd773ac77a4d2be2e07d74b5f8ea2c38a9cf254510d66310abc1867948796d3840ff18"}, {0x108, 0xff, 0x9, "7fed11681e99af62cfb4e3c58a734ce41d183118d50c3f57ce69f1cb7b5376a4f43c3d044c3a5a4397e9d4dce8c6b4cbc790e380c61c72ebf9973d7cf1305a4a7c62715e4b3809d49646bf1cdb6fbfefdaaa446c705c3f4178e1190408adb160368dcdd84e93326b6bf8459be1c2c76dbbb5575602b95120d08865f102a267ff250757d346e72bcc0800b00967c7a475e62c6e0c103a7e2ff8619c84ccbaad2440281e5affe62c974d34c901aacb4a13493b3687b54971fd36c134fd98a272ab2132b86f1c133620e2819a7e7eb2a534d66b3ec64f52de38823d9a4b586164d46f6589561261f07d89e5d956b1815864f9c4d806a328"}, {0xf0, 0xb7, 0x8, "3bcdb20313913873e1ea19d443e8d32b8b6e644a6cba61cbfaeec56b32cf1356f4714574cc4273fd14244f1c35eaa1233cbbdd5d3b30488068f53256cac87bfa8d564186e9a31ea1a1593926aa44a6a725ccb27f33a2498ce78cd10974b10601037754edb2cbbb7f6c857993ac0220aa63b65d62c94a424231904a7bc4f16ec296dfa5d395473fae000b551ea4e1eb0c454524e1579e2420cbfde9be63ff2f27b7cd268f1f629ddaaf5e9de3d254eed8cc676305ab8ab55ca78f2f0e0855f396f014b40c91bd2603a3c56e41ac855e3c2a2a77559ecfd92c6870d936c7"}, {0x70, 0x119, 0x1ff, "1e337de3f8fecefc3e6b07aedae8fd8709516df4a686f173336e60490e4c976bff6a6a84f0258f941944edca8dde6356c2678e8a3bd20063353e8a907d90c5dca5b04ce57b48808f35705dd1566e2fc438b6f12e2b698e35a5da77"}, {0xc0, 0x109, 0x7, "e6942ca52c4dc6407288926cd58d9c4f39e3e42a19ecda773a3361c37598bd3f7896e5843d715f9dc452bce876aaeef77f821cc201956b9ee089014d6bba3bb4cc190603500212d6bf20c8041402cf051778da1e94b813c30a1c6566dfab85d0bae57f0ed0dfe04032253fa061404bd279f62fa0ad4b307793b50db1f7f6b37d3b1f04fd24ee8ac0b5879f279129eed0c5875b852a5d81361d0df56a1ba481dbe6c6fc48d7ec3fd242652359b6d5f0"}, {0xa8, 0x108, 0xffff, "05870313287df1303983c13f82918a32b757ccce59608b18eb2ba5dd4817c43dad74e9e6ef3497d86ad96771ae230c04512a298d1b5711644c2feb70cca258604dd5f0c917c41a129072be83a625a00969e0f6c5f18c2161dea93fdefeb45472ac4018756f7ac452497586a63b423422262fa767d0966c072bf909b4d29bd9770c05ab948f1abc3ef91f3dc5b41e497f33a43583b6af59"}], 0x510}}, {{&(0x7f0000005c80)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005d00)="ac3d458d9dc85a5d50f2a93770535c8cd2be5cd3fc82aa9cbf9eabb9340e426b7cddac8c02769573bac445572dbce82140d2ffaad0ba35c96fb593f445360adadd0bcd806682fca556e80bde287fa3b1029e9422d7f64edcacf2c4c13c892adf67e798ea700509f22b64f9c7148f5906be6d06e54514", 0x76}, {&(0x7f0000005d80)="354fa0f803512d968ab58f40ca75b6747f3516e43b8571b5f5b97b37ae74159c7e2a38cf0d218cea544fd053ddc658ca2962b1baca974f09384d81f1bbcdd03e909f73d365e6eb80213aa5cc73cdbd620b17da3aca534870defa90d3050337001fdad2721422b05125a27889ca6022015f112efe33d7fd1e4f6118712cdcc5b18377ffd946", 0x85}, {&(0x7f0000005e40)="dbff9b95507b19ba0bcd4f8ec70e805991675e79773f9491b1b51ecf2e92d523b8429a455b206fef7c8721632205c1ee999fae226e1476fcbb12b1116870b43a47d64fade390f5ea37ba", 0x4a}, {&(0x7f0000005ec0)="3c2152b72961387a4507c2bc4fea8aae4f5d9681ac", 0x15}, {&(0x7f0000005f00)="368102ec932501885ba3d597874635a17d9da73815f0bec80d9426c36b2bd3cfd534ed255ce1c9e6d417b4f20fe0edc10093c369e951bb65166b38b13e91687781b77bc0d7e10ec09c3cbe71bfaa4f90ac82c1622feab5cef215413a71d042303e5e5a7147f740a2be4676990c664ba9bbe481a0b88bc320ba88df4848d3f845b32643057105fc00307ac2b571d164f997027b62ade71fc74b9b1830e0d3d7f5d30166baed58f59f38718aacbaa9db734f2f6d2db80e6803", 0xb8}], 0x5}}, {{&(0x7f0000006040)=@nl=@unspec, 0x80, &(0x7f0000006280)=[{&(0x7f00000060c0)="c9b4d8e5c637fe28422be33ba4f92dbb4967898cccf7b1207d2d92bfece82333bf7befb6e7951f200eaa8f608a531509566539e5663f8be85e9744c72993d795fa6cf4c03de73a221cf355a8e8ac55f61fada5c73444f4d88182248abdca143761ed9043aca6e94e67256d3be5099945ea811aa217d3c1b12281727662ea67577cce", 0x82}, {&(0x7f0000006180)="5f171909ccd31588b7532da93f81146a389f0323575b30af5883d8e6bb2944790ed4b183481fb7e5c196c493aa113ffb91cf55d02c294c30c15f2f64b7b69dc748926f7e98c480816c5b50a56d3e40121d8d1ace1186c5ae2a52612cde1467b1b61755d366b2d18fa4c51191062ec1bddb8ab992c552861ca831b23b8507f2d9bb4ca767403caee2e858b4a1a4864bf9e9e8504ee4a36c06051c2f1b5b9587c0a4f5d06fdf4503ebc8aed4b7377bc8fcccfe6afb0e4524b0056ccf1524b4c7ac74c0e47ac6f6be3f69276946b08bc4ee", 0xd0}], 0x2, &(0x7f00000062c0)=[{0x18, 0x0, 0x82b8, "e93906e371213146"}], 0x18}}], 0x8, 0x4000000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @mcast1, 0x2}, 0x1c) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendto$packet(r7, &(0x7f0000000680)="163c8f3f8a5d66571e583e7c88a8de0688a823e786dd55", 0x17, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) 13.54298277s ago: executing program 33 (id=1961): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c200820", @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x408102, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 12.447551021s ago: executing program 3 (id=1978): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)='#\\\x00') r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getpeername$llc(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x7c00, 0x0, 0x3) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 10.874926312s ago: executing program 2 (id=1980): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x200000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 10.647037715s ago: executing program 2 (id=1981): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c200820", @ANYRES16, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x408102, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x0) 8.792797106s ago: executing program 3 (id=1982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, 0x0, 0xb) splice(r7, 0x0, r6, 0x0, 0x1000, 0x0) write$binfmt_misc(r8, &(0x7f00000000c0), 0xfdef) splice(r5, 0x0, r8, 0x0, 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, r9}}, 0x30) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)={@host}) close_range(r0, 0xffffffffffffffff, 0x0) 7.848648902s ago: executing program 5 (id=1983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40004) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r2 = msgget(0x0, 0x4) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000023c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002400)={0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002480)={{0x3, r3, r6, r7, 0xffffffffffffffff, 0x2, 0x5}, 0x0, 0x0, 0x8, 0x3, 0x6, 0x8, 0x6, 0x4080, 0x1, 0x7f, r8, r9}) syz_genetlink_get_family_id$l2tp(&(0x7f0000002500), r1) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002540)={{0x1, r5, r4, r7, r4, 0x181, 0x9}, 0x0, 0x0, 0x6, 0x3, 0x8000000000000001, 0x1, 0x200, 0xffff, 0x4, 0xa, r9, 0xffffffffffffffff}) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000025c0)=""/121) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000002640), 0x800, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000002680)={0x2100, r10}, 0x0) lstat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002780)={{0x3, r3, r11, r3, r4, 0x2c, 0x3}, 0x0, 0x0, 0x4, 0xa, 0x1, 0x5, 0xfffffffffffff3ee, 0x376, 0x9, 0x101, r9, r9}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000002800)={0x3, 0x7}) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004000}, 0x40) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000002c80)={0x6, {{0xa, 0x4e23, 0x4, @loopback}}, {{0xa, 0x4e21, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000002dc0)=""/186) 7.785424161s ago: executing program 5 (id=1984): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4, 0x0, 0x0, @void, @value}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000240), &(0x7f00000004c0)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r2}, 0x20) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0xff) 7.596564501s ago: executing program 3 (id=1985): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x8040001) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4048aec9, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x2}) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4621, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000ff03000000000000"], 0x18}, 0x9c7) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f00000002c0)) fchdir(0xffffffffffffffff) setuid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 6.965817791s ago: executing program 5 (id=1986): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x1, "270400000000000000c100529babe6179d13f4ff0080000800000000ecffffff", 0x32314d59}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xd5, 0xb6, 0xc1, 0x8, 0x1870, 0x1, 0xe67f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa}}]}}]}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0xb7f, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x10, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.994402352s ago: executing program 4 (id=1987): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="050054000100b2ac0800010000000000090002"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 5.69283258s ago: executing program 4 (id=1988): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001100)=[{{&(0x7f00000008c0)=@hci, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/71, 0x47}, {&(0x7f0000000e80)=""/240, 0xf0}, {&(0x7f0000001140)=""/181, 0xb5}, {&(0x7f0000000a00)}], 0x4, &(0x7f0000001040)=""/177, 0xb1}, 0x7fff}], 0x1, 0x10002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mmap(&(0x7f0000b2f000/0x2000)=nil, 0x2000, 0x1000000, 0x4008031, 0xffffffffffffffff, 0x303e3000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0x11, 0x148, 0x190, 0x0, 0x290, 0x2a8, 0x2a8, 0x290, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @private=0xa010100, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'veth1_virt_wifi\x00', {}, {}, 0x21, 0x1, 0x10}, 0x0, 0x130, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@physdev={{0x68}, {'veth0_macvtap\x00', {}, 'ip6erspan0\x00', {}, 0x0, 0xa}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x30], 0x0, 0x0, 0x800000000000000}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x5}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) write$input_event(0xffffffffffffffff, &(0x7f0000000280)={{}, 0x4, 0x812f, 0x7}, 0x18) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000a80)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0xb, 0x1, '\x00', 0xfffffffffffffffc}) syz_open_dev$amidi(0x0, 0x2, 0x129002) munlock(&(0x7f00006ea000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 5.366753977s ago: executing program 2 (id=1989): ioprio_set$pid(0x1, 0x0, 0x4000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000), 0x0) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000340)='\a\x00', 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r4 = syz_open_procfs(r0, &(0x7f0000000500)='status\x00') read$FUSE(r4, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f00000000c0)={0xb31, 0x6, 0xb, 0x40, 0x11, 0xd56a}) socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x22020400) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r5, r5, 0x0, 0xc3) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x1000) set_mempolicy(0x4001, &(0x7f0000001540)=0x8, 0xfffffffffffffff9) 5.212302685s ago: executing program 3 (id=1990): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000340)={0x8, "58447d128b620f830153dd6525d7b2bc349af9fbfb978254ff338893956bfa38", 0x3, 0x1, 0x3, 0x20000, 0xa04, 0x8}) r1 = socket(0x40000000002, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="070000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e000000000000000000000000054053914000000000000"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000008960000000e6ffffff3d046adab2a36a96a427399ef2944c93262395d10ba66be246caccfedcf0651729e16446ef52f25eccffb8c59d3355e144cbf097997a24fc1ce08a37a81969657486972e9a4d213389f39a9f3a42b64edf93bc155d00eb94e93e60d2476e24c5d6a4c44d50b17ee5e444fae20e3eb6df"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r3 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'dvmrp0\x00'}) 4.577149139s ago: executing program 5 (id=1991): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x38) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0xe}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xffffffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x3, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @enum={0x3, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x5}, {0x9, 0x2}, {0x7, 0x80000001}, {0x0, 0xff}, {0x5, 0xfffffffe}, {0xc, 0xcb3d}, {0xb, 0x9}, {0x1}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @datasec={0x10, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x0, 0xe}, {0x4, 0xb, 0x81}, {0x4, 0x50a4, 0x5}, {0x4, 0x1, 0x4}, {0x3, 0x10000, 0xd7d7}], "9c"}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x41]}}, &(0x7f0000000640)=""/229, 0xe3, 0xe5, 0x1, 0x1ff, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) syz_emit_ethernet(0xb2, &(0x7f0000000a40)={@broadcast, @random="1704b45adbde", @void, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x9f}, {0x3}, {}, {0x1, 0x0, 0x1}], @ipv4=@igmp={{0x20, 0x4, 0x2, 0x0, 0x8c, 0x67, 0x0, 0x74, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xd}, {[@generic={0x41, 0xe, "40a0eeb00a4ed9bbe36ca4be"}, @noop, @ssrr={0x89, 0x17, 0xc8, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @empty]}, @timestamp_addr={0x44, 0x44, 0xc6, 0x1, 0x9, [{@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x10000}, {@private=0xa0100fd, 0x7fff}, {@loopback, 0x8000}, {@loopback, 0xf0bbef8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xfffffffb}, {@multicast1, 0x5e20}]}]}}, {0x1e, 0x5, 0x0, @empty, "c7934561"}}}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1}, &(0x7f0000000380), &(0x7f0000000400)='%-010d \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64=0x0, @ANYRES16=r3, @ANYRESOCT, @ANYRES16, @ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) 4.498918605s ago: executing program 6 (id=1972): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x69) (async) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x69) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007000000c4000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000700000000000000798de4affdf9c1a0dcf3b78f1506f7000001"], 0x48) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x7ac}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) r2 = timerfd_create(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r0, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 4.073863208s ago: executing program 2 (id=1992): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video(0x0, 0x7, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x8}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYRES32=r4, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="0020000000000000000079cb0000ff00"/25], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, 0x0, 0x0, 0x4048010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000340), 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1e, 0x0, 0x0, {0x0, @usr_ip6_spec={@dev, @local}, {0x0, @local}, @esp_ip4_spec={@broadcast, @private}, {0x0, @link_local}}}}) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000006604000080140016"], 0x28}], 0x1}, 0x0) 4.073103239s ago: executing program 3 (id=1993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40004) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r2 = msgget(0x0, 0x4) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r1, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000023c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002400)={0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002480)={{0x3, r3, r6, r7, 0xffffffffffffffff, 0x2, 0x5}, 0x0, 0x0, 0x8, 0x3, 0x6, 0x8, 0x6, 0x4080, 0x1, 0x7f, r8, r9}) syz_genetlink_get_family_id$l2tp(&(0x7f0000002500), r1) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002540)={{0x1, r5, r4, r7, r4, 0x181, 0x9}, 0x0, 0x0, 0x6, 0x3, 0x8000000000000001, 0x1, 0x200, 0xffff, 0x4, 0xa, r9, 0xffffffffffffffff}) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000025c0)=""/121) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000002640), 0x800, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000002680)={0x2100, r10}, 0x0) lstat(&(0x7f00000026c0)='./file0\x00', &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000002780)={{0x3, r3, r11, r3, r4, 0x2c, 0x3}, 0x0, 0x0, 0x4, 0xa, 0x1, 0x5, 0xfffffffffffff3ee, 0x376, 0x9, 0x101, r9, r9}) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004000}, 0x40) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000002c80)={0x6, {{0xa, 0x4e23, 0x4, @loopback}}, {{0xa, 0x4e21, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x108) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000002dc0)=""/186) 3.936704186s ago: executing program 6 (id=1994): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video(0x0, 0x7, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x8}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYRES32=r4, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="0020000000000000000079cb0000ff00"/25], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, 0x0, 0x0, 0x4048010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000340), 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x1e, 0x0, 0x0, {0x0, @usr_ip6_spec={@dev, @local}, {0x0, @local}, @esp_ip4_spec={@broadcast, @private}, {0x0, @link_local}}}}) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c000100000000000000006604000080140016"], 0x28}], 0x1}, 0x0) 3.683795351s ago: executing program 3 (id=1995): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x8040001) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4048aec9, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x2}) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4621, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000ff03000000000000"], 0x18}, 0x9c7) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f00000002c0)) fchdir(0xffffffffffffffff) setuid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 3.338479817s ago: executing program 4 (id=1996): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000200001030000008ef54565ff05"], 0x14}}, 0x8000) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r3, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(r4) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='task\x00') fchdir(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x9, 0x3c219, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r5, @void, @value=r5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.561141165s ago: executing program 2 (id=1997): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x44800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000001440)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x48) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000700)={{0x2}, 0x0, [0x2000000, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xba, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) syz_open_dev$loop(&(0x7f00000001c0), 0x4000000000, 0x94b382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eN\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x10}]}}]}, 0x48}}, 0x4000) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) dup(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '/dev/kvm\x00'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vbi#\x00'}}, {@audit}, {@euid_lt}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x65, 0x30, 0x63, 0x61, 0x31, 0x64, 0x66], 0x2d, [0x66, 0x66, 0x7, 0x66], 0x2d, [0x62, 0x63, 0x38, 0x39], 0x2d, [0x36, 0x34, 0x66], 0x2d, [0x36, 0x66, 0x5f, 0x62, 0x66, 0x63, 0x9, 0x31]}}}, {@fowner_lt={'fowner<', 0xee01}}]}) sync() capset(&(0x7f0000000000)={0x19980330}, 0x0) 2.234182689s ago: executing program 5 (id=1999): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r5, 0x0, 0xb) splice(r6, 0x0, r5, 0x0, 0x1000, 0x0) write$binfmt_misc(r7, &(0x7f00000000c0), 0xfdef) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, r8}}, 0x30) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000080)={@host}) 1.382880376s ago: executing program 2 (id=2000): fanotify_init(0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r0, 0x6a, 0x1, 0x0, 0x2000003b) epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x48482, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) read$msr(r2, &(0x7f00000194c0)=""/102376, 0x18fe8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = inotify_init() readv(r4, &(0x7f0000000200)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) close(r6) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') 442.612668ms ago: executing program 5 (id=2001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x2, 0x1, 0x3, 0x2, 0x4}, 0x400, 0xfff, 0xa78d}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xf, 0x0, 0x1000000}, 0x10) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 156.847805ms ago: executing program 4 (id=2002): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x1a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x700, &(0x7f0000000440)=[{&(0x7f0000000380)="d1b409", 0x3}], 0x1}}], 0x1, 0x0) 0s ago: executing program 4 (id=2003): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f00)=ANY=[@ANYRES64=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) kernel console output (not intermixed with test programs): ng dummy_hcd [ 596.468900][ T5866] usb usb5-port1: unable to enumerate USB device [ 596.642697][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.669487][ T11] bond0 (unregistering): Released all slaves [ 596.679481][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.708443][ T5864] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 596.721489][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.743414][ T5864] usb 4-1: config 0 descriptor?? [ 596.784737][ T5864] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 596.790742][T12193] lo speed is unknown, defaulting to 1000 [ 596.807106][T12193] lo speed is unknown, defaulting to 1000 [ 596.982223][ T5862] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 597.807814][T12206] 9pnet_fd: Insufficient options for proto=fd [ 597.839815][T12206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.841216][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.862730][T12206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.868254][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 597.871986][T12196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 597.882808][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 597.899003][T12196] bond0: (slave bond3): Enslaving as an active interface with an up link [ 597.913123][ T29] audit: type=1326 audit(1733478610.734:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12177 comm="syz.3.1719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f550d37ff19 code=0x0 [ 597.979154][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 598.011539][T12212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1719'. [ 598.031684][ T5862] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 598.053184][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.093402][ T5862] usb 1-1: config 0 descriptor?? [ 598.135820][T12191] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 598.156983][ T5864] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 598.293678][T12214] ecryptfs: Unknown parameter '/' [ 598.320094][ T5864] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 598.341052][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.359421][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 598.383457][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.399247][ T5864] usb 2-1: config 0 descriptor?? [ 598.595291][ T5865] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 598.622531][ T5862] plantronics 0003:047F:FFFF.004D: unknown main item tag 0xd [ 598.631509][ T5862] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 598.648659][ T5862] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 598.728295][ T5862] hid (null): unknown global tag 0x3c [ 598.757121][ T5865] usb 3-1: device descriptor read/64, error -71 [ 598.877992][ T5862] hid-generic 0000:80000001:0040.004E: unknown main item tag 0x5 [ 598.910924][ T5862] hid-generic 0000:80000001:0040.004E: unknown main item tag 0x1 [ 598.921075][ T5862] hid-generic 0000:80000001:0040.004E: unknown main item tag 0x0 [ 598.930169][ T5862] hid-generic 0000:80000001:0040.004E: unknown main item tag 0x1 [ 598.943322][ T5862] hid-generic 0000:80000001:0040.004E: unexpected long global item [ 598.957964][ T5862] hid-generic 0000:80000001:0040.004E: probe with driver hid-generic failed with error -22 [ 599.031565][ T5862] usb 2-1: USB disconnect, device number 71 [ 599.123469][ T1195] usb 1-1: USB disconnect, device number 85 [ 599.156485][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.165762][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.173746][ T5865] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 599.322252][ T5865] usb 3-1: device descriptor read/64, error -71 [ 599.396074][ T5862] usb 4-1: USB disconnect, device number 87 [ 599.407754][ T5864] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 599.441398][ T5865] usb usb3-port1: attempt power cycle [ 599.579184][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 599.654107][ T5864] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 599.664578][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.672612][ T5864] usb 5-1: Product: syz [ 599.689733][ T5864] usb 5-1: Manufacturer: syz [ 599.694416][ T5864] usb 5-1: SerialNumber: syz [ 599.705774][ T5864] usb 5-1: config 0 descriptor?? [ 599.715861][ T5864] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 599.725421][T12226] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1733'. [ 599.735276][ T5864] usb 5-1: setting power ON [ 599.746038][ T5864] dvb-usb: bulk message failed: -22 (2/0) [ 599.764245][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 599.797576][ T5864] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 599.806175][ T5864] usb 5-1: media controller created [ 599.819821][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 599.834810][ T5864] usb 5-1: selecting invalid altsetting 6 [ 599.838045][T12235] ebt_among: dst integrity fail: 200 [ 599.840726][ T5864] usb 5-1: digital interface selection failed (-22) [ 599.846235][ T5865] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 599.852556][ T5864] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 599.876083][ T5864] usb 5-1: setting power OFF [ 599.881628][ T5864] dvb-usb: bulk message failed: -22 (2/0) [ 599.887480][ T5864] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 599.896902][ T5864] (NULL device *): no alternate interface [ 599.901801][ T5865] usb 3-1: device descriptor read/8, error -71 [ 599.914958][ T5864] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 599.956876][ T5862] usb 5-1: USB disconnect, device number 70 [ 600.202509][ T5865] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 600.251265][ T5865] usb 3-1: device descriptor read/8, error -71 [ 600.379071][ T5865] usb usb3-port1: unable to enumerate USB device [ 600.813828][ T29] audit: type=1400 audit(1733478613.465:1337): avc: denied { map } for pid=12254 comm="syz.1.1742" path="socket:[33250]" dev="sockfs" ino=33250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 600.838023][ T29] audit: type=1400 audit(1733478613.465:1338): avc: denied { accept } for pid=12254 comm="syz.1.1742" path="socket:[33250]" dev="sockfs" ino=33250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 600.992545][T12258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=12258 comm=syz.0.1741 [ 601.005495][T12258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1741'. [ 601.492333][ T5866] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 601.674062][ T5865] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 601.725374][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.736810][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.751968][ T5866] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 601.763060][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.785081][T12269] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1747'. [ 601.814759][ T5866] usb 5-1: config 0 descriptor?? [ 601.822305][ T5866] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 601.856989][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.868619][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.945958][ T5865] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 601.955328][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.000251][ T5865] usb 2-1: config 0 descriptor?? [ 602.012100][ T5865] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 602.082621][ T5864] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 602.307957][T12277] 9pnet_fd: Insufficient options for proto=fd [ 602.929544][ T5864] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 602.994253][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.017062][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 603.074493][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.093768][ T5864] usb 1-1: config 0 descriptor?? [ 603.222430][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.231466][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.242201][ T29] audit: type=1326 audit(1733478615.729:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12252 comm="syz.4.1743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faff1d7ff19 code=0x0 [ 603.266985][ T5865] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 603.888320][T12289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1743'. [ 603.889069][ T5862] hid (null): unknown global tag 0x3c [ 603.987226][ T5862] hid-generic 0000:80000001:0040.004F: unknown main item tag 0x5 [ 604.067573][ T5862] hid-generic 0000:80000001:0040.004F: unknown main item tag 0x1 [ 604.076363][ T5862] hid-generic 0000:80000001:0040.004F: unknown main item tag 0x0 [ 604.084234][ T5862] hid-generic 0000:80000001:0040.004F: unknown main item tag 0x1 [ 604.092235][ T5862] hid-generic 0000:80000001:0040.004F: unexpected long global item [ 604.100320][ T5862] hid-generic 0000:80000001:0040.004F: probe with driver hid-generic failed with error -22 [ 604.116583][T12291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.125500][T12291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.135251][ T29] audit: type=1326 audit(1733478616.571:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12259 comm="syz.1.1744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e6357ff19 code=0x0 [ 604.138337][ T5862] usb 1-1: USB disconnect, device number 86 [ 604.228401][T12292] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1744'. [ 604.272225][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 604.280399][ T5865] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 604.289795][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.297924][ T5865] usb 4-1: Product: syz [ 604.302144][ T5865] usb 4-1: Manufacturer: syz [ 604.306859][ T5865] usb 4-1: SerialNumber: syz [ 604.314365][ T5865] usb 4-1: config 0 descriptor?? [ 604.496411][ T5864] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 604.541517][ T5865] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 604.658217][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 604.669861][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.694288][ T5864] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 604.703565][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.719352][ T5864] usb 3-1: config 0 descriptor?? [ 605.172300][ T5864] hid-steam 0003:28DE:1102.0050: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 605.187910][ T5866] usb 5-1: USB disconnect, device number 71 [ 605.245023][ T5864] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.266147][ T5864] hid-steam 0003:28DE:1102.0050: Steam Controller 'XXXXXXXXXX' connected [ 605.275139][ T5864] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.295393][ T5864] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.307224][ T5864] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0050/input/input93 [ 605.320281][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.355162][ T1195] usb 2-1: USB disconnect, device number 72 [ 605.397268][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.438794][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.456698][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.508497][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.520396][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.536274][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.536646][ T5864] hid-steam 0003:28DE:1102.0051: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 605.549676][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 605.560186][ T29] audit: type=1400 audit(1733478617.908:1341): avc: denied { write } for pid=12303 comm="syz.1.1756" name="anycast6" dev="proc" ino=4026533473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 606.271381][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 606.313784][ T5864] usb 3-1: USB disconnect, device number 87 [ 606.320699][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 606.712464][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 606.722102][ T5174] hid-steam 0003:28DE:1102.0050: No HID_FEATURE_REPORT submitted - nothing to read [ 606.868450][ T5864] hid-steam 0003:28DE:1102.0050: Steam Controller 'XXXXXXXXXX' disconnected [ 606.904471][T12318] fuse: Bad value for 'rootmode' [ 606.940633][ T5865] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 606.964266][ T5865] usb 4-1: USB disconnect, device number 88 [ 607.250069][T12325] syzkaller1: entered promiscuous mode [ 607.255699][T12325] syzkaller1: entered allmulticast mode [ 607.693157][ T5864] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 607.757036][ T5866] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 607.855224][ T5864] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 607.884823][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.904791][ T29] audit: type=1400 audit(1733478620.097:1342): avc: denied { write } for pid=12332 comm="syz.1.1765" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 607.908873][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 607.941850][ T5866] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 608.108170][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.116773][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.130863][ T5866] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 608.140744][ T5864] usb 1-1: config 0 descriptor?? [ 608.168661][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.185713][ T5866] usb 4-1: config 0 descriptor?? [ 609.403606][ T5865] usb 1-1: USB disconnect, device number 87 [ 609.413312][ T5862] usb 4-1: USB disconnect, device number 89 [ 609.576391][ T29] audit: type=1400 audit(1733478621.659:1343): avc: denied { connect } for pid=12314 comm="syz.2.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 609.801267][ T5866] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 609.945337][T12355] syz.1.1769[12355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.945751][T12355] syz.1.1769[12355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.957857][T12355] syz.1.1769[12355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.134773][ T29] audit: type=1400 audit(1733478622.052:1344): avc: denied { write } for pid=12350 comm="syz.1.1769" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 610.207628][T12356] syz.1.1769: attempt to access beyond end of device [ 610.207628][T12356] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 610.221015][T12356] befs: (nbd1): unable to read superblock [ 610.417030][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 610.433403][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.449037][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 610.472731][ T5865] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 610.488745][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.513106][ T5866] usb 5-1: config 0 descriptor?? [ 610.519932][ T5866] hub 5-1:0.0: bad descriptor, ignoring hub [ 610.530292][ T5866] hub 5-1:0.0: probe with driver hub failed with error -5 [ 610.733445][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 610.745865][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 610.748796][ T29] audit: type=1400 audit(1733478622.754:1345): avc: denied { lock } for pid=12348 comm="syz.4.1768" path="socket:[33396]" dev="sockfs" ino=33396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 610.757861][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 610.852308][T12366] siw: device registration error -23 [ 611.061918][ T5866] usb 5-1: USB disconnect, device number 72 [ 611.307455][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.322896][ T5865] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.338636][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.411509][ T5865] usb 3-1: config 0 descriptor?? [ 611.430636][T12353] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 611.455122][T12371] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1774'. [ 611.475310][ T29] audit: type=1400 audit(1733478623.437:1346): avc: denied { map } for pid=12370 comm="syz.3.1774" path="socket:[33416]" dev="sockfs" ino=33416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 611.501323][T12371] trusted_key: syz.3.1774 sent an empty control message without MSG_MORE. [ 611.645977][ T5862] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 611.919385][T12379] siw: device registration error -23 [ 611.931344][T12379] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 611.994729][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 612.020287][ T5862] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 612.030517][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.041351][ T5862] usb 1-1: Product: syz [ 612.048679][ T5862] usb 1-1: Manufacturer: syz [ 612.053637][ T5862] usb 1-1: SerialNumber: syz [ 612.174921][ T5865] plantronics 0003:047F:FFFF.0052: unknown main item tag 0xd [ 612.183087][ T5865] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 612.191326][ T5862] usb 1-1: config 0 descriptor?? [ 612.203205][ T5865] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 613.003227][ T5862] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 613.214266][ T5866] usb 3-1: USB disconnect, device number 88 [ 613.743811][ T5865] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 613.775950][ T1195] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 613.907189][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.919395][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 613.930883][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 613.943719][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.957328][ T5865] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.966574][ T1195] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.989222][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.999386][ T1195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 614.022665][ T1195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 614.034510][ T5865] usb 5-1: config 0 descriptor?? [ 614.041802][ T1195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.055586][T12393] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 614.063440][ T1195] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.076040][ T1195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.092746][ T1195] usb 2-1: config 0 descriptor?? [ 614.101727][T12394] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 614.345786][ T5866] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 614.353475][ T5864] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 614.518716][ T5864] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 614.534165][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.542125][ T1195] plantronics 0003:047F:FFFF.0053: unknown main item tag 0xd [ 614.547524][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.561110][ T1195] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 614.565099][ T5864] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 614.582055][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 614.588819][ T1195] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 614.592133][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.611191][ T5865] plantronics 0003:047F:FFFF.0054: unknown main item tag 0xd [ 614.612357][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 614.633259][ T5866] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 614.637786][ T5865] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 614.643223][ T5864] usb 4-1: config 0 descriptor?? [ 614.655573][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.672936][ T5866] usb 3-1: config 0 descriptor?? [ 614.673441][ T5865] plantronics 0003:047F:FFFF.0054: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 614.706535][ T5862] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 614.723343][ T5862] usb 1-1: USB disconnect, device number 88 [ 614.736199][T12396] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 614.853346][ T5864] usb 5-1: USB disconnect, device number 73 [ 614.869354][ T5865] usb 2-1: USB disconnect, device number 73 [ 615.206261][ T1195] usb 4-1: USB disconnect, device number 90 [ 615.287888][ T5864] hid (null): unknown global tag 0x3c [ 615.302218][ T5864] hid-generic 0000:80000001:0040.0055: unknown main item tag 0x5 [ 615.311331][ T5864] hid-generic 0000:80000001:0040.0055: unknown main item tag 0x1 [ 615.371008][ T5864] hid-generic 0000:80000001:0040.0055: unknown main item tag 0x0 [ 615.462191][ T5864] hid-generic 0000:80000001:0040.0055: unknown main item tag 0x1 [ 615.476154][ T5864] hid-generic 0000:80000001:0040.0055: unexpected long global item [ 615.487496][ T5864] hid-generic 0000:80000001:0040.0055: probe with driver hid-generic failed with error -22 [ 615.586467][ T5862] usb 3-1: USB disconnect, device number 89 [ 615.896611][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1787'. [ 616.361145][T12417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=12417 comm=syz.0.1786 [ 616.374130][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1786'. [ 616.932208][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1787'. [ 616.962735][ T29] audit: type=1400 audit(1733478628.572:1347): avc: denied { create } for pid=12411 comm="syz.4.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 616.987466][ T29] audit: type=1400 audit(1733478628.591:1348): avc: denied { write } for pid=12411 comm="syz.4.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 617.027958][T12414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 617.034061][T12414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 617.040159][T12414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 617.043762][ T29] audit: type=1400 audit(1733478628.619:1349): avc: denied { name_connect } for pid=12411 comm="syz.4.1787" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 617.046137][T12414] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 617.192189][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1789'. [ 617.196899][ T29] audit: type=1400 audit(1733478628.787:1350): avc: denied { map } for pid=12421 comm="syz.2.1789" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 617.491893][ T29] audit: type=1400 audit(1733478628.787:1351): avc: denied { execute } for pid=12421 comm="syz.2.1789" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 617.560123][T12424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.603987][T12428] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 618.275025][ T29] audit: type=1400 audit(1733478629.797:1352): avc: denied { create } for pid=12449 comm="syz.3.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 618.827916][ T5864] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 618.999634][T12463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=12463 comm=syz.1.1801 [ 619.012630][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1801'. [ 619.372021][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 619.372035][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 619.378126][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 619.390245][ T5866] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 619.427973][T12464] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 619.616938][ T5864] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 619.629019][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.641984][ T5864] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 619.651080][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.661266][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.262040][ T5864] usb 1-1: config 0 descriptor?? [ 620.271277][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 620.299072][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 620.314552][ T5866] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 620.324030][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.337687][ T5866] usb 3-1: config 0 descriptor?? [ 620.344151][T12455] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 620.566041][ T5862] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 620.688281][ T5864] hid (null): unknown global tag 0x3c [ 620.747072][ T5865] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 620.748269][ T5864] hid-generic 0000:80000001:0040.0056: unknown main item tag 0x5 [ 620.785472][ T5862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 620.805838][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.806304][ T5864] hid-generic 0000:80000001:0040.0056: unknown main item tag 0x1 [ 620.816338][ T5862] usb 2-1: Product: syz [ 620.844827][ T5862] usb 2-1: Manufacturer: syz [ 620.851787][ T5862] usb 2-1: SerialNumber: syz [ 621.056338][ T5864] hid-generic 0000:80000001:0040.0056: unknown main item tag 0x0 [ 621.087173][ T5864] hid-generic 0000:80000001:0040.0056: unknown main item tag 0x1 [ 621.134856][ T1195] usb 1-1: USB disconnect, device number 89 [ 621.145338][ T5862] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 621.148853][ T5864] hid-generic 0000:80000001:0040.0056: unexpected long global item [ 621.162155][ T5864] hid-generic 0000:80000001:0040.0056: probe with driver hid-generic failed with error -22 [ 621.162448][ T9961] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 621.183546][ T5864] usb 3-1: USB disconnect, device number 90 [ 621.209349][ T5865] usb 5-1: config 0 has an invalid interface number: 42 but max is 3 [ 621.217892][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.231298][ T5865] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 621.241878][ T5865] usb 5-1: config 0 has no interface number 0 [ 621.249403][ T5865] usb 5-1: config 0 interface 42 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 621.272198][ T5865] usb 5-1: config 0 interface 42 has no altsetting 0 [ 621.281853][ T5865] usb 5-1: New USB device found, idVendor=0bda, idProduct=8754, bcdDevice=fb.ed [ 621.298016][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.306540][ T5865] usb 5-1: Product: syz [ 621.310825][ T5865] usb 5-1: Manufacturer: syz [ 621.349172][ T5865] usb 5-1: SerialNumber: syz [ 621.356305][ T5865] usb 5-1: config 0 descriptor?? [ 622.563894][ T9961] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 622.571061][ T9961] ath9k_htc: Failed to initialize the device [ 622.582140][ T5865] usb 5-1: USB disconnect, device number 74 [ 622.664205][ T9961] usb 2-1: ath9k_htc: USB layer deinitialized [ 622.699764][T12480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 622.705947][T12480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 622.712060][T12480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 622.718138][T12480] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 623.226354][ T1195] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 623.311899][ T5865] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 623.403400][ T1195] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 623.416016][ T1195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 623.427877][ T1195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 623.440074][ T1195] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.454212][ T1195] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.464413][ T1195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.473259][ T5865] usb 3-1: too many configurations: 45, using maximum allowed: 8 [ 623.485091][ T1195] usb 4-1: config 0 descriptor?? [ 623.491772][T12492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 623.525708][ T5865] usb 3-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 623.548520][ T5865] usb 3-1: New USB device strings: Mfr=127, Product=140, SerialNumber=67 [ 623.572774][ T5865] usb 3-1: Product: syz [ 623.577133][ T5865] usb 3-1: Manufacturer: syz [ 623.582394][ T5865] usb 3-1: SerialNumber: syz [ 623.591378][ T5865] usb 3-1: config 0 descriptor?? [ 623.750232][ T5864] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 623.962521][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 624.064787][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.244644][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 624.359321][ T9961] usb 2-1: USB disconnect, device number 74 [ 624.381914][ T1195] plantronics 0003:047F:FFFF.0057: unknown main item tag 0xd [ 624.392611][ T1195] plantronics 0003:047F:FFFF.0057: No inputs registered, leaving [ 624.399896][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.402315][ T1195] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 624.425241][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.435851][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1814'. [ 624.441743][ T5864] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.459552][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.599360][ T5864] usb 5-1: config 0 descriptor?? [ 624.704081][ T1195] usb 4-1: USB disconnect, device number 91 [ 624.763239][T12501] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 625.129451][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 625.135651][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 625.141808][ T5128] Bluetooth: hci1: command 0x0c1a tx timeout [ 625.713903][ T5864] plantronics 0003:047F:FFFF.0058: unknown main item tag 0xd [ 625.732367][ T5864] plantronics 0003:047F:FFFF.0058: No inputs registered, leaving [ 625.761065][ T29] audit: type=1400 audit(1733478636.794:1353): avc: denied { write } for pid=12513 comm="syz.3.1816" name="task" dev="proc" ino=34413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 625.762111][ T5864] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 625.821904][ T29] audit: type=1400 audit(1733478636.822:1354): avc: denied { add_name } for pid=12513 comm="syz.3.1816" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 625.842350][ T29] audit: type=1400 audit(1733478636.841:1355): avc: denied { create } for pid=12513 comm="syz.3.1816" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 625.862719][ T29] audit: type=1400 audit(1733478636.841:1356): avc: denied { associate } for pid=12513 comm="syz.3.1816" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 626.012378][ T5912] usb 3-1: USB disconnect, device number 91 [ 626.036514][ T5863] usb 5-1: USB disconnect, device number 75 [ 626.212189][ T5864] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 626.273115][ T5866] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 626.514395][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.556629][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.598994][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.629825][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 626.689213][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 626.707720][ T5864] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 626.737992][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.746963][ T5866] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 626.758209][ T5864] usb 4-1: config 0 descriptor?? [ 626.763280][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.773361][ T5864] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 626.782063][ T5866] usb 1-1: config 0 descriptor?? [ 626.789452][T12519] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 626.798984][ T5912] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 626.971062][ T5912] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 626.981644][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.998530][ T5912] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 627.011617][T12527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 627.017708][T12527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 627.023780][T12527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 627.029840][T12527] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 627.077977][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.096695][ T5912] usb 3-1: config 0 descriptor?? [ 627.255116][ T5912] hid (null): unknown global tag 0x3c [ 627.258925][ T29] audit: type=1400 audit(1733478638.197:1357): avc: denied { map } for pid=12535 comm="syz.1.1822" path="/dev/swradio2" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.272058][ T5912] hid-generic 0000:80000001:0040.0059: unknown main item tag 0x5 [ 627.301820][ T29] audit: type=1400 audit(1733478638.197:1358): avc: denied { execute } for pid=12535 comm="syz.1.1822" path="/dev/swradio2" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.327382][ T5912] hid-generic 0000:80000001:0040.0059: unknown main item tag 0x1 [ 627.365283][ T5912] hid-generic 0000:80000001:0040.0059: unknown main item tag 0x0 [ 627.377056][ T5912] hid-generic 0000:80000001:0040.0059: unknown main item tag 0x1 [ 627.385671][ T5912] hid-generic 0000:80000001:0040.0059: unexpected long global item [ 627.400805][ T5912] hid-generic 0000:80000001:0040.0059: probe with driver hid-generic failed with error -22 [ 627.494930][ T1195] usb 1-1: USB disconnect, device number 90 [ 627.860645][ T9961] usb 3-1: USB disconnect, device number 92 [ 627.880901][T12539] binder: 12537:12539 ioctl c0306201 20000280 returned -14 [ 627.894587][T12539] binder: 12537:12539 ioctl c0d05605 20000600 returned -22 [ 627.954751][T12544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.971652][T12544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.037416][ T29] audit: type=1326 audit(1733478638.908:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12515 comm="syz.3.1817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f550d37ff19 code=0x0 [ 628.101894][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1817'. [ 628.421345][T12559] syz.0.1826[12559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.421780][T12559] syz.0.1826[12559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.433828][T12559] syz.0.1826[12559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.688729][T12560] syz.0.1826: attempt to access beyond end of device [ 628.688729][T12560] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 628.713258][T12560] befs: (nbd0): unable to read superblock [ 628.933982][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1827'. [ 629.240288][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 629.246405][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 629.252503][ T5128] Bluetooth: hci1: command 0x0c1a tx timeout [ 629.269303][ T9961] usb 4-1: USB disconnect, device number 92 [ 630.633986][ T5912] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 631.415338][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 631.462754][ T5912] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 631.553298][ T5912] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 631.728375][ T5912] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 631.816464][ T5912] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 631.846617][T12624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 631.853720][T12624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 631.861311][T12624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 631.867587][T12624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 631.928199][ T5912] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.941444][ T5912] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.950781][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.060698][ T5912] usb 5-1: GET_CAPABILITIES returned 0 [ 633.066311][ T5912] usbtmc 5-1:16.0: can't read capabilities [ 633.717307][ T29] audit: type=1326 audit(1733478644.240:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 633.723644][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 633.753482][ T29] audit: type=1326 audit(1733478644.240:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 633.823023][T12574] usbtmc 5-1:16.0: Unable to send data, error -71 [ 633.861651][ T29] audit: type=1326 audit(1733478644.240:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 633.901809][T12645] 9pnet_fd: Insufficient options for proto=fd [ 633.913674][ T9961] usb 5-1: USB disconnect, device number 76 [ 633.929768][ T29] audit: type=1326 audit(1733478644.240:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 633.976764][ T29] audit: type=1326 audit(1733478644.240:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 634.001467][ T29] audit: type=1326 audit(1733478644.240:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 634.025770][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 634.025813][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 634.047677][ T29] audit: type=1326 audit(1733478644.240:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 634.116244][ T5128] Bluetooth: hci4: command 0x0c1a tx timeout [ 634.129957][ T29] audit: type=1326 audit(1733478644.240:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 634.153289][T12649] siw: device registration error -23 [ 634.154157][ T29] audit: type=1326 audit(1733478644.240:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 634.182136][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.190294][ T29] audit: type=1326 audit(1733478644.240:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.4.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faff1d7ff19 code=0x7ffc0000 [ 634.987305][T12664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=12664 comm=syz.4.1840 [ 635.000325][T12664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1840'. [ 635.406929][T12662] fuse: Bad value for 'fd' [ 637.025708][T12685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 637.032163][T12685] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 637.038159][T12685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 637.044243][T12685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 637.411739][T12704] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 637.893985][ T5912] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 638.089730][ T5912] usb 5-1: config 1 interface 0 has no altsetting 0 [ 638.110140][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 638.120976][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.182797][ T5912] usb 5-1: Product: syz [ 638.187016][ T5912] usb 5-1: Manufacturer: syz [ 638.202620][ T5912] usb 5-1: SerialNumber: syz [ 638.525514][T12716] tc_dump_action: action bad kind [ 638.686817][T12718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=12718 comm=syz.0.1854 [ 638.700066][T12718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1854'. [ 639.001385][ T5912] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 639.046896][T12720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.049851][T12723] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1858'. [ 639.070601][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 639.070616][ T29] audit: type=1326 audit(1733478649.254:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.100724][ T29] audit: type=1326 audit(1733478649.254:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.124784][ T29] audit: type=1326 audit(1733478649.254:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.151682][ T29] audit: type=1326 audit(1733478649.254:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.177883][ T29] audit: type=1326 audit(1733478649.254:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.202189][ T29] audit: type=1326 audit(1733478649.254:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.225654][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.252740][ T5128] Bluetooth: hci4: command 0x0c1a tx timeout [ 639.252853][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 639.259154][ T5128] Bluetooth: hci1: command 0x0c1a tx timeout [ 639.282040][ T29] audit: type=1326 audit(1733478649.254:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.317888][ T29] audit: type=1326 audit(1733478649.254:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.350468][ T29] audit: type=1326 audit(1733478649.254:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.378318][ T29] audit: type=1326 audit(1733478649.254:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.2.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9677d7ff19 code=0x7ffc0000 [ 639.626958][ T5912] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 639.762354][ T5866] usb 5-1: USB disconnect, device number 77 [ 639.853877][ T5866] usblp0: removed [ 639.893207][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 640.029250][ T5912] usb 3-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 640.172333][ T5912] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.197381][ T5912] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 640.206881][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.310041][ T9961] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 640.317500][T12741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 640.323985][T12741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 640.330024][T12741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 640.336200][T12741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 640.392212][ T5912] usb 3-1: Product: syz [ 640.396492][ T5912] usb 3-1: Manufacturer: syz [ 640.401111][ T5912] usb 3-1: SerialNumber: syz [ 640.414336][ T5912] usb 3-1: config 0 descriptor?? [ 640.734239][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 640.910149][ T9961] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 640.922065][ T9961] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 640.940731][ T9961] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 640.949829][ T9961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.055455][T12755] siw: device registration error -23 [ 641.146354][T12739] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 641.261190][ T9961] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 641.400555][T12759] ptrace attach of "./syz-executor exec"[5812] was attempted by "./syz-executor exec"[12759] [ 641.452353][T12761] FAULT_INJECTION: forcing a failure. [ 641.452353][T12761] name failslab, interval 1, probability 0, space 0, times 0 [ 641.486059][T12761] CPU: 0 UID: 0 PID: 12761 Comm: syz.3.1869 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 641.496874][T12761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.506948][T12761] Call Trace: [ 641.510233][T12761] [ 641.513164][T12761] dump_stack_lvl+0x16c/0x1f0 [ 641.517859][T12761] should_fail_ex+0x497/0x5b0 [ 641.522547][T12761] ? fs_reclaim_acquire+0xae/0x150 [ 641.527689][T12761] should_failslab+0xc2/0x120 [ 641.532379][T12761] __kmalloc_noprof+0xcb/0x510 [ 641.537146][T12761] ? __wake_up+0x3f/0x60 [ 641.541408][T12761] sk_prot_alloc+0x1a8/0x2a0 [ 641.546055][T12761] sk_alloc+0x36/0xb90 [ 641.550144][T12761] ? __pfx_genl_release+0x10/0x10 [ 641.555152][T12761] __netlink_create+0x5e/0x2c0 [ 641.559902][T12761] ? __wake_up+0x3f/0x60 [ 641.564148][T12761] netlink_create+0x3a4/0x630 [ 641.568814][T12761] ? __pfx_genl_bind+0x10/0x10 [ 641.573569][T12761] ? __pfx_genl_unbind+0x10/0x10 [ 641.578495][T12761] __sock_create+0x335/0x8d0 [ 641.583091][T12761] __sys_socket+0x14f/0x260 [ 641.587584][T12761] ? __pfx___sys_socket+0x10/0x10 [ 641.592600][T12761] __x64_sys_socket+0x72/0xb0 [ 641.597269][T12761] do_syscall_64+0xcd/0x250 [ 641.601763][T12761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.607645][T12761] RIP: 0033:0x7f550d381e37 [ 641.612073][T12761] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.631687][T12761] RSP: 002b:00007f550e1c4f98 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 641.640117][T12761] RAX: ffffffffffffffda RBX: 00007f550d545fa0 RCX: 00007f550d381e37 [ 641.648076][T12761] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 641.656029][T12761] RBP: 00007f550e1c60a0 R08: 0000000000000000 R09: 0000000000000000 [ 641.663983][T12761] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 641.671941][T12761] R13: 0000000000000000 R14: 00007f550d545fa0 R15: 0000000000000000 [ 641.679908][T12761] [ 641.683015][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.699743][ T1195] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 641.755590][ T9961] usb 1-1: USB disconnect, device number 91 [ 641.845061][T12764] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 641.853645][T12764] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 641.862117][T12764] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 641.904381][ T1195] usb 5-1: Using ep0 maxpacket: 8 [ 641.913207][ T1195] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 641.926686][ T1195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.934939][ T1195] usb 5-1: Product: syz [ 641.939249][ T1195] usb 5-1: Manufacturer: syz [ 641.943893][ T1195] usb 5-1: SerialNumber: syz [ 641.952568][ T1195] usb 5-1: config 0 descriptor?? [ 642.177961][ T1195] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 642.186656][ T9961] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 642.362534][ T9961] usb 1-1: Using ep0 maxpacket: 8 [ 642.374598][ T9961] usb 1-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 642.384369][ T9961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.396807][ T9961] usb 1-1: Product: syz [ 642.401145][ T9961] usb 1-1: Manufacturer: syz [ 642.406116][ T9961] usb 1-1: SerialNumber: syz [ 642.412569][ T9961] usb 1-1: config 0 descriptor?? [ 642.422718][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.472770][T12771] FAULT_INJECTION: forcing a failure. [ 642.472770][T12771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.485127][ T5866] usb 3-1: USB disconnect, device number 93 [ 642.491928][T12771] CPU: 0 UID: 0 PID: 12771 Comm: syz.3.1872 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 642.502705][T12771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 642.512755][T12771] Call Trace: [ 642.516021][T12771] [ 642.518942][T12771] dump_stack_lvl+0x16c/0x1f0 [ 642.523603][T12771] should_fail_ex+0x497/0x5b0 [ 642.528264][T12771] _copy_from_user+0x2e/0xd0 [ 642.532844][T12771] copy_msghdr_from_user+0x99/0x160 [ 642.538023][T12771] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 642.543821][T12771] ? __pfx___lock_acquire+0x10/0x10 [ 642.549011][T12771] ___sys_recvmsg+0xdc/0x1a0 [ 642.553579][T12771] ? __pfx____sys_recvmsg+0x10/0x10 [ 642.558753][T12771] ? find_held_lock+0x2d/0x110 [ 642.563505][T12771] ? __pfx___might_resched+0x10/0x10 [ 642.568793][T12771] ? __might_fault+0xe3/0x190 [ 642.573488][T12771] do_recvmmsg+0x2f8/0x740 [ 642.577896][T12771] ? __pfx_do_recvmmsg+0x10/0x10 [ 642.582828][T12771] ? __pfx_lock_release+0x10/0x10 [ 642.587830][T12771] ? trace_lock_acquire+0x14e/0x1f0 [ 642.593031][T12771] __x64_sys_recvmmsg+0x239/0x290 [ 642.598120][T12771] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 642.603744][T12771] ? rcu_is_watching+0x12/0xc0 [ 642.608503][T12771] do_syscall_64+0xcd/0x250 [ 642.612998][T12771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.618898][T12771] RIP: 0033:0x7f550d37ff19 [ 642.623302][T12771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.642915][T12771] RSP: 002b:00007f550e1a5058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 642.651398][T12771] RAX: ffffffffffffffda RBX: 00007f550d546080 RCX: 00007f550d37ff19 [ 642.659348][T12771] RDX: 03ffffffffffff81 RSI: 0000000020000780 RDI: 0000000000000003 [ 642.667312][T12771] RBP: 00007f550e1a50a0 R08: 0000000000000000 R09: 0000000000000000 [ 642.675267][T12771] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 642.683218][T12771] R13: 0000000000000000 R14: 00007f550d546080 R15: 00007ffc4aceb118 [ 642.691193][T12771] [ 642.694242][ C0] vkms_vblank_simulate: vblank timer overrun [ 642.704592][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 642.710701][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 642.718174][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 643.026937][T12778] siw: device registration error -23 [ 643.177162][T12782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=12782 comm=syz.2.1873 [ 643.190097][T12782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1873'. [ 643.887574][ T9961] usb 1-1: USB disconnect, device number 92 [ 644.984917][ T1195] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 644.996729][ T1195] usb 5-1: USB disconnect, device number 78 [ 645.003420][T12787] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 645.009510][T12787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 645.016342][T12787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 645.022301][T12787] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 645.217331][T12792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1877'. [ 645.388115][ T5866] usb 1-1: new low-speed USB device number 93 using dummy_hcd [ 645.572555][ T5866] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 645.673792][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 645.689154][T12795] FAULT_INJECTION: forcing a failure. [ 645.689154][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 645.723198][ T5866] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 645.726324][T12795] CPU: 0 UID: 0 PID: 12795 Comm: syz.4.1878 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 645.746731][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 645.756767][T12795] Call Trace: [ 645.760025][T12795] [ 645.762935][T12795] dump_stack_lvl+0x16c/0x1f0 [ 645.767613][T12795] should_fail_ex+0x497/0x5b0 [ 645.772443][T12795] ? fs_reclaim_acquire+0xae/0x150 [ 645.777537][T12795] should_failslab+0xc2/0x120 [ 645.782202][T12795] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 645.787550][T12795] ? __pfx_mark_lock+0x10/0x10 [ 645.792290][T12795] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 645.798335][T12795] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 645.804207][T12795] mmu_topup_memory_caches+0x22/0xd0 [ 645.809474][T12795] kvm_mmu_load+0xda/0x21f0 [ 645.813958][T12795] ? mark_held_locks+0x9f/0xe0 [ 645.818699][T12795] ? kvm_apic_has_interrupt+0xb6/0x190 [ 645.824133][T12795] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 645.830099][T12795] ? kvm_guest_time_update+0x780/0xeb0 [ 645.835548][T12795] ? clear_pending_if_disabled+0xa9/0x210 [ 645.841332][T12795] ? __pfx_kvm_mmu_load+0x10/0x10 [ 645.846335][T12795] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 645.852203][T12795] ? kvm_check_and_inject_events+0x725/0x12e0 [ 645.858266][T12795] ? record_steal_time+0x51/0xbe0 [ 645.863282][T12795] vcpu_run+0x33a4/0x4f50 [ 645.867590][T12795] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 645.873117][T12795] ? __pfx_vcpu_run+0x10/0x10 [ 645.877772][T12795] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 645.883391][T12795] ? rcu_is_watching+0x12/0xc0 [ 645.888143][T12795] ? trace_lock_acquire+0x14e/0x1f0 [ 645.893317][T12795] ? __local_bh_enable_ip+0xa4/0x120 [ 645.898580][T12795] ? lockdep_hardirqs_on+0x7c/0x110 [ 645.903753][T12795] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 645.909473][T12795] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 645.915168][T12795] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 645.920694][T12795] kvm_vcpu_ioctl+0x6ce/0x1520 [ 645.925432][T12795] ? do_vfs_ioctl+0x513/0x1990 [ 645.930173][T12795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 645.935350][T12795] ? lock_acquire.part.0+0x11b/0x380 [ 645.940620][T12795] ? find_held_lock+0x2d/0x110 [ 645.945381][T12795] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 645.951874][T12795] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 645.958701][T12795] ? __pfx_lock_release+0x10/0x10 [ 645.963715][T12795] ? selinux_file_ioctl+0x180/0x270 [ 645.968903][T12795] ? selinux_file_ioctl+0xb4/0x270 [ 645.973994][T12795] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 645.979173][T12795] __x64_sys_ioctl+0x190/0x200 [ 645.983937][T12795] do_syscall_64+0xcd/0x250 [ 645.988420][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.994295][T12795] RIP: 0033:0x7faff1d7ff19 [ 645.998686][T12795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.018272][T12795] RSP: 002b:00007faff2aea058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.026658][T12795] RAX: ffffffffffffffda RBX: 00007faff1f45fa0 RCX: 00007faff1d7ff19 [ 646.034601][T12795] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 646.042554][T12795] RBP: 00007faff2aea0a0 R08: 0000000000000000 R09: 0000000000000000 [ 646.050498][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.058443][T12795] R13: 0000000000000000 R14: 00007faff1f45fa0 R15: 00007ffe41eb1088 [ 646.066398][T12795] [ 646.069502][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.109581][ T5866] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 646.109618][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.884662][ T5866] usb 1-1: config 0 descriptor?? [ 646.903512][T12790] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 647.205392][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 647.205673][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 647.211481][ T5128] Bluetooth: hci4: command 0x0c1a tx timeout [ 647.217642][ T5866] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 647.541709][ T5912] hid (null): unknown global tag 0x3c [ 647.554973][ T5912] hid-generic 0000:80000001:0040.005A: unknown main item tag 0x5 [ 647.575828][ T5912] hid-generic 0000:80000001:0040.005A: unknown main item tag 0x1 [ 647.627231][ T5912] hid-generic 0000:80000001:0040.005A: unknown main item tag 0x0 [ 647.635808][ T5912] hid-generic 0000:80000001:0040.005A: unknown main item tag 0x1 [ 647.644121][ T5912] hid-generic 0000:80000001:0040.005A: unexpected long global item [ 647.654224][ T5912] hid-generic 0000:80000001:0040.005A: probe with driver hid-generic failed with error -22 [ 647.670727][ T9961] usb 1-1: USB disconnect, device number 93 [ 647.772059][ T5866] usb 5-1: device descriptor read/64, error -71 [ 647.847721][ T1195] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 647.996453][ T5912] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 648.008353][ T1195] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.018628][ T1195] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.027608][ T1195] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 648.037574][ T1195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.047510][ T1195] usb 3-1: config 0 descriptor?? [ 648.050000][ T5866] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 648.162676][T12814] FAULT_INJECTION: forcing a failure. [ 648.162676][T12814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.176307][T12814] CPU: 1 UID: 0 PID: 12814 Comm: syz.3.1884 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 648.187076][T12814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 648.197126][T12814] Call Trace: [ 648.200395][T12814] [ 648.203313][T12814] dump_stack_lvl+0x16c/0x1f0 [ 648.207986][T12814] should_fail_ex+0x497/0x5b0 [ 648.212665][T12814] _copy_from_user+0x2e/0xd0 [ 648.217245][T12814] kstrtouint_from_user+0xd7/0x1c0 [ 648.222346][T12814] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 648.228074][T12814] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 648.233727][T12814] proc_fail_nth_write+0x84/0x250 [ 648.238763][T12814] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 648.244390][T12814] ? ksys_write+0x12b/0x250 [ 648.248910][T12814] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 648.254558][T12814] vfs_write+0x24c/0x1150 [ 648.258904][T12814] ? __fget_files+0x1fc/0x3a0 [ 648.263580][T12814] ? __pfx___mutex_lock+0x10/0x10 [ 648.268607][T12814] ? __pfx_vfs_write+0x10/0x10 [ 648.273382][T12814] ? __fget_files+0x206/0x3a0 [ 648.278058][T12814] ksys_write+0x12b/0x250 [ 648.282391][T12814] ? __pfx_ksys_write+0x10/0x10 [ 648.287235][T12814] ? rcu_is_watching+0x12/0xc0 [ 648.291994][T12814] do_syscall_64+0xcd/0x250 [ 648.296490][T12814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.302419][T12814] RIP: 0033:0x7f550d37e9cf [ 648.306821][T12814] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 648.326602][T12814] RSP: 002b:00007f550e1a5050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 648.335004][T12814] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f550d37e9cf [ 648.343048][T12814] RDX: 0000000000000001 RSI: 00007f550e1a50b0 RDI: 0000000000000006 [ 648.351004][T12814] RBP: 00007f550e1a50a0 R08: 0000000000000000 R09: 0000000000000000 [ 648.358963][T12814] R10: 00000000200000c0 R11: 0000000000000293 R12: 0000000000000002 [ 648.366952][T12814] R13: 0000000000000000 R14: 00007f550d546080 R15: 00007ffc4aceb118 [ 648.375115][T12814] [ 648.382268][ T5866] usb 5-1: device descriptor read/64, error -71 [ 648.389074][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 648.411326][ T5912] usb 2-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 648.421794][ T5912] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.434188][ T5912] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 648.444023][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.452164][ T5912] usb 2-1: Product: syz [ 648.456477][ T5912] usb 2-1: Manufacturer: syz [ 648.461207][ T5912] usb 2-1: SerialNumber: syz [ 648.480075][ T5912] usb 2-1: config 0 descriptor?? [ 648.517080][ T5866] usb usb5-port1: attempt power cycle [ 648.758271][T12820] siw: device registration error -23 [ 648.937758][ T5866] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 649.014527][ T5866] usb 5-1: device descriptor read/8, error -71 [ 649.076262][ T1195] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 649.336101][ T5866] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 649.451646][ T5866] usb 5-1: device descriptor read/8, error -71 [ 649.579791][ T5866] usb usb5-port1: unable to enumerate USB device [ 649.813088][T12828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 649.819324][T12828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 649.824563][ T1195] usb 1-1: Using ep0 maxpacket: 8 [ 649.825375][T12828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 649.836439][T12828] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 649.904835][ T1195] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 649.920841][ T1195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.930972][ T1195] usb 1-1: Product: syz [ 649.935417][ T1195] usb 1-1: Manufacturer: syz [ 649.940462][ T1195] usb 1-1: SerialNumber: syz [ 649.952053][ T1195] usb 1-1: config 0 descriptor?? [ 650.444124][T12838] lo speed is unknown, defaulting to 1000 [ 650.450845][ T1195] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 650.460180][T12838] lo speed is unknown, defaulting to 1000 [ 650.615801][ T9961] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 650.713297][T12840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.762520][ T5866] usb 3-1: USB disconnect, device number 94 [ 650.787303][ T9961] usb 4-1: Using ep0 maxpacket: 8 [ 650.802755][ T9961] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 650.815682][ T9961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.824958][ T9961] usb 4-1: Product: syz [ 650.829300][ T9961] usb 4-1: Manufacturer: syz [ 650.834548][ T9961] usb 4-1: SerialNumber: syz [ 650.835372][T12845] FAULT_INJECTION: forcing a failure. [ 650.835372][T12845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.841797][ T9961] usb 4-1: config 0 descriptor?? [ 650.864135][T12845] CPU: 1 UID: 0 PID: 12845 Comm: syz.2.1891 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 650.875036][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 650.885100][T12845] Call Trace: [ 650.888381][T12845] [ 650.891332][T12845] dump_stack_lvl+0x16c/0x1f0 [ 650.896019][T12845] should_fail_ex+0x497/0x5b0 [ 650.900695][T12845] _copy_to_user+0x32/0xd0 [ 650.905100][T12845] do_tcp_getsockopt+0x15e6/0x2970 [ 650.910353][T12845] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 650.915799][T12845] ? mark_lock+0xb5/0xc60 [ 650.920120][T12845] ? __pfx___lock_acquire+0x10/0x10 [ 650.925304][T12845] ? __pfx_mark_lock+0x10/0x10 [ 650.930085][T12845] ? find_held_lock+0x2d/0x110 [ 650.934892][T12845] ? avc_has_perm_noaudit+0x119/0x3a0 [ 650.940325][T12845] ? __pfx_lock_release+0x10/0x10 [ 650.945351][T12845] ? trace_lock_acquire+0x14e/0x1f0 [ 650.950552][T12845] ? hlock_class+0x4e/0x130 [ 650.955056][T12845] ? __lock_acquire+0x15a9/0x3c40 [ 650.960100][T12845] ? __pfx___lock_acquire+0x10/0x10 [ 650.965293][T12845] ? hlock_class+0x4e/0x130 [ 650.969785][T12845] ? __lock_acquire+0xcc5/0x3c40 [ 650.974721][T12845] ? find_held_lock+0x2d/0x110 [ 650.979484][T12845] ? __might_fault+0x13b/0x190 [ 650.984237][T12845] ? __pfx_lock_release+0x10/0x10 [ 650.989270][T12845] ? trace_lock_acquire+0x14e/0x1f0 [ 650.994475][T12845] ? lock_acquire+0x2f/0xb0 [ 650.998975][T12845] ? __might_fault+0xe3/0x190 [ 651.003672][T12845] tcp_getsockopt+0xdf/0x100 [ 651.008266][T12845] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 651.014146][T12845] do_sock_getsockopt+0x3fe/0x800 [ 651.019164][T12845] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 651.024715][T12845] ? lock_acquire+0x2f/0xb0 [ 651.029236][T12845] ? __fget_files+0x40/0x3a0 [ 651.033815][T12845] ? __fget_files+0x206/0x3a0 [ 651.038476][T12845] __sys_getsockopt+0x12f/0x260 [ 651.043324][T12845] __x64_sys_getsockopt+0xbd/0x160 [ 651.048438][T12845] ? syscall_trace_enter+0xf0/0x260 [ 651.053634][T12845] do_syscall_64+0xcd/0x250 [ 651.058144][T12845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.064057][T12845] RIP: 0033:0x7f9677d7ff19 [ 651.068463][T12845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.088099][T12845] RSP: 002b:00007f9678bd8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 651.096505][T12845] RAX: ffffffffffffffda RBX: 00007f9677f45fa0 RCX: 00007f9677d7ff19 [ 651.104464][T12845] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000004 [ 651.112426][T12845] RBP: 00007f9678bd80a0 R08: 0000000020000380 R09: 0000000000000000 [ 651.120397][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.128359][T12845] R13: 0000000000000000 R14: 00007f9677f45fa0 R15: 00007fff6238fa58 [ 651.136319][T12845] [ 651.140424][ T9961] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 651.181208][ T5912] usb 2-1: USB disconnect, device number 75 [ 651.683276][T12840] bond2 (unregistering): Released all slaves [ 651.970167][ T9961] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 651.986009][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.989443][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 651.994968][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.998555][ T5128] Bluetooth: hci3: command 0x0c1a tx timeout [ 652.006110][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 652.444182][T12856] syz.4.1894[12856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.444453][T12856] syz.4.1894[12856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.456422][T12856] syz.4.1894[12856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 652.656529][T12858] syz.4.1894: attempt to access beyond end of device [ 652.656529][T12858] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 652.681000][T12858] befs: (nbd4): unable to read superblock [ 653.196341][ T1195] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 653.211414][ T1195] usb 1-1: USB disconnect, device number 94 [ 653.499440][ T5912] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 653.912248][ T9961] usb 4-1: USB disconnect, device number 93 [ 653.968780][T12867] sctp: [Deprecated]: syz.2.1897 (pid 12867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.968780][T12867] Use struct sctp_sack_info instead [ 654.093792][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 654.093808][ T29] audit: type=1400 audit(1733478663.303:1460): avc: denied { block_suspend } for pid=12871 comm="syz.0.1899" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 654.269959][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.281163][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 654.291582][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.303134][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 654.312908][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.325933][ T5912] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 654.335115][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.360577][ T5912] usb 2-1: config 0 descriptor?? [ 654.368107][T12861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 655.035872][T12879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 655.042294][T12879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 655.048376][T12879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 655.054481][T12879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 655.084942][ T9961] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 655.114917][ T5865] usb 2-1: USB disconnect, device number 76 [ 655.161171][ T5862] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 655.168733][ T1195] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 655.245852][ T9961] usb 1-1: Using ep0 maxpacket: 32 [ 655.252180][ T9961] usb 1-1: config 252 has an invalid interface number: 50 but max is 1 [ 655.261679][ T9961] usb 1-1: config 252 has an invalid interface number: 214 but max is 1 [ 655.270575][ T9961] usb 1-1: config 252 has no interface number 0 [ 655.276952][ T9961] usb 1-1: config 252 has no interface number 1 [ 655.283229][ T9961] usb 1-1: config 252 interface 50 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 655.293617][ T9961] usb 1-1: config 252 interface 50 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 655.304800][ T9961] usb 1-1: config 252 interface 50 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 655.319306][ T9961] usb 1-1: New USB device found, idVendor=12d1, idProduct=fd5f, bcdDevice=b5.2b [ 655.329345][ T9961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.337644][ T9961] usb 1-1: Product: syz [ 655.343269][ T1195] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 655.354923][ T5862] usb 5-1: too many configurations: 228, using maximum allowed: 8 [ 655.363749][ T1195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 655.375366][ T9961] usb 1-1: Manufacturer: syz [ 655.380014][ T9961] usb 1-1: SerialNumber: syz [ 655.384905][ T1195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 655.396327][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 655.403927][ T5862] usb 5-1: can't read configurations, error -61 [ 655.410990][ T1195] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 655.425270][ T1195] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 655.425778][T12872] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 655.434650][ T5848] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 655.449399][ T1195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.459119][ T9961] option 1-1:252.50: GSM modem (1-port) converter detected [ 655.472107][ T1195] usb 4-1: config 0 descriptor?? [ 655.479106][T12875] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 655.554707][ T5862] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 655.629596][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 655.636133][ T5848] usb 3-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 655.646622][ T5848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 655.657437][ T5848] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 655.667047][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.677832][ T5848] usb 3-1: Product: syz [ 655.682105][ T5848] usb 3-1: Manufacturer: syz [ 655.700478][ T5848] usb 3-1: SerialNumber: syz [ 655.714399][ T9961] usb 1-1: USB disconnect, device number 95 [ 655.724021][ T5862] usb 5-1: too many configurations: 228, using maximum allowed: 8 [ 655.734505][ T5848] usb 3-1: config 0 descriptor?? [ 655.742631][ T9961] option 1-1:252.50: device disconnected [ 655.750422][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 655.775313][ T5862] usb 5-1: can't read configurations, error -61 [ 655.799576][ T5862] usb usb5-port1: attempt power cycle [ 656.034156][ T1195] plantronics 0003:047F:FFFF.005B: unknown main item tag 0xd [ 656.069567][ T1195] plantronics 0003:047F:FFFF.005B: No inputs registered, leaving [ 656.171448][ T1195] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 656.206174][ T1195] usb 4-1: USB disconnect, device number 94 [ 656.228228][ T5862] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 656.264557][ T5862] usb 5-1: too many configurations: 228, using maximum allowed: 8 [ 656.288104][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 656.303263][ T5862] usb 5-1: can't read configurations, error -61 [ 656.452805][ T5862] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 656.476263][ T5862] usb 5-1: too many configurations: 228, using maximum allowed: 8 [ 656.520721][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 656.538303][ T5862] usb 5-1: can't read configurations, error -61 [ 656.544872][ T5862] usb usb5-port1: unable to enumerate USB device [ 656.626750][T12894] syz.1.1904[12894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.627138][T12894] syz.1.1904[12894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.639131][T12894] syz.1.1904[12894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 656.875524][T12895] syz.1.1904: attempt to access beyond end of device [ 656.875524][T12895] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 656.899960][T12895] befs: (nbd1): unable to read superblock [ 657.201453][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 657.201546][ T5128] Bluetooth: hci3: command 0x0c1a tx timeout [ 657.201577][ T5128] Bluetooth: hci1: command 0x0c1a tx timeout [ 658.902465][ T9961] usb 3-1: USB disconnect, device number 95 [ 659.167609][T12920] siw: device registration error -23 [ 659.495072][ T9961] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 659.529380][T12927] siw: device registration error -23 [ 660.559861][ T9961] usb 2-1: Using ep0 maxpacket: 8 [ 660.579448][T12930] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 660.585931][T12930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 660.592080][T12930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 660.598142][T12930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 660.674898][ T9961] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 660.691513][ T9961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.729173][ T9961] usb 2-1: Product: syz [ 660.733508][ T9961] usb 2-1: Manufacturer: syz [ 660.738250][ T9961] usb 2-1: SerialNumber: syz [ 660.758769][ T9961] usb 2-1: config 0 descriptor?? [ 661.033132][ T9961] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 661.071106][ T5862] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 661.167316][ T1195] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 661.232984][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.243696][ T5862] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.257676][ T5862] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 661.294824][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.323280][ T5862] usb 5-1: config 0 descriptor?? [ 661.333755][ T1195] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 661.343416][ T1195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.394756][ T1195] usb 4-1: Product: syz [ 661.437903][ T1195] usb 4-1: Manufacturer: syz [ 661.446212][ T1195] usb 4-1: SerialNumber: syz [ 661.458322][ T1195] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 661.473539][ T5862] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 661.637797][ T29] audit: type=1400 audit(1733478670.356:1461): avc: denied { read write } for pid=12946 comm="syz.0.1919" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 661.663758][ T29] audit: type=1400 audit(1733478670.356:1462): avc: denied { open } for pid=12946 comm="syz.0.1919" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 661.689911][ T9961] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 661.708683][T12945] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 661.718321][ T29] audit: type=1400 audit(1733478670.440:1463): avc: denied { append } for pid=12946 comm="syz.0.1919" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 661.916865][ T29] audit: type=1400 audit(1733478670.618:1464): avc: denied { setopt } for pid=12946 comm="syz.0.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 662.764534][ T5862] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 662.771840][ T5862] ath9k_htc: Failed to initialize the device [ 662.798813][ T5862] usb 4-1: ath9k_htc: USB layer deinitialized [ 662.845788][ T5814] Bluetooth: hci4: command 0x0c1a tx timeout [ 662.852035][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 662.858214][ T5128] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.900099][ T9961] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 663.002086][ T5866] usb 2-1: USB disconnect, device number 77 [ 663.059565][ T9961] usb 1-1: device descriptor read/64, error -71 [ 663.230578][ T5912] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 663.316108][ T9961] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 663.401734][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 663.408310][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.421080][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.430763][ T5866] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 663.442527][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 663.452414][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.455093][ T9961] usb 1-1: device descriptor read/64, error -71 [ 663.463399][ T5912] usb 3-1: Product: syz [ 663.471378][ T5912] usb 3-1: Manufacturer: syz [ 663.476055][ T5912] usb 3-1: SerialNumber: syz [ 663.583808][ T9961] usb usb1-port1: attempt power cycle [ 663.604897][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 663.611483][ T5866] usb 2-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 663.623267][ T5866] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 663.634233][ T5866] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 663.643455][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.651593][ T5866] usb 2-1: Product: syz [ 663.655834][ T5866] usb 2-1: Manufacturer: syz [ 663.660535][ T5866] usb 2-1: SerialNumber: syz [ 663.666865][ T5866] usb 2-1: config 0 descriptor?? [ 663.914626][ T5912] usb 3-1: cannot find UAC_HEADER [ 663.927280][ T5912] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 663.938775][ T5912] usb 3-1: USB disconnect, device number 96 [ 663.947929][ T9961] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 663.981880][ T9961] usb 1-1: device descriptor read/8, error -71 [ 664.017144][ T1195] usb 5-1: USB disconnect, device number 87 [ 664.229337][ T5866] usb 4-1: USB disconnect, device number 95 [ 664.232715][T12965] ALSA: seq fatal error: cannot create timer (-22) [ 664.244464][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.269056][T12965] ALSA: seq fatal error: cannot create timer (-22) [ 664.474116][ T9961] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 664.563491][ T9961] usb 1-1: device descriptor read/8, error -71 [ 664.815021][ T9961] usb usb1-port1: unable to enumerate USB device [ 665.688046][T12981] ALSA: mixer_oss: invalid OSS volume 'DIÇIT' [ 665.719014][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1929'. [ 665.852795][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'. [ 665.861988][T12980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 665.868378][T12980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 665.874503][T12980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 665.880557][T12980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 666.844529][T12999] syz.0.1931[12999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.844628][T12999] syz.0.1931[12999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 666.856202][T12999] syz.0.1931[12999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 667.029529][T12999] syz.0.1931: attempt to access beyond end of device [ 667.029529][T12999] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 667.054046][T12999] befs: (nbd0): unable to read superblock [ 667.169392][ T9961] usb 2-1: USB disconnect, device number 78 [ 667.433934][T12998] netlink: 'syz.2.1933': attribute type 4 has an invalid length. [ 667.630349][ T29] audit: type=1400 audit(1733478675.885:1465): avc: denied { write } for pid=13003 comm="syz.1.1935" path="socket:[36993]" dev="sockfs" ino=36993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 667.967212][T12990] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 667.987177][ T29] audit: type=1400 audit(1733478676.044:1466): avc: denied { write } for pid=13003 comm="syz.1.1935" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 668.007845][T13004] binder: 13003:13004 ioctl 5412 20000000 returned -22 [ 668.062803][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 668.068941][ T5814] Bluetooth: hci3: command 0x0c1a tx timeout [ 668.075083][ T5128] Bluetooth: hci1: command 0x0c1a tx timeout [ 668.263128][T12988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.373621][T13016] netlink: 'syz.0.1936': attribute type 4 has an invalid length. [ 668.886299][ T9961] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 668.962653][ T1195] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 669.057485][ T9961] usb 3-1: Using ep0 maxpacket: 16 [ 669.111207][ T9961] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 669.143376][ T9961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.152653][ T9961] usb 3-1: Product: syz [ 669.159678][ T9961] usb 3-1: Manufacturer: syz [ 669.164669][ T9961] usb 3-1: SerialNumber: syz [ 669.170139][ T1195] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 669.185919][ T9961] usb 3-1: config 0 descriptor?? [ 669.191439][ T1195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.200959][ T9961] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 669.228998][ T1195] usb 2-1: config 0 descriptor?? [ 669.234177][ T9961] usb 3-1: Detected FT232H [ 669.292197][ T5862] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 669.453943][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 669.484763][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 669.503550][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 669.514895][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 669.528007][ T5862] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 669.537083][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.581979][ T5862] usb 1-1: config 0 descriptor?? [ 669.727431][T13025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13025 comm=syz.3.1941 [ 669.742930][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 669.762712][T13018] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 669.941826][ T1195] usbhid 2-1:0.0: can't add hid device: -71 [ 669.948070][ T1195] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 669.959284][ T1195] usb 2-1: USB disconnect, device number 79 [ 670.126350][ T9961] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 670.135986][ T9961] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 670.145789][ T9961] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 670.177272][ T9961] usb 3-1: USB disconnect, device number 97 [ 670.208231][ T9961] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 670.227244][ T9961] ftdi_sio 3-1:0.0: device disconnected [ 670.420305][ T5862] plantronics 0003:047F:FFFF.005C: unknown main item tag 0xd [ 670.428792][ T5862] plantronics 0003:047F:FFFF.005C: No inputs registered, leaving [ 670.452176][ T5862] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 671.665612][T13039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 671.665721][T13039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 671.665806][T13039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 671.665888][T13039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 671.996874][ T5862] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 672.029340][ T5866] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 672.169911][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.180512][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.194845][ T5862] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 672.204178][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.214273][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.222538][ T5862] usb 3-1: config 0 descriptor?? [ 672.229760][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 672.231836][ T5862] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 672.248056][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 672.262479][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 672.272638][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.296354][ T5866] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 672.309147][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.323846][ T5912] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 672.391216][ T5866] usb 2-1: config 0 descriptor?? [ 672.402942][T13047] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 672.500712][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 672.519937][ T29] audit: type=1400 audit(1733478680.533:1467): avc: denied { create } for pid=13053 comm="syz.0.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 672.522865][T13054] vcan1: entered promiscuous mode [ 672.545791][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 672.603354][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 672.872285][ T9961] usb 1-1: USB disconnect, device number 100 [ 672.882891][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.885068][T13054] vcan1: entered allmulticast mode [ 672.902653][ T5912] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.911854][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.238606][ T5848] hid (null): unknown global tag 0x3c [ 673.245084][ T5848] hid-generic 0000:80000001:0040.005D: unknown main item tag 0x5 [ 673.252968][ T5848] hid-generic 0000:80000001:0040.005D: unknown main item tag 0x1 [ 673.260740][ T5848] hid-generic 0000:80000001:0040.005D: unknown main item tag 0x0 [ 673.268482][ T5848] hid-generic 0000:80000001:0040.005D: unknown main item tag 0x1 [ 673.276272][ T5848] hid-generic 0000:80000001:0040.005D: unexpected long global item [ 673.284614][ T5848] hid-generic 0000:80000001:0040.005D: probe with driver hid-generic failed with error -22 [ 673.312380][ T5862] usb 2-1: USB disconnect, device number 80 [ 673.352680][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1948'. [ 673.364498][ T29] audit: type=1400 audit(1733478681.319:1468): avc: denied { ioctl } for pid=13051 comm="syz.3.1948" path="socket:[37074]" dev="sockfs" ino=37074 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 673.450614][T13062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.466535][T13062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.467075][ T5912] usb 5-1: config 0 descriptor?? [ 673.479310][ T29] audit: type=1326 audit(1733478681.431:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13043 comm="syz.2.1945" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9677d7ff19 code=0x0 [ 673.503033][T13050] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 673.545878][T13063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1945'. [ 673.686003][ T5848] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 673.739454][ T9961] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 673.825120][ T5848] usb 4-1: device descriptor read/64, error -71 [ 673.878830][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 673.884985][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 673.891303][ T5814] Bluetooth: hci1: command 0x0c1a tx timeout [ 674.046336][ T9961] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 674.056402][ T9961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.058144][ T5912] plantronics 0003:047F:FFFF.005E: unknown main item tag 0xd [ 674.065061][ T9961] usb 1-1: Product: syz [ 674.076684][ T9961] usb 1-1: Manufacturer: syz [ 674.081338][ T9961] usb 1-1: SerialNumber: syz [ 674.085287][ T5912] plantronics 0003:047F:FFFF.005E: No inputs registered, leaving [ 674.091576][ T9961] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 674.306859][ T5912] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 674.658380][ T5862] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 674.680550][ T5912] usb 5-1: USB disconnect, device number 88 [ 674.701861][ T5848] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 674.884880][ T5912] usb 3-1: USB disconnect, device number 98 [ 674.909284][ T5848] usb 4-1: device descriptor read/64, error -71 [ 674.971074][T13071] netlink: 'syz.2.1952': attribute type 4 has an invalid length. [ 676.220948][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 677.297716][T13088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 677.304373][T13088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.310584][T13088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.316593][T13088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 677.470338][T13087] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 677.858795][T13095] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 680.327499][ T5822] Bluetooth: hci4: command 0x0c1a tx timeout [ 680.333559][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 680.339632][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 680.624668][T13113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1964'. [ 682.014436][T13116] syz.2.1962[13116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.014492][T13116] syz.2.1962[13116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.032835][T13116] syz.2.1962[13116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 682.329855][T13119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=13119 comm=syz.4.1963 [ 682.354201][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1963'. [ 682.363208][T13119] netlink: 'syz.4.1963': attribute type 14 has an invalid length. [ 682.669864][T13120] syz.2.1962: attempt to access beyond end of device [ 682.669864][T13120] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 682.682889][T13120] befs: (nbd2): unable to read superblock [ 688.866989][ T5862] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 688.873926][ T5862] ath9k_htc: Failed to initialize the device [ 694.406195][ T5848] usb usb4-port1: attempt power cycle [ 694.417314][ T9961] usb 1-1: USB disconnect, device number 101 [ 694.464266][ T9961] usb 1-1: ath9k_htc: USB layer deinitialized [ 695.138554][T13126] binder: 13125:13126 ioctl c0306201 20000280 returned -14 [ 695.158926][T13126] binder: 13125:13126 ioctl c0d05605 20000600 returned -22 [ 695.287562][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 695.297006][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 695.307904][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 695.324641][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 695.338497][ T5822] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 695.346381][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 695.556564][ T9961] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 695.568404][ T29] audit: type=1400 audit(1733478702.094:1470): avc: denied { mounton } for pid=13131 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 695.611540][T13131] lo speed is unknown, defaulting to 1000 [ 695.618466][T13131] lo speed is unknown, defaulting to 1000 [ 695.781253][ T29] audit: type=1400 audit(1733478702.291:1471): avc: denied { write } for pid=13129 comm="syz.4.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 695.825051][ T9961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.839146][ T9961] usb 3-1: config 0 has no interfaces? [ 695.849197][ T9961] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 695.858669][ T9961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.866681][ T9961] usb 3-1: Product: syz [ 695.872096][ T9961] usb 3-1: Manufacturer: syz [ 695.878787][ T9961] usb 3-1: SerialNumber: syz [ 695.910182][ T9961] usb 3-1: config 0 descriptor?? [ 695.919747][T13131] chnl_net:caif_netlink_parms(): no params data found [ 696.100744][T13131] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.449603][T13131] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.456824][T13131] bridge_slave_0: entered allmulticast mode [ 696.474022][ T5848] usb 3-1: USB disconnect, device number 99 [ 696.501606][T13140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1971'. [ 696.506480][T13131] bridge_slave_0: entered promiscuous mode [ 696.520239][T13131] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.531869][T13131] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.554454][T13131] bridge_slave_1: entered allmulticast mode [ 696.571858][T13131] bridge_slave_1: entered promiscuous mode [ 696.654737][T13131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.669193][T13131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.748150][T13131] team0: Port device team_slave_0 added [ 696.758583][T13131] team0: Port device team_slave_1 added [ 696.784263][T13131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.797000][T13131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.872554][T13131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.902058][T13131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.920174][T13131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.973765][T13131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.118191][T13131] hsr_slave_0: entered promiscuous mode [ 697.167822][T13131] hsr_slave_1: entered promiscuous mode [ 697.183979][T13131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.217465][T13131] Cannot create hsr debugfs directory [ 697.547918][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 697.558865][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 697.591566][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 697.608061][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 697.633152][ T5814] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 697.683650][T13131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 697.693259][T13131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 697.701377][T13131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 697.709425][T13131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 697.751850][T13131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.774689][T13131] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.782151][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 697.811495][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.818610][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.828500][ T5814] Bluetooth: hci5: command tx timeout [ 697.849857][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.858334][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.883309][T13131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 697.893967][T13131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.915184][T13160] lo speed is unknown, defaulting to 1000 [ 697.922253][T13160] lo speed is unknown, defaulting to 1000 [ 698.151929][T13177] netlink: 'syz.3.1978': attribute type 4 has an invalid length. [ 698.165800][T13131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.175743][T13160] chnl_net:caif_netlink_parms(): no params data found [ 698.963753][T13160] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.986774][T13160] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.011122][T13160] bridge_slave_0: entered allmulticast mode [ 699.040152][T13160] bridge_slave_0: entered promiscuous mode [ 699.066118][T13160] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.083282][T13160] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.091813][T13160] bridge_slave_1: entered allmulticast mode [ 699.101392][T13160] bridge_slave_1: entered promiscuous mode [ 699.594724][T13131] veth0_vlan: entered promiscuous mode [ 699.629053][T13131] veth1_vlan: entered promiscuous mode [ 699.645931][T13160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.670196][T13160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.689771][T13195] syz.2.1980: attempt to access beyond end of device [ 699.689771][T13195] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 699.726231][T13160] team0: Port device team_slave_0 added [ 699.734679][T13195] qnx4: unable to read the superblock [ 699.753492][T13160] team0: Port device team_slave_1 added [ 699.791731][T13160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.809730][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.854242][T13160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.874881][T13131] veth0_macvtap: entered promiscuous mode [ 699.891875][T13160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.907769][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.940399][T13160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.954325][T13131] veth1_macvtap: entered promiscuous mode [ 699.967925][ T5822] Bluetooth: hci6: command tx timeout [ 699.995102][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.005897][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.020131][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.036016][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.049186][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.062456][ T5822] Bluetooth: hci5: command tx timeout [ 700.080060][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.093063][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.105544][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.116880][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.129400][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.142616][T13131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.159927][T13160] hsr_slave_0: entered promiscuous mode [ 700.166092][T13160] hsr_slave_1: entered promiscuous mode [ 700.174292][T13160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.184667][T13160] Cannot create hsr debugfs directory [ 700.202443][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.215233][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.227794][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.240458][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.254391][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.270015][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.282660][T13131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.293762][T13131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.307646][T13131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.327236][ T9961] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 700.346561][T13131] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.358180][T13131] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.369207][T13131] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.379643][T13131] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.489625][ T9961] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.516358][T12914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.527534][ T9961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 700.540797][T12914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.560348][ T9961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.601868][ T9961] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 700.635488][T13160] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 700.654261][ T9961] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 700.676819][T13160] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 700.687465][ T9961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.699453][T13160] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 700.711315][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.721105][T13160] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 700.731307][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.764722][ T29] audit: type=1400 audit(1733478706.949:1472): avc: denied { mounton } for pid=13131 comm="syz-executor" path="/root/syzkaller.ADRtz6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 700.800798][ T9961] usb 3-1: config 0 descriptor?? [ 700.819610][T13199] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 700.919812][ T29] audit: type=1400 audit(1733478706.987:1473): avc: denied { mounton } for pid=13131 comm="syz-executor" path="/root/syzkaller.ADRtz6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=38346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 700.962356][T13160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.100851][ T29] audit: type=1400 audit(1733478707.005:1474): avc: denied { mounton } for pid=13131 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 701.308774][T13204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=13204 comm=syz.5.1966 [ 701.322177][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'. [ 701.331311][T13204] netlink: 'syz.5.1966': attribute type 14 has an invalid length. [ 701.360408][T13204] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.369325][T13204] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.378091][T13204] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.386969][T13204] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.396019][T13204] vxlan0: entered promiscuous mode [ 701.538231][T13160] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.557687][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.564776][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.602987][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.610125][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.838068][ T9961] plantronics 0003:047F:FFFF.005F: unknown main item tag 0xd [ 701.864434][ T9961] plantronics 0003:047F:FFFF.005F: No inputs registered, leaving [ 701.966699][T13211] syz.3.1982[13211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 701.967097][T13211] syz.3.1982[13211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 701.979090][T13211] syz.3.1982[13211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 702.203145][T13212] syz.3.1982: attempt to access beyond end of device [ 702.203145][T13212] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 702.227551][T13212] befs: (nbd3): unable to read superblock [ 702.383996][ T9961] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 702.495804][ T5822] Bluetooth: hci6: command tx timeout [ 702.501445][ T5822] Bluetooth: hci5: command tx timeout [ 702.608756][T13160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.858537][ T5912] usb 3-1: USB disconnect, device number 100 [ 703.273940][T13231] sp0: Synchronizing with TNC [ 703.305061][T13160] veth0_vlan: entered promiscuous mode [ 703.322513][T13160] veth1_vlan: entered promiscuous mode [ 703.391132][T13160] veth0_macvtap: entered promiscuous mode [ 703.401606][T13160] veth1_macvtap: entered promiscuous mode [ 703.467612][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.501103][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.570291][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.601239][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.639200][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.666082][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.693313][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.719642][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.742277][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.756937][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.785434][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.815389][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.840612][T13160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.876407][ T9961] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 703.889520][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.918291][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.945136][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.977429][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.023573][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.047560][ T9961] usb 6-1: Using ep0 maxpacket: 8 [ 704.064806][ T9961] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 704.083423][ T9961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.101238][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.143082][ T9961] usb 6-1: Product: syz [ 704.152757][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.175633][ T9961] usb 6-1: Manufacturer: syz [ 704.199105][ T9961] usb 6-1: SerialNumber: syz [ 704.200396][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.292368][T13160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.312369][ T9961] usb 6-1: config 0 descriptor?? [ 704.345083][T13160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.433070][T13160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.552022][T13160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.607332][T13160] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.616294][T13160] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.627863][T13160] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.689086][ T5814] Bluetooth: hci5: command tx timeout [ 704.691996][ T5822] Bluetooth: hci6: command tx timeout [ 704.884270][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.904895][T13234] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 704.950906][T13234] kvm: pic: single mode not supported [ 704.951142][T13234] kvm: pic: non byte read [ 704.972070][T13234] kvm: pic: level sensitive irq not supported [ 704.981157][T13234] kvm: pic: non byte read [ 704.998897][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.018716][T13234] kvm: pic: non byte read [ 705.040402][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.048371][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.067717][T13234] kvm: pic: non byte read [ 705.116994][T13234] kvm: pic: non byte read [ 705.140566][T13234] kvm: pic: non byte read [ 705.335190][ T9961] usb 6-1: USB disconnect, device number 2 [ 705.977662][ T29] audit: type=1400 audit(1733478711.832:1475): avc: denied { create } for pid=13259 comm="syz.5.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 706.387113][T13082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.617051][T13271] netlink: 'syz.2.1992': attribute type 11 has an invalid length. [ 706.948922][ T5822] Bluetooth: hci6: command tx timeout [ 707.303914][T13284] netlink: 'syz.6.1994': attribute type 11 has an invalid length. [ 707.938835][T13285] block nbd4: Device being setup by another task [ 708.610437][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1998'. [ 708.989103][T13301] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 709.155646][T13305] syz.5.1999[13305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 709.156090][T13305] syz.5.1999[13305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 709.168148][T13305] syz.5.1999[13305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 709.303355][T13305] syz.5.1999: attempt to access beyond end of device [ 709.303355][T13305] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 709.327857][T13305] befs: (nbd5): unable to read superblock [ 709.638306][ T5822] block nbd4: Receive control failed (result -32) [ 709.658315][ T5822] block nbd4: Receive control failed (result -32) [ 709.878848][T13279] block nbd4: shutting down sockets [ 710.220329][T13307] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 710.413613][ T29] audit: type=1400 audit(1733478715.985:1476): avc: denied { create } for pid=13314 comm="syz.5.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 710.527848][ C0] ================================================================== [ 710.535959][ C0] BUG: KASAN: slab-out-of-bounds in selinux_ip_output+0x1e0/0x1f0 [ 710.543754][ C0] Read of size 8 at addr ffff8880440ee498 by task kworker/u8:1/12 [ 710.551530][ C0] [ 710.553835][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 710.564502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 710.574543][ C0] Workqueue: krdsd rds_send_worker [ 710.579639][ C0] Call Trace: [ 710.582895][ C0] [ 710.585720][ C0] dump_stack_lvl+0x116/0x1f0 [ 710.590387][ C0] print_report+0xc3/0x620 [ 710.594828][ C0] ? __virt_addr_valid+0x5e/0x590 [ 710.599885][ C0] ? __phys_addr+0xc6/0x150 [ 710.604420][ C0] kasan_report+0xd9/0x110 [ 710.608873][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 710.614011][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 710.619168][ C0] selinux_ip_output+0x1e0/0x1f0 [ 710.624138][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 710.629634][ C0] nf_hook_slow+0xbb/0x200 [ 710.634038][ C0] nf_hook+0x474/0x7d0 [ 710.638087][ C0] ? __pfx_dst_output+0x10/0x10 [ 710.642913][ C0] ? __pfx_nf_hook+0x10/0x10 [ 710.647504][ C0] ? __pfx_lock_release+0x10/0x10 [ 710.652509][ C0] ? __pfx_dst_output+0x10/0x10 [ 710.657448][ C0] ip6_xmit+0xd44/0x2130 [ 710.661697][ C0] ? __pfx_dst_output+0x10/0x10 [ 710.666548][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 710.671217][ C0] ? xfrm_lookup_route+0x6a/0x200 [ 710.676226][ C0] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 710.681504][ C0] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 710.687115][ C0] tcp_v6_send_response+0x11d9/0x25e0 [ 710.692466][ C0] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 710.698162][ C0] ? hlock_class+0x4e/0x130 [ 710.702648][ C0] ? rcu_is_watching+0x12/0xc0 [ 710.707390][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 710.712587][ C0] ? __pfx_lock_release+0x10/0x10 [ 710.717589][ C0] tcp_v6_send_reset+0x636/0x1590 [ 710.722594][ C0] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 710.728044][ C0] ? tcp_timewait_state_process+0x299/0x1040 [ 710.734015][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 710.739203][ C0] ? __asan_memmove+0x3c/0x60 [ 710.743856][ C0] tcp_v6_rcv+0x311f/0x3fd0 [ 710.748348][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 710.753178][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 710.758380][ C0] ? find_held_lock+0x2d/0x110 [ 710.763138][ C0] ? __pfx_raw6_local_deliver+0x10/0x10 [ 710.768667][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 710.773510][ C0] ip6_protocol_deliver_rcu+0x180/0x1510 [ 710.779120][ C0] ip6_input_finish+0x14f/0x2f0 [ 710.783962][ C0] ip6_input+0xa1/0xd0 [ 710.788021][ C0] ? __pfx_ip6_input+0x10/0x10 [ 710.792770][ C0] ip6_rcv_finish+0x1ad/0x5b0 [ 710.797442][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 710.802615][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 710.807799][ C0] ip_sabotage_in+0x21b/0x290 [ 710.812454][ C0] nf_hook_slow+0xbb/0x200 [ 710.816849][ C0] nf_hook.constprop.0+0x42e/0x750 [ 710.821935][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 710.827113][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 710.832721][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 710.837994][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 710.842657][ C0] ipv6_rcv+0xa4/0x680 [ 710.846705][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 710.851371][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 710.857249][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 710.863659][ C0] ? rcu_is_watching+0x12/0xc0 [ 710.868411][ C0] ? nf_hook_slow+0x132/0x200 [ 710.873060][ C0] ? netif_receive_skb+0x109/0x7b0 [ 710.878247][ C0] __netif_receive_skb+0x1d/0x160 [ 710.883249][ C0] netif_receive_skb+0x13f/0x7b0 [ 710.888161][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 710.893626][ C0] br_pass_frame_up+0x346/0x490 [ 710.898453][ C0] br_handle_frame_finish+0x122c/0x1c80 [ 710.903976][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 710.909860][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 710.914686][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 710.919948][ C0] ? ip6t_do_table+0xd50/0x1d40 [ 710.924774][ C0] ? nf_hook_slow+0x132/0x200 [ 710.929427][ C0] br_nf_hook_thresh+0x303/0x410 [ 710.934341][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 710.940211][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 710.945647][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 710.951517][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 710.957386][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 710.963268][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 710.969228][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 710.975117][ C0] br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 710.980469][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 710.986341][ C0] ? __pfx_lock_release+0x10/0x10 [ 710.991342][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 710.996534][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 711.003015][ C0] br_nf_pre_routing+0x860/0x15b0 [ 711.008105][ C0] br_handle_frame+0x9eb/0x1490 [ 711.012948][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 711.018224][ C0] ? sk_skb_reason_drop+0x67/0x1a0 [ 711.023312][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 711.029183][ C0] ? __pfx_packet_rcv+0x10/0x10 [ 711.034006][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 711.039268][ C0] __netif_receive_skb_core.constprop.0+0xa76/0x4470 [ 711.045923][ C0] ? hlock_class+0x4e/0x130 [ 711.050403][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 711.055419][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 711.062505][ C0] ? hlock_class+0x4e/0x130 [ 711.066998][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 711.072000][ C0] ? mark_lock+0xb5/0xc60 [ 711.076305][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 711.081488][ C0] ? find_held_lock+0x2d/0x110 [ 711.086248][ C0] ? __pfx_mark_lock+0x10/0x10 [ 711.091001][ C0] ? process_backlog+0x3f1/0x15f0 [ 711.096027][ C0] __netif_receive_skb_one_core+0xb1/0x1e0 [ 711.101820][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 711.108321][ C0] ? rcu_is_watching+0x12/0xc0 [ 711.113067][ C0] ? process_backlog+0x3f1/0x15f0 [ 711.118086][ C0] ? process_backlog+0x3f1/0x15f0 [ 711.123087][ C0] __netif_receive_skb+0x1d/0x160 [ 711.128091][ C0] process_backlog+0x443/0x15f0 [ 711.132921][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 711.138291][ C0] net_rx_action+0xa94/0x1010 [ 711.142961][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 711.148056][ C0] ? __pfx_mark_lock+0x10/0x10 [ 711.152814][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 711.158044][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 711.163236][ C0] ? sched_clock+0x38/0x60 [ 711.167661][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 711.172497][ C0] ? mark_held_locks+0x9f/0xe0 [ 711.177254][ C0] handle_softirqs+0x213/0x8f0 [ 711.181998][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 711.187276][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 711.192542][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 711.197630][ C0] do_softirq+0xb2/0xf0 [ 711.201762][ C0] [ 711.204681][ C0] [ 711.207600][ C0] __local_bh_enable_ip+0x100/0x120 [ 711.212774][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 711.217876][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 711.222792][ C0] ? lockdep_unlock+0x11a/0x290 [ 711.227623][ C0] ? __lock_acquire+0x2077/0x3c40 [ 711.232625][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 711.237976][ C0] ? hlock_class+0x4e/0x130 [ 711.242458][ C0] ? mark_lock+0xb5/0xc60 [ 711.246765][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 711.251936][ C0] ? __pfx_mark_lock+0x10/0x10 [ 711.256683][ C0] ? find_held_lock+0x2d/0x110 [ 711.261436][ C0] ? ip6_finish_output2+0xb1b/0x2070 [ 711.266713][ C0] ? __pfx_lock_release+0x10/0x10 [ 711.271731][ C0] ? __asan_memcpy+0x3c/0x60 [ 711.276298][ C0] ? eth_header+0x11c/0x1f0 [ 711.280778][ C0] neigh_resolve_output+0x5bc/0x950 [ 711.285957][ C0] ip6_finish_output2+0xb1b/0x2070 [ 711.291046][ C0] ip6_finish_output+0x3f9/0x1360 [ 711.296048][ C0] ip6_output+0x1f8/0x540 [ 711.300357][ C0] ? __pfx_ip6_output+0x10/0x10 [ 711.305196][ C0] ip6_xmit+0x1234/0x2130 [ 711.309503][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 711.314156][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 711.319765][ C0] ? rcu_is_watching+0x12/0xc0 [ 711.324506][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 711.329682][ C0] ? __pfx_mark_lock+0x10/0x10 [ 711.334422][ C0] ? inet6_csk_xmit+0x18a/0x740 [ 711.339254][ C0] inet6_csk_xmit+0x3ce/0x740 [ 711.343908][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 711.349101][ C0] ? csum_ipv6_magic+0x296/0x310 [ 711.354017][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 711.359190][ C0] __tcp_transmit_skb+0x1b02/0x3df0 [ 711.364383][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 711.369901][ C0] ? __pfx_lock_release+0x10/0x10 [ 711.374917][ C0] ? ktime_get+0x206/0x300 [ 711.379329][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.384513][ C0] tcp_write_xmit+0x12b1/0x8560 [ 711.389346][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 711.394870][ C0] tcp_sendmsg_locked+0x25b3/0x3770 [ 711.400062][ C0] ? mark_lock+0xb5/0xc60 [ 711.404368][ C0] ? mark_held_locks+0x9f/0xe0 [ 711.409107][ C0] ? __pfx_mark_lock+0x10/0x10 [ 711.413845][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 711.419380][ C0] ? tcp_sendmsg+0x20/0x50 [ 711.423779][ C0] ? mark_held_locks+0x9f/0xe0 [ 711.428518][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 711.433781][ C0] tcp_sendmsg+0x2e/0x50 [ 711.438008][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 711.442935][ C0] inet6_sendmsg+0xb9/0x140 [ 711.447414][ C0] sock_sendmsg+0x2b5/0x470 [ 711.451894][ C0] ? __pfx_sock_sendmsg+0x10/0x10 [ 711.456897][ C0] rds_tcp_xmit+0x34e/0xc50 [ 711.461374][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 711.466369][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 711.471804][ C0] ? __asan_memset+0x23/0x50 [ 711.476381][ C0] ? rds_message_map_pages+0x2d9/0x390 [ 711.481814][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 711.486810][ C0] rds_send_xmit+0xf36/0x24a0 [ 711.491465][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 711.496551][ C0] ? process_one_work+0x921/0x1ba0 [ 711.501639][ C0] rds_send_worker+0x8f/0x2e0 [ 711.506292][ C0] process_one_work+0x9c5/0x1ba0 [ 711.511206][ C0] ? __pfx_rds_tcp_accept_worker+0x10/0x10 [ 711.516988][ C0] ? __pfx_process_one_work+0x10/0x10 [ 711.522337][ C0] ? rcu_is_watching+0x12/0xc0 [ 711.527078][ C0] ? assign_work+0x1a0/0x250 [ 711.531640][ C0] worker_thread+0x6c8/0xf00 [ 711.536207][ C0] ? __pfx_worker_thread+0x10/0x10 [ 711.541295][ C0] kthread+0x2c1/0x3a0 [ 711.545351][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.550523][ C0] ? __pfx_kthread+0x10/0x10 [ 711.555095][ C0] ret_from_fork+0x45/0x80 [ 711.559505][ C0] ? __pfx_kthread+0x10/0x10 [ 711.564073][ C0] ret_from_fork_asm+0x1a/0x30 [ 711.568819][ C0] [ 711.571814][ C0] [ 711.574114][ C0] The buggy address belongs to the object at ffff8880440ee420 [ 711.574114][ C0] which belongs to the cache tw_sock_TCPv6 of size 288 [ 711.588311][ C0] The buggy address is located 120 bytes inside of [ 711.588311][ C0] allocated 288-byte region [ffff8880440ee420, ffff8880440ee540) [ 711.602425][ C0] [ 711.604722][ C0] The buggy address belongs to the physical page: [ 711.611109][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x440ee [ 711.619842][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 711.628324][ C0] memcg:ffff88801eb4e001 [ 711.632559][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 711.640092][ C0] page_type: f5(slab) [ 711.644045][ C0] raw: 00fff00000000040 ffff88814c3ff140 dead000000000122 0000000000000000 [ 711.652602][ C0] raw: 0000000000000000 0000000080170017 00000001f5000000 ffff88801eb4e001 [ 711.661161][ C0] head: 00fff00000000040 ffff88814c3ff140 dead000000000122 0000000000000000 [ 711.669805][ C0] head: 0000000000000000 0000000080170017 00000001f5000000 ffff88801eb4e001 [ 711.678447][ C0] head: 00fff00000000001 ffffea0001103b81 ffffffffffffffff 0000000000000000 [ 711.687091][ C0] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 711.695905][ C0] page dumped because: kasan: bad access detected [ 711.702311][ C0] page_owner tracks the page as allocated [ 711.707994][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 24, tgid 24 (ksoftirqd/1), ts 710505579843, free_ts 710490548206 [ 711.726984][ C0] post_alloc_hook+0x2d1/0x350 [ 711.731728][ C0] get_page_from_freelist+0xfce/0x2f80 [ 711.737174][ C0] __alloc_pages_noprof+0x223/0x25b0 [ 711.742431][ C0] alloc_pages_mpol_noprof+0x2c9/0x610 [ 711.747865][ C0] new_slab+0x2c9/0x410 [ 711.751992][ C0] ___slab_alloc+0xdac/0x1870 [ 711.756646][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 711.761989][ C0] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 711.767359][ C0] inet_twsk_alloc+0x120/0x970 [ 711.772096][ C0] tcp_time_wait+0x5f/0xe10 [ 711.776573][ C0] tcp_rcv_state_process+0x4935/0x4c40 [ 711.782010][ C0] tcp_v6_do_rcv+0x492/0x1730 [ 711.786660][ C0] tcp_v6_rcv+0x30b3/0x3fd0 [ 711.791138][ C0] ip6_protocol_deliver_rcu+0x180/0x1510 [ 711.796750][ C0] ip6_input_finish+0x14f/0x2f0 [ 711.801578][ C0] ip6_input+0xa1/0xd0 [ 711.805621][ C0] page last free pid 13320 tgid 13320 stack trace: [ 711.812090][ C0] free_unref_page+0x661/0x1080 [ 711.816926][ C0] __mmdrop+0xd5/0x460 [ 711.820983][ C0] __mmput+0x404/0x4c0 [ 711.825028][ C0] mmput+0x62/0x70 [ 711.828722][ C0] do_exit+0x9bf/0x2d70 [ 711.832853][ C0] do_group_exit+0xd3/0x2a0 [ 711.837329][ C0] __x64_sys_exit_group+0x3e/0x50 [ 711.842329][ C0] x64_sys_call+0x151f/0x1720 [ 711.847154][ C0] do_syscall_64+0xcd/0x250 [ 711.851633][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.857501][ C0] [ 711.859893][ C0] Memory state around the buggy address: [ 711.865494][ C0] ffff8880440ee380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 711.873564][ C0] ffff8880440ee400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 711.881603][ C0] >ffff8880440ee480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 711.889635][ C0] ^ [ 711.894456][ C0] ffff8880440ee500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 711.902489][ C0] ffff8880440ee580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 711.910519][ C0] ================================================================== [ 711.918682][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 711.925887][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-rc1-syzkaller-00036-g5076001689e4 #0 [ 711.936578][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 711.946651][ C0] Workqueue: krdsd rds_send_worker [ 711.951878][ C0] Call Trace: [ 711.955170][ C0] [ 711.958017][ C0] dump_stack_lvl+0x3d/0x1f0 [ 711.962624][ C0] panic+0x71d/0x800 [ 711.966538][ C0] ? __pfx_panic+0x10/0x10 [ 711.970982][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 711.976107][ C0] check_panic_on_warn+0xab/0xb0 [ 711.981031][ C0] end_report+0x117/0x180 [ 711.985354][ C0] kasan_report+0xe9/0x110 [ 711.989751][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 711.994858][ C0] ? selinux_ip_output+0x1e0/0x1f0 [ 711.999946][ C0] selinux_ip_output+0x1e0/0x1f0 [ 712.004883][ C0] ? __pfx_selinux_ip_output+0x10/0x10 [ 712.010381][ C0] nf_hook_slow+0xbb/0x200 [ 712.014789][ C0] nf_hook+0x474/0x7d0 [ 712.018842][ C0] ? __pfx_dst_output+0x10/0x10 [ 712.023668][ C0] ? __pfx_nf_hook+0x10/0x10 [ 712.028232][ C0] ? __pfx_lock_release+0x10/0x10 [ 712.033238][ C0] ? __pfx_dst_output+0x10/0x10 [ 712.038087][ C0] ip6_xmit+0xd44/0x2130 [ 712.042306][ C0] ? __pfx_dst_output+0x10/0x10 [ 712.047133][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 712.051801][ C0] ? xfrm_lookup_route+0x6a/0x200 [ 712.056805][ C0] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 712.062065][ C0] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 712.067687][ C0] tcp_v6_send_response+0x11d9/0x25e0 [ 712.073038][ C0] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 712.078729][ C0] ? hlock_class+0x4e/0x130 [ 712.083230][ C0] ? rcu_is_watching+0x12/0xc0 [ 712.087971][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 712.093146][ C0] ? __pfx_lock_release+0x10/0x10 [ 712.098159][ C0] tcp_v6_send_reset+0x636/0x1590 [ 712.103158][ C0] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 712.108589][ C0] ? tcp_timewait_state_process+0x299/0x1040 [ 712.114545][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 712.119722][ C0] ? __asan_memmove+0x3c/0x60 [ 712.124391][ C0] tcp_v6_rcv+0x311f/0x3fd0 [ 712.128870][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 712.133695][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 712.138866][ C0] ? find_held_lock+0x2d/0x110 [ 712.143621][ C0] ? __pfx_raw6_local_deliver+0x10/0x10 [ 712.149142][ C0] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 712.153965][ C0] ip6_protocol_deliver_rcu+0x180/0x1510 [ 712.159592][ C0] ip6_input_finish+0x14f/0x2f0 [ 712.164420][ C0] ip6_input+0xa1/0xd0 [ 712.168477][ C0] ? __pfx_ip6_input+0x10/0x10 [ 712.173226][ C0] ip6_rcv_finish+0x1ad/0x5b0 [ 712.177877][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 712.183051][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 712.188227][ C0] ip_sabotage_in+0x21b/0x290 [ 712.192880][ C0] nf_hook_slow+0xbb/0x200 [ 712.197297][ C0] nf_hook.constprop.0+0x42e/0x750 [ 712.202441][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 712.207668][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 712.213320][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 712.218532][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 712.223189][ C0] ipv6_rcv+0xa4/0x680 [ 712.227258][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 712.231911][ C0] __netif_receive_skb_one_core+0x12e/0x1e0 [ 712.237784][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 712.244188][ C0] ? rcu_is_watching+0x12/0xc0 [ 712.248933][ C0] ? nf_hook_slow+0x132/0x200 [ 712.253586][ C0] ? netif_receive_skb+0x109/0x7b0 [ 712.258689][ C0] __netif_receive_skb+0x1d/0x160 [ 712.263692][ C0] netif_receive_skb+0x13f/0x7b0 [ 712.268606][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 712.274043][ C0] br_pass_frame_up+0x346/0x490 [ 712.278887][ C0] br_handle_frame_finish+0x122c/0x1c80 [ 712.284411][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 712.290283][ C0] ? ip6t_do_table+0xd20/0x1d40 [ 712.295109][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 712.300392][ C0] ? ip6t_do_table+0xd50/0x1d40 [ 712.305235][ C0] ? nf_hook_slow+0x132/0x200 [ 712.309899][ C0] br_nf_hook_thresh+0x303/0x410 [ 712.314814][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 712.320690][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 712.326127][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 712.331997][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 712.337871][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 712.343743][ C0] br_nf_pre_routing_finish_ipv6+0x76a/0xfb0 [ 712.349701][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 712.355580][ C0] br_nf_pre_routing_ipv6+0x3ce/0x8c0 [ 712.360943][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 712.366813][ C0] ? __pfx_lock_release+0x10/0x10 [ 712.371812][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 712.376991][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 712.383469][ C0] br_nf_pre_routing+0x860/0x15b0 [ 712.388488][ C0] br_handle_frame+0x9eb/0x1490 [ 712.393321][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 712.398587][ C0] ? sk_skb_reason_drop+0x67/0x1a0 [ 712.403688][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 712.409575][ C0] ? __pfx_packet_rcv+0x10/0x10 [ 712.414408][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 712.419686][ C0] __netif_receive_skb_core.constprop.0+0xa76/0x4470 [ 712.426344][ C0] ? hlock_class+0x4e/0x130 [ 712.430823][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 712.435821][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 712.442907][ C0] ? hlock_class+0x4e/0x130 [ 712.447385][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 712.452313][ C0] ? mark_lock+0xb5/0xc60 [ 712.456631][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 712.461811][ C0] ? find_held_lock+0x2d/0x110 [ 712.466555][ C0] ? __pfx_mark_lock+0x10/0x10 [ 712.471296][ C0] ? process_backlog+0x3f1/0x15f0 [ 712.476300][ C0] __netif_receive_skb_one_core+0xb1/0x1e0 [ 712.482105][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 712.488515][ C0] ? rcu_is_watching+0x12/0xc0 [ 712.493256][ C0] ? process_backlog+0x3f1/0x15f0 [ 712.498257][ C0] ? process_backlog+0x3f1/0x15f0 [ 712.503257][ C0] __netif_receive_skb+0x1d/0x160 [ 712.508262][ C0] process_backlog+0x443/0x15f0 [ 712.513091][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 712.518443][ C0] net_rx_action+0xa94/0x1010 [ 712.523112][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 712.528198][ C0] ? __pfx_mark_lock+0x10/0x10 [ 712.532935][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 712.538112][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 712.543297][ C0] ? sched_clock+0x38/0x60 [ 712.547705][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 712.552531][ C0] ? mark_held_locks+0x9f/0xe0 [ 712.557271][ C0] handle_softirqs+0x213/0x8f0 [ 712.562011][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 712.567271][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 712.572533][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 712.577620][ C0] do_softirq+0xb2/0xf0 [ 712.581757][ C0] [ 712.584679][ C0] [ 712.587634][ C0] __local_bh_enable_ip+0x100/0x120 [ 712.592828][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 712.597922][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 712.602839][ C0] ? lockdep_unlock+0x11a/0x290 [ 712.607667][ C0] ? __lock_acquire+0x2077/0x3c40 [ 712.612669][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 712.618017][ C0] ? hlock_class+0x4e/0x130 [ 712.622497][ C0] ? mark_lock+0xb5/0xc60 [ 712.626801][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 712.631988][ C0] ? __pfx_mark_lock+0x10/0x10 [ 712.636740][ C0] ? find_held_lock+0x2d/0x110 [ 712.641486][ C0] ? ip6_finish_output2+0xb1b/0x2070 [ 712.646818][ C0] ? __pfx_lock_release+0x10/0x10 [ 712.651860][ C0] ? __asan_memcpy+0x3c/0x60 [ 712.656431][ C0] ? eth_header+0x11c/0x1f0 [ 712.660912][ C0] neigh_resolve_output+0x5bc/0x950 [ 712.666088][ C0] ip6_finish_output2+0xb1b/0x2070 [ 712.671191][ C0] ip6_finish_output+0x3f9/0x1360 [ 712.676300][ C0] ip6_output+0x1f8/0x540 [ 712.680616][ C0] ? __pfx_ip6_output+0x10/0x10 [ 712.685440][ C0] ip6_xmit+0x1234/0x2130 [ 712.689746][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 712.694398][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 712.700009][ C0] ? rcu_is_watching+0x12/0xc0 [ 712.704749][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 712.709925][ C0] ? __pfx_mark_lock+0x10/0x10 [ 712.714677][ C0] ? inet6_csk_xmit+0x18a/0x740 [ 712.719505][ C0] inet6_csk_xmit+0x3ce/0x740 [ 712.724159][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 712.729352][ C0] ? csum_ipv6_magic+0x296/0x310 [ 712.734284][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 712.739474][ C0] __tcp_transmit_skb+0x1b02/0x3df0 [ 712.744654][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 712.750172][ C0] ? __pfx_lock_release+0x10/0x10 [ 712.755171][ C0] ? ktime_get+0x206/0x300 [ 712.759560][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 712.764735][ C0] tcp_write_xmit+0x12b1/0x8560 [ 712.769567][ C0] __tcp_push_pending_frames+0xaf/0x390 [ 712.775109][ C0] tcp_sendmsg_locked+0x25b3/0x3770 [ 712.780288][ C0] ? mark_lock+0xb5/0xc60 [ 712.784592][ C0] ? mark_held_locks+0x9f/0xe0 [ 712.789330][ C0] ? __pfx_mark_lock+0x10/0x10 [ 712.794069][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 712.799591][ C0] ? tcp_sendmsg+0x20/0x50 [ 712.804001][ C0] ? mark_held_locks+0x9f/0xe0 [ 712.808738][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 712.814001][ C0] tcp_sendmsg+0x2e/0x50 [ 712.818219][ C0] ? __pfx_tcp_sendmsg+0x10/0x10 [ 712.823133][ C0] inet6_sendmsg+0xb9/0x140 [ 712.827610][ C0] sock_sendmsg+0x2b5/0x470 [ 712.832135][ C0] ? __pfx_sock_sendmsg+0x10/0x10 [ 712.837181][ C0] rds_tcp_xmit+0x34e/0xc50 [ 712.841685][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 712.846685][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 712.852120][ C0] ? __asan_memset+0x23/0x50 [ 712.856687][ C0] ? rds_message_map_pages+0x2d9/0x390 [ 712.862121][ C0] ? __pfx_rds_tcp_xmit+0x10/0x10 [ 712.867119][ C0] rds_send_xmit+0xf36/0x24a0 [ 712.871783][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 712.876882][ C0] ? process_one_work+0x921/0x1ba0 [ 712.881970][ C0] rds_send_worker+0x8f/0x2e0 [ 712.886624][ C0] process_one_work+0x9c5/0x1ba0 [ 712.891540][ C0] ? __pfx_rds_tcp_accept_worker+0x10/0x10 [ 712.897323][ C0] ? __pfx_process_one_work+0x10/0x10 [ 712.902683][ C0] ? rcu_is_watching+0x12/0xc0 [ 712.907423][ C0] ? assign_work+0x1a0/0x250 [ 712.911988][ C0] worker_thread+0x6c8/0xf00 [ 712.916554][ C0] ? __pfx_worker_thread+0x10/0x10 [ 712.921639][ C0] kthread+0x2c1/0x3a0 [ 712.925701][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.930889][ C0] ? __pfx_kthread+0x10/0x10 [ 712.935456][ C0] ret_from_fork+0x45/0x80 [ 712.939847][ C0] ? __pfx_kthread+0x10/0x10 [ 712.944412][ C0] ret_from_fork_asm+0x1a/0x30 [ 712.949159][ C0] [ 712.952378][ C0] Kernel Offset: disabled [ 712.956680][ C0] Rebooting in 86400 seconds..