last executing test programs: 1m16.50887006s ago: executing program 4 (id=57): bpf$MAP_CREATE(0x0, 0x0, 0x73) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix={0x0, 0x4, 0x32314258, 0xd, 0x2, 0x40001, 0x8, 0x2b152c52, 0x3, 0x6, 0x0, 0x5}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="499712d3e7dc38b3f0a0fe5745a43f965f7af587a83189bec53475b723234613a40e5ed9815fb54ff412549b4e66cdea71384471e48fa4cd844712ca25df6488ff271886fc046d0dd7bf1783ff90ecdcbbca85c9cedd8f29b96dc2d8d99e90f48ca5d2c4740f3c62323a811939917a67a4410f33bdc0c8cf4ff6daf038d99779b785351a075f94ef9d8f477660677e71d7a37a76e2c7c862989066fb40115292a16c6c9a5aa2584f320fb8c716a7cc951b3703112921a3dd7eeb2c4526cfc8f78d6435ee915c94c8469e2d0312509d68fb2f9bb2d9264ae2f44cc5508c7aee96d3d76bf9d355fcc48012", 0xea}, {&(0x7f00000004c0)="ebd6461ca10d645337e17dbc69a32794b995004590219792785dc202354d42df4b62da46fd7aeffd08689c20e74553cf35607cf3d8ba498919bab715089df241036edd4d1c964c2f4824de5a7bde68e7df8a90d3bc1e76141ba253531550916783ca9ccc2cb5c5c2107864293b719d2c1445111458f62f99456f42614f265ed2d5981dbfa2c942d43394fc00fa266c9dc33db30fb02fbd19570681a0342b6c63", 0xa0}, {&(0x7f0000000180)="5903b877266d139bf8852ecfb566fd8131c84d0ba17fa704cb47ee0aa52de9a46132e0df1a2092a8d2d639c54b8d209a38be47cc49636946", 0x38}, {&(0x7f00000001c0)="7b4843d416970eb8d9255cf57ab01d7dd7c75949a42384f06fed468c53d8", 0x1e}, {&(0x7f0000000580)="3655dff679d9d8a89dc033e37f4254c7ff0e28e324ebfb5a3b774f73c8ad3f417284fc5ec5003aa97f86a3c93dcffe414dd9e44ef2e12a90a978f62f5323523f72d52d465f0a39c01e9a049dc9f7cfa3983776a23b8f216323b59baa425923a1b5a7b4cc5d6467241fa46d5748ae92071b6d6e1433de009da1fac469042892b6426caaa48b0adf9f6022043476d706498219e93d2c1d7b4aa28a82880f559574d26baeaeec5322144cbd248ac8b2ff514bc80b955f7289b47b947beb5b10092d5fa242b84cb7911be931a960728e20c7a93622754a34f755ee5683c5e254ef7256c5f4", 0xe3}, {&(0x7f0000000240)="f2058c1133b83d33665655e0bc8b9bcc28bf39ba4b9309f893de3e46cb20489efbd336b5a924e43e6e84f588e88062e574324bf50f65f3370a6b6fcba4431b27fd247cdf54cd5ff5", 0x48}], 0x6, &(0x7f0000000700)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x48}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0xf0, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x0, 0x0, 0x1}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff, 0xff, 0x6, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0x1bd, 0x4, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone3(&(0x7f0000000a40)={0x20010000, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0, {0x25}, &(0x7f0000000880)=""/110, 0x6e, &(0x7f0000000900)=""/147, &(0x7f0000000a00)=[r2, r2, 0x0, r2, r2, r2, r2, r2, r2], 0x9}, 0x58) tgkill(r5, r2, 0x2d) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) clock_getres(0xfffffffffffffff5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000001070000040000000000260018110000ed689fcadaea19168f53444f2c4d55441938c749443cc8fce895a99c53deba756bd24914b2df2d4ab343c48f53de9ee23c2cfc55f88f65dd0262f44688e526ad437e703caae55013977bd41530fc8dff06e5429b6bdb8f66646ffd814b4348335dbefcaa359957e4daf573", @ANYRES32=r6, @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8000, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000b00)=0x2) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000b40), 0x4800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1m15.612441431s ago: executing program 4 (id=66): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0xa8b00, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000380)={0x80, 0x40, 0xe, 0xc0, 0x9, "e4cf57195d415ae4"}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socket$alg(0x26, 0x5, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r6 = dup(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x6, 0x8000, 0x0, 0x0, 0x0, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000b00), 0x149e01, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setregid(0xffffffffffffffff, r11) sendmmsg$unix(r4, &(0x7f0000000c00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000003c0)="26fd7fec384b38c982ea6e5d9477a66930b73af92cf55b7ff9a8949f1276b06d5123b4b2184c59fe0a909546a07f8571fa7a26e6b20f05fd2cbd1a8f54cfb9368efd5eb01eae87edc3e60bed97f8e9b5342effc7d902ca9abf53b54f551e38dc8e0668d114faec9d9906b510cea7b7a086772c3567649b0864f456ed919f135886f289603d5cb32f754fd1ad4a68572cdc628a37f7f7e126b9e04bd88fae638aac7838fcd08b77a8366c", 0xaa}, {&(0x7f0000000300)="96ede58004ecd7663b473e9fed1582d0247f75242d854771b27e984f655437a0177e00ff3de98dfa13fc54be7220afc30dccd7fe5f68a8bbe8a935ddcdd215c81a9e5c21bf35e94e80b170bb53c4e3c8ae31f0e3c498", 0x56}, {&(0x7f0000000480)="a6e0cdd5bf531fa5d9026c8277df3043a20bdc1a5f047d3e91f38db53d64cd7fa8a8cb21f68286655ce304cafae864043a6f11d5bb88cf071ccce86bc6c34c14f21b26fa41f26888151b0e48c5f5da1ff1cba2768aab51eb8f472acf77470ad4661f53fb3ebc", 0x66}, {&(0x7f0000000040)="684f5b212e8c0a2508616f60ae6845c771db4700d409", 0x16}, {&(0x7f0000000500)="48df97df83daef1a0865496c6bb9cf84b5e0d6bd3f6274012a1562130d6f0c301687cabaa76d3e48cc7cd3684d233e9c870b24d4e85b72ae0b71a36f7bcbd54ab6173c781e46ffcaa63cc73f7faaafd80ac4bb9dfa755edd4d75a3db27d3c774846013250b75b2657e661408147b824761b4c8aaaf80d08e3785c264bb2e7e5cb532cfc95a6468", 0x87}, {&(0x7f00000005c0)="fad5ab517893bc409f5e9f80db5cd5da1b4a08d5118b8cd3b68db90d6d5e23515e968ba6ed22ad81518465070622ae6ff95ab5d5ca5ab1bc0d9971cd63ac959791debbdacc4c8042f4218921323c198e35fe4012e874b611d41e22f855c0fe65c9a33d655360c8e89b5132e055678c040e3a7ae6092f99f7b5002eedb7c1eb012eb3e30fb48744626febae3c117e176716681af3a6926bc0ce6db52918a92f29dc3b16d80acb84cbd720", 0xaa}], 0x6, &(0x7f0000000280), 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f27ba0fcf82638a60bd317d43a3f0c04ce17319e86bd2f9c049c33", 0x1b}, {&(0x7f0000000740)="db72060552a23a3fd7ac9bd208f98155cf38a3d36e005edeb762e4948c24b8b4d55d1e409d6551", 0x27}, {&(0x7f0000000780)="299f036d1e49cab4a0eedada8d46cff26b872ae9c7f8107740751e80da99be67165d0529cffdac83799b85e56cbd8cf9197f34dccbf07f97199e046327e1e35847db674686ad75a0d647a2be47702e49d24462ba9a213f9613c663239e", 0x5d}, {&(0x7f0000000800)="6541e31ec58e1615515db4ebe2763bc99622e50e1e82be6a21b78ec35a3287ec723eb5551a05558084084bb9a02db2c47ac7d62bdb828655d773c4581fc6dd5cf0870cbf4908f66b205945704278a771e70f7df75ec7c3870708ef489a287063d9f28842224704ec84384311d740", 0x6e}, {&(0x7f0000000880)="c22f9e1d19d7eb88a9074ca7eb079c08be6bb88f05fd99b1697953cc50a2ebba0adf381008208adf1111b7ccdab120af07d229acc3d8aa467ab34b71c23693d9f4754e23368642d3e6eda580ca0d0f71153702f48cb4ae71b5d3fbcd4f3d9a8ee92579ad2f11d28eee4deb63d2d2950e95017c3d7fb82a469a6f929aada448147559c4fbb87d3ffb3bb0bb08f16b03f523bdf577dac19e3593a1bff878dadb763a536eaa9944a3ce5fcb120f33d4d255", 0xb0}, {&(0x7f0000000940)="bba0d342d028bdb0", 0x8}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="80000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4000091}}], 0x2, 0x4040) sendfile(r5, r6, 0x0, 0x80006) 1m14.650679379s ago: executing program 4 (id=71): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', r5, 0x2f, 0xf8, 0xf8, 0x1, 0x93, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7, 0x0, 0x1da}}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115, 0x210}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r7, 0xe0, 0x40c00}}}}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4028000) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) 1m13.278061435s ago: executing program 4 (id=77): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x2, &(0x7f0000000300)=':\x00'}, 0x30) lsm_list_modules(0x0, &(0x7f0000000140), 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) r6 = socket$inet6(0xa, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='afs_folio_dirty\x00', r0, 0x0, 0x7}, 0x18) listen(r6, 0x5) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, 0x0, 0x0) 1m12.273456807s ago: executing program 4 (id=81): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0x0, 0x0, 0x6a}}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000107102, 0x0) r4 = dup(r3) fadvise64(r4, 0x18, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x48, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100000000febd0000000000000a28000001000a0101000000005f1aefd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001b4736af6a85cb24ad481af78e0102f2cebd31ef48b245573dcec98f038d3ccb9f29d876dddeb1f6409ddb561b1a7f7a80f12e354d0d19bc2f0eb176335f935dbb6b73a91839549189655e02962a09eb87988c86e0f0b"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x24048800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) mlock(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m10.532970871s ago: executing program 4 (id=86): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000010c0)) (async) r1 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x7, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000ccbc008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r8, &(0x7f00000000c0)=""/108, 0x6c) (async) write$dsp(r7, &(0x7f0000002000)='`', 0x88020) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@gettaction={0x104, 0x32, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x151}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x16}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x47}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ca}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x76c}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 54.838935628s ago: executing program 32 (id=86): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000010c0)) (async) r1 = socket$netlink(0x10, 0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x7, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000ccbc008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r8, &(0x7f00000000c0)=""/108, 0x6c) (async) write$dsp(r7, &(0x7f0000002000)='`', 0x88020) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@gettaction={0x104, 0x32, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x151}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x16}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x47}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ca}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x76c}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 7.566601303s ago: executing program 3 (id=337): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001740)='/sys/power/sync_on_suspend', 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c00d46748fe5b3584e6f344a2f1dd649b2dbe34080e4d12e38ce67a2af1e4947cf7a622cf8e"]) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x301000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=r5, @ANYBLOB="868f54"], 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './cgroup.cpu/cgroup.procs\x00'}) copy_file_range(r1, &(0x7f0000000000)=0x7, r1, 0x0, 0x7, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00') getsockopt$inet_int(r8, 0x0, 0x16, 0x0, &(0x7f0000000240)) r9 = syz_open_dev$video(&(0x7f0000000540), 0x0, 0xe0901) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f0000000000)={0x2, 0x2, 0x0, {0xe, 0x9, 0x80000002, 0x4}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x1638, 0x1408, 0x1408, 0x12d0, 0x12d0, 0x12d0, 0x1568, 0x1568, 0x1568, 0x1568, 0x1568, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x3, 0x1, 0x4}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1698) 5.006373802s ago: executing program 5 (id=352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000500000000004c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) execve(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000001280), &(0x7f0000001500)={[&(0x7f0000001440)='/dev/ptmx\x00', 0x0, 0x0]}) syz_usb_connect(0x3, 0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="120100005baa7f2058046e7064350000000109021a00010000000009040000000e0100eb072402"], 0x0) 4.494686359s ago: executing program 3 (id=354): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x148) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='btrfs\x00', 0x8007, 0x0) 4.409384887s ago: executing program 3 (id=355): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x1}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x60) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="300000002100110000000000000000000a140000ff0000000000000014000100"], 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x300) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.013268391s ago: executing program 3 (id=357): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000008400000006000000010000000000000041b703a8cc27a94b1d186144ace77fd7b0f416eafbdb28182a289f1ae69fc9e71d70f752c6a94c41a7c501286cbb609ddb1c935759f8eaa64c3640c6d8dda2bed45c45677485f1c13e8c4e7df9e783569123323bd9e505bb1a1fd5ea0f990ed9461ca88a4ded8f8ddab43a6756d959fb2daea9583b6664cef17f810d1e139f106a8998a8b328d023c1fa8767ad5d6ae558e09a0179390cc5bf5fc203fe6a63bb3ec49bcb8ec49ccdec81968b7059fe53c4d51aeb"], 0x18}], 0x1, 0x40000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) socket$packet(0x11, 0x2, 0x300) inotify_init1(0x0) memfd_secret(0x80000) epoll_create1(0x0) r3 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0xb}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f0000000480)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x32, 0x0, r1, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="0ff0", 0x2}, {&(0x7f0000000300)="1ec039b6797d55eebac77237b8d645c2667a4acb602674814a24e64e0431aa2ae7", 0x21}, {&(0x7f0000000d00)="7aecf6c99a65717c29f5b0413b92b31f13f72db168ccaccea337b0afd5ac84b939bd7675904948e50126c68c629100c3f155565b5f0ded4cceeae7bbecf8479bf43aff10c76a6327fc94d8bd574c191357d9503b6b0f5c54e5004567e29e14e823c001ad58282eb330d37b8ac584518324303cfaf1f3a3b87fdbf31d7de0e9674551abdafcacd8321bfab838ed850943b6bf42de37bb64306adc50c3ee071e28890ec6ab6046214550c8735af6122109d163c2752c499c4def9827aff2b763c813df93e4aa667ef819aa75d2e9477009d466fad27a2ea70e2cd7b04ca2a6d4d957850f9d9de2ade2bb436d100cebc09590798747d26603b23555d766a9588796c9cd831fedd622a079230518b74504511c252c0b9d2cce33c91495ee964477e7d146ff4186cd8dfc01a8d81c9c31d822fd945a119f54624e25f0e75d785e18af8cdf527531457e79d2722d67626fd2a115f4eb3b143284aef0d86b466a794b71bfe688eb7d9e964c39a7d3123a161d89390862b556a28f749e020abaec3687cca7291690f2586c671ab17416c91e507b5c71a8710fce19ea7b66e48c09247d7a7671dbc596866202dbc096d50e3c1bf4392b98c2d8bf0d2deaa3af2212d605de532549c47d55abe75a6f57d8394d4a5b24c6e5cde47fab9846a41fc8202b24a0baf5b8da7aca3bb26fd423cbedae56344cc6d37bef77938901ff7220c7b3dff854b60f84457c27670ec660fc91a33a5cab6ac78229aaa28fbab93af10c7508ce5c8d41adfa0a97378ce6c55f441e6b8dd1f8c6a2b788dc7deb12c9f7dcd6e7519f538314d8118c1b246ab24ed8c32a79d601609d9a179382aa7d9c15b57c6d4d8e0cbd85a185aeaea4a11aa6d81e995e69ed98f1b8296d3a84ea57a9bebed05747af7df3fe9f87909b648e6c4bedfa7922fd85769de0a53a51016d600f11ba45b65b826fdb73f6167e54243cd82338d453c6ac46d4f2db48022027797422253eb53bd8f1ea07723e01652e74a76459290f901f3bb7200d2ac24d8dd4b922b490add0a0e17abdb1c793ffdc0d4e296fda5ffdd3f095dffba58ebf9812d30bd7df43127134c210bce35274596832e8bcb15c172c3ccde2ca16ff367652b4f56b4d3b3f4f71e9a7a2bb39308b24387d7edc35575fbbdba119c40f3c33670518f8c312e0956485646a97c15822d5e29d6b78ca279b557bdcc3c270fcd05ca65f5af3465a204e74bdb70ca5b095535abace8973ba185ab26fb978c2398fb0eb50056ba4692f1ebe45266fe35d06f4da97e1cdeca2c01d4860edad8182c207cb649d87597573b6bb1c5977ad7f69d0cfe2b2d039a19796a26021e7eeea9a8fb62394f7bbdbb129e56b3f15f0d632628f91ac5e4718f02f937a7c11410b1f1aab2e30015325211294238828dc366456f20a9d11015541afaf94a72c2e788be632cba3e54b3bc36a76f8e2d6662595a64eee00100bdcd54af3d03ea78601966c3f37c710d6a6dba99278ca2486570eafa0fe519013200d33f19540e96059f8ab4f5d1d39d1ee32da8616548898330820165c4d448ae55b84db18ed6b963478ea89c295c02edaabe0d2a243d288d0f862ffe0bb055d0ddc4af8164c72c6dfa1a2c962892b16b56712654aa7455f8899d4cf57ddd7636b0ce6a79bc31181ac54e3cac1e880206fb7992ed47b121834d09acaf5dd7388ba120ece4f9e04f449941f4d3d3040ddf726391c510ec588089073ae4f82fee553cd695252a5c3ff477ff0205fe8f40dc40beece1b0b1776cf786b07a5a853ffd89cbff3395ed92a4a977367ad4f536c84c51d22a6aa258053b564096aa0f6acf781985c5241e5f68d9f09c9732db54be4cdbf52660e400cb5753dd09861d6a0f6e193ca9fa38c72132bc8d1558ffe61b40187f0a25cd3e93c6646d5bf377d37a5dec8b981bce3483145db2ced3c9156fb1a1e9597fb40dff09cabd34673f2d75a1679c39db94308ff23ad576b2ef744ac7fc5f29bd286a35104da1f483ebf82767043b47e0eb78193f09eedc71af0b7f8d0914a12338469a48236803539b3a8bbc53275f296ec0ee89077fa24e823cda80886cb865c43b48a9deed91bc7a3faf551d9a9d5cad1fe18b97cc3b4bb276714728baf78c18921063b5988012dd496cee2544fbcc88c9a38d643cfa42c01c8738f57db4cb10b58931a6656197d89f4041a677d448d980f1be36b879e625cd25d2067039c6731bb29ef2e9b76d274cd3c14613ace774f4c2ccf216c019ab4fcc20975b652c880c3d6691ed26e669154a264b11b98cf8b4c7423981278a482b8fa1055c19b572208ded793c92cfe486d2b460deed33e8241765ddbe39a574a98b204a8f18dc13f9a16aec3aba8fc411751e0705a328432df9bfd54383d8110adb551f7590807a7ea89b406fb3b0ba5d6137caba9387dcab9e28f0cf916f6688e539c98d4b8c41fbc074b9058b52a4531a9f3019d18f82223562c67516247de586208b723511b295997ed88d3a18b1e9373fa19277289433575e9051b70824e444d671029cbcfe0c16bd3a139ac18b5bbdb815da77951a555edb368a486595a801b3d37b88c0916a0a08f91bb0a9c47b0a0c773b9a96067783b19108e846ae039d92ae37c45e6ee1fc498d7c71455998d9981fcaf152cf2ca5a4ad0cb22c2d31519bf8757c5be50df01d92c02b36f507a3a936ca802804eb0a7e7a107f6e24a2c3aeb9873fc144b37b7b42e744571f8407945ce48951a3352c5df7f183ba75df619d9d113b7066d6f46e2d2136fbab9b68c7d0a7916eb4fd82f65e0f437cc62a0f0321142a5785dbb558e62536c08cdc3a5cc60358efccc1edfb4a3fc86ac6ff2b06fe59c6f9e9b7428314baf9021ca55c9a5bd3532089dbd4936da4fee9243166305452b5af7f2e8b8ac6a3b55242a0a0a80dd02c0b7dec952e3cdc621d0e55dc4624ce303bd052ff3dc8c846b295450d2f4e60d825d082f5a1c52457631045c222b77eb7b32816db394a112bc5901ae1b2d7aa044d28126f608677bf3161d0d1cf15c4960218486e5c1a0ea48abb6d730813dcbe55ece6bc26d60ca641042ae9ba196090f333c779fd68317d96ab086419c2667eb4c607807d820300ef96eba49effc201115dd0abce4b1ee7eccfb005acaf469e24352e292def54bb7f272b3c6e13ea6d138f42eb0c32f0df37f398de7fe20e58027b9d4183171fcaab6a180c74ebeedf6cd96e3cca2604bf8c8c4c1d321ca1721a17e37717c698830a0cf7fa6c1ffc53dd9f327715031155a936957930eae7da924b0d578c5a58131bdb37ea6a25596c6df74e614e23b83f067018f51c5ff65dc25e15c5c5b2defcb4a82b75989183728acb79f1ce2f0f4d094c578563c52e975bf68f657b9af12940a9d4f162b56466f2494ecfa97411494a8d2f88e7998d59a067771394d652644a32cd215683ac9d4fbff6ffa53286b67acc0e2750e5b406977ac7791b0650782b9a389b124186b4dd96b2510de9f3585a887073b459e124d03e037548dafd3b051e114c0e122ba28322254bbbee1a9bb086cac47338a41271fe99c1651ca25ef3dac747980721df9cc5f708847a5b76ea2f71bc6959754082a205cc24cbb9bf256bedd9aa534811e8e10c41a448fd843ea575bfcb03a15b18db2228c514468e1bc345a89a55153f507e00663da18128afe81584b07d8e39292fe549bb7dfc230605ab2ff36626f037799098da70abe11959f4b5d16bf4a40c66901d6f631de8714ab287d9c67ade168a821a2c2f40537bf14a7cff42d16fd4deee6cfc85e63e47906965adb5d9b929f366b4dc5d1d15099f4ffc6fc75bc26dc2b598c4d999f9d6b08e30eedfad673eae5600b33c221608468bfb72bc45c3ece00612e785a934ba2b5a3f9978eff34d189c5f9f478f87f67291295fdad0718f69ee4c11c8946b9feb6084ddd3c9974639689729969a490a0c3ed109fe75d695a446749a977b4b0dc5d400ac3b6a869e534dc40733b3968ee5719a88f0f16c47071a3a20f9047cbb59e1d3d3b570b4ea5bb62e6bb5f38e81a4a1b58a98ad17bafdbf937d5d7c2c92b7f48a609f4cfb02875cbf7fb03d88af4212ed3c94e831081af0b85f7303b5fe015450c5cdcfd2333edda51070b8c72f06b3e372b1911d2923d20e6484326c3ea3ebb4a248af4f6723403c90b4b4fcae609585c5a4039c173fc92c67bb59d1cd2504d89de339e69de7c473b7c426a3462e45f1f61d67096dbe13c19bb46572cfed37fea0e713481d2bbfbf96f8cee3c1d9b441d916d2905ab43c2135f1bbc9bac393e7acfc6810317659838ea88f1f379e12c16a91ea51121da2839d8a0ec5e34297411280b3537d57f5446e8defd5d37e49886a9d503ab4a1d896aef47eb8b4a0217fbcb493749e6c42d6284b84b4f3762e550c77c7e2b3842d1b4b1e14f75948fc49ccac6849edb206440dd8c4565c04645de3d5dfcf9d1853717b297f62e49d2bcd3084a6c122145c95014d07325b63c11f647728d8ad556792c9670ed49a64af4e4887f0f18b298a0faff5bcd25444389c222071d87f4c7cfbba8cd7baf2598098ebec944b15b7d8939d139c632bb1dad6348297464d3df523e6d5bc97edf8b61fb870fb8d83efd84fe0ec17d1740a5a37318246f8270b88bc358d3716842b3f6207b2dffc93b179188e5306b5690ab003af08ced5e2e71f1e6d189255dfb5def1911809190f681e65bfcf90170c7f3e0a0d6854a043837adcca17c299f13dbdd3015a809d53510167ee2e8c753b45c9814a8d2622de7cb8649eccb724a063fb0c28c61f1e2c2c1b46a1d5571ef38819f64832830dee242690db8913d22c201510895e5c7e22eaec5ab52ec00e485627b4be21f0fdd83c5e8d9e05c9b29c3d37a4d4d52c13345383c358cce580894c2a29e6f5afabff3abd076d2c124f9a48de993b7f2b845fcbfbecbbf805770d1536cd2dc42dac5616702816a0c98a747012a0a3f454ca751ae305a49facdb9e91ec28d1598e14a165fe3cc4235846855fcf0c8fe0c1be2b67381960fa79e57729a105061b4ef73c5cddd0d3d824d3ea6dd34df6e8ff6cbdb76ad6d283bbe87415b7d51f082166c72339ba2a15325ff4346deee120a071cbf34311d598fb8463b57f96f9d3eaeb519f72376999f84738df2d768da2ad67a93800370d1ddbeec2b325659e0327312bdeafb8c0b09b4a619ad92c870b860055e378852ebb5ef74075b87fbde99911100b818b5f33e774ae79d5e46951a68f6a2b0276d922babd28ca82341cacc7ef97516eced16db43ed97595e6d64f3f8d6df58ebad021827e53fea6b27f0b4ec89ca34d77163b5aea1438d26751d4954fc0b2ab71751de324ee359f7717dcdd022fecbdbc6cb36447403de034a0d24b093e3b759e2280f5ac8acdebe13d01b930fa9852e2a638a57c3f07b29cf1aa5664bf04f07ae4603b5085b54407d08e2f3c9aa2db41ac9f1b99e13a3570460a85a5569f632aa641f6a66a5e7b9f613818c77d54af789f0caf8fbfa3178749d9d07eacdaa7f09a605f5141e8e2cc8f5c78805eb8466d4faf73ab9491a4c68d971c36994a446f7860c7a7b9af94e684dbabc993d0c0429ce14550250e58b9da4e86fc6211736fa9dba922ba780b10619f8474fc128fa13380476b1123c6bb0a3bbaf40bb2a810a4388ca7c6e37bde29594d2da184965a43f3f3ae9e691f2010db8961b3790e02a5d639a3403bed909942c26d7c1f3049773ec07f5225da745c43e00155a3a006795243fd836a67c72a408e3a43fb42d2ba44c09ff5595", 0x1000}, {&(0x7f00000004c0)="886090cf68", 0x5}, {&(0x7f0000000840)="bbfb28165d4e0611f46bc7b2f3d072bbdfaafd09865e80c3558a4578db88fe1596aba3bdd5316c9d41f371b44dc374dfe888bf6295afb8032e6342eb57e106308e226b960b82d9298c10ccb7abb7bd8cf4439bf1536d9b57eb93647b99f28f10b87f7c15c66c3ceaf0de359c3047e84aac0cbec278e8607355d67ccd6e295db9865b905a495529db529d88be458dcf9a222d1f1e7fe88c30ef72dbcfc499cbf0f6f1a1e468964ce216ce", 0xaa}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x180}, 0x0, 0x805}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x408a21, 0x0) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r7 = epoll_create(0x6) epoll_pwait2(r7, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 3.912322439s ago: executing program 2 (id=359): unshare(0x8000000) r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) r1 = syz_open_dev$vcsa(0x0, 0x600000000000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x419}}}, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mknodat$loop(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) (async) mknodat$loop(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0xdd) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0xdd) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close_range(r0, r1, 0x2) 3.643219753s ago: executing program 2 (id=360): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000680)='./file1/file0\x00', 0x0, 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) 3.581689125s ago: executing program 5 (id=361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000bf6481727b2052d0d5b61fa87cc826cea30e9220efebe5dbfe2aac922dca2da502c2971f77d42990e80bd0ca4550be05e4515c202f50774cd38b2bdbcef9dcbe183f0cbb2b7af74fab9dc7ebff664e4318342fb629a771895fd30272ca5798c6f850d1657197cdb0b913f0d86cc0316351aa1948729bcc96927eab58ff75533751e55d3933335965c69797a8d4389816cc5385262bf4b4662ef16359c94719112d267772d2b67ba77a3af9eb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x64, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044880}, 0x40850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000b83f01b92f9bb7d27be1540000850000002a00000018010000202070152435e6f42ed8d7207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) quotactl$Q_GETQUOTA(0x7eb4980765719dab, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x2c, r3, 0x4196ccce67868bab, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) getpgid(0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(r6, &(0x7f00000001c0)) timer_settime(r6, 0x0, &(0x7f0000000080), 0x0) 3.543651506s ago: executing program 2 (id=362): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x479, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x89}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4000004}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0xfffffffc}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r4, 0x75e7f000) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd77) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='mm_migrate_pages_start\x00', r11, 0x0, 0x4}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ftruncate(r0, 0x9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x200000, {0x0, 0x0, 0x0, r12, {0xe, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_ACT={0xfffffffffffffe8d}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_INDEV={0x0, 0x3, 'tunl0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000480)) write$UHID_INPUT(r6, &(0x7f00000009c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) 3.457567545s ago: executing program 5 (id=363): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus/../file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) (async) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) (async) syz_emit_ethernet(0x16, &(0x7f0000000000)={@local, @remote, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @empty, @local, @broadcast}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) 3.447556816s ago: executing program 2 (id=364): ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='percpu_create_chunk\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) (async) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='percpu_create_chunk\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) ioctl$FIONCLEX(r0, 0x5450) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x280, 0x20) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x4) ustat(0x2, &(0x7f0000000140)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000180)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_adj\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_adj\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000280)={r3}) (async) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000280)={r3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x3, @loopback, 0x3}, 0x1c) (async) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x3, @loopback, 0x3}, 0x1c) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000300)=""/10, &(0x7f0000000340)=0xa) (async) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000300)=""/10, &(0x7f0000000340)=0xa) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) setregid(r4, r4) symlink(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='./file0\x00') (async) symlink(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='./file0\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000009c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2ec, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6b}, @NL80211_ATTR_IE={0x35, 0x2a, [@supported_rates, @mesh_chsw={0x76, 0x6, {0x40, 0x6, 0x2d, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0x8, 0xda}}, @prep={0x83, 0x1f, {{}, 0xa, 0xbb, @device_b, 0x8, @void, 0x7, 0x4, @broadcast, 0x4}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x280, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x6, 0xe, 0x6}}, @ibss={0x6, 0x2, 0x81}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1b}}, @tim={0x5, 0xe6, {0x1, 0x28, 0x5, "f6629eafc1a4c27a7d9996c82dc9dbe5f20134263dda75da4221a1eda2808fd0a14966b140283d6678f581fa95ac4f8d8cab5ab389d7211b6d0d57e7aa647670ae4dc0d4f6b78b6e1b4ca991c6dc54ba33724c67589fa57f83e2dde4e221a970e93b44aa4d6746e972628b9ea52187439aa57850382aa54a4d2a4dc3b49beec8a05f0942e411bff5904b8d98e4691ec23be7474a7ef76e262b7fe888af371bf38fb3c4a4080032a3bef82f13a49cf6874fb06abc76a37269550877dd6e5d157b42a48553ccf1917e2f368b8539481bc8b6ea34976b56fc5943e3758a2cbf67f75e02e6"}}, @fast_bss_trans={0x37, 0x107, {0x4, 0xa, "cc3f4e79624fd77e10f033bce1bf6fba", "cac2d9f90274dddbccd5af9044a7b6cb1cce176fe4f151605473c1d9181e6700", "53bb176e1851a93105c7af75d1c13a3801b65ac35d648b52b9ca15e6cd22e45e", [{0x3, 0x3, "83b3eb"}, {0x3, 0xd, "2d6d6d23acb8668ca8dcb6f941"}, {0x4, 0xf, "e7d54419c0b2d386aedb3397e3f87b"}, {0x2, 0x3, "d7eb7d"}, {0x4}, {0x2, 0x21, "4bb903ff8620b23d4d9ebdc6c327af7c803093a853f749892193fecfb04fcccd16"}, {0x2, 0x19, "410e094cf46d4aaf88b378322e5549f83718601caf40af26a8"}, {0x4, 0x23, "d79b39d369ab384b3a0243fbb4510b213e6f6de021a95298cc7cdb636757b8a0208937"}, {0x1, 0x1f, "c4e93b4e4cdbc7d0e256af3df7c80ce199492b1ed002eb5c29d4d91a5853e7"}, {0x2, 0x3, "d29bee"}]}}, @random={0x9, 0x6d, "d78ec617693caccbef59cc4fae0a89669ba352aa4ecbe207c66fdd7db8877c756909535f25e0dea3671db6f91be3461af85c3ecfadecc727fe818039a75581438783246fa3d61bc662ad2eb15e9dca8250f46c6db3d8e7cdae8de417cc0496640ac3e8bdb740b212a2a506a395"}, @chsw_timing={0x68, 0x4, {0x6, 0x4}}, @challenge={0x10, 0x1, 0xbf}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x850}, 0x1) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r6) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r9, 0x2, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x805) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockname$packet(r2, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) (async) getsockname$packet(r2, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) 3.399426727s ago: executing program 2 (id=365): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x8, 0x1) getdents64(r4, &(0x7f0000000280)=""/158, 0x9e) recvmmsg(r2, &(0x7f0000000fc0)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/22, 0x16}], 0x1}, 0x4}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/136, 0x88}], 0x3, &(0x7f0000000700)=""/225, 0xe1}, 0x2}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000880)=""/83, 0x53}, {&(0x7f0000000900)=""/174, 0xae}], 0x2, &(0x7f0000000a00)=""/56, 0x38}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/78, 0x4e}, {&(0x7f0000000ac0)=""/20, 0x14}], 0x2, &(0x7f00000014c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000b40)=@xdp, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/40, 0x28}, {&(0x7f0000000c00)=""/36, 0x24}, {&(0x7f0000000c40)=""/171, 0xab}, {&(0x7f0000000d00)=""/211, 0xd3}, {&(0x7f0000000e00)=""/177, 0xb1}], 0x6, &(0x7f0000000f40)=""/108, 0x6c}, 0x6}], 0x5, 0x2002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x9, 0x2) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x80000001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'team_slave_1\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 3.242754441s ago: executing program 5 (id=367): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0xb3, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "0985ec"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xd901}, [@ncm={0x6, 0x24, 0x1a, 0x7, 0x28}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x4, 0x66b}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x1f, 0x6, 0x8, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0x0, 0xe}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x8, 0xe0, 0x40, 0x5}, 0x5, &(0x7f0000000100)=ANY=[], 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x425}}, {0xe4, &(0x7f0000000200)=@string={0xe4, 0x3, "d28a85beea93bf1312f5d2f0760a49d031342e095ba35c7233c0439e151502e21210f7897caf452fb7f0dbc0013379df5e478a2a25a57f5fd17eef32349ae2e6b6df1f03f9237c22256635369785a46c03b2e80f220fc2b0546310186d49475b00250d1181c7b528d001ce32b885b896dc2b3938690a4f60bc07ee16384afa9596dc78fcb371ca018da503f3dcac9f4674faa884766b49de14bc518637c325cf0058773d2d81c4fbfd495b489a9f67ef6dc83c72c8f15a11d6d6b8dc78f96d01c847501673c1972bf8b1fe5d57dd8ddf11e416e47c5218139bcaa876ba384a3c632e"}}, {0xf6, &(0x7f0000000400)=@string={0xf6, 0x3, "e1a7ed82eca4280985ba416e9075e21413a0d63432061cde4f04f47a0f61b344bb11aa49c9c0035b467140798b973edc4f3a2f8cb15617c0d46d9936cd7ada811bcecf26c29e9e29f1c81ee3a157f9bc1d1719fc72e58ef039a75c3f7095a37fd139c0766e90a5f4979fc86010dc4a76c7bedd1cbc717a8d7c46da0b680cd4821b201c431b3fcad03a71c75b82d5e036734e4214710086408f16f97b9fc8ac7e681bfb0c576b92fd97d798074d5bfc5a4cfa70aec8f7a956256c93f18ee89f8fd1b2a5a4212bb19ecc668c8ecfc2561db62e902e30c8a553711fd03782d2078b093f0ce03ec9b8a6d3fa2c4f321074f75316d2a6"}}, {0xb6, &(0x7f0000000d80)=ANY=[]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x480a}}, {0xd8, &(0x7f0000000c80)=ANY=[@ANYBLOB="d803286d67468751d04a3dd5109942e485c40116ece9b1b540b9a726c55375274e0a3faa5771b436eadaea31f459c8434a2ecd7adeb704e30fae8d0449f1ec34d70f612f6859551de4c7964d0912dcb79fc8519759182d606f91f52f72d844f189ed1bfd8dd8bd93f29d0f298c6ec9e717f1bda8f8fdf0d7af131e3e3612b76dfe0ab5a59ec3e86d506d84ed94550a194af9cfda6854ddf23b3259dc4b8b8122ecc4a35ee75a107f37b8e34936b451ec74666546c023ee729d90929b231acdad7a1119bcc208b76ed90952175d7cefd58c1a12b8ae553412"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="0005040000009d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002ac0)={0x1c, &(0x7f00000001c0)={0x20, 0x14, 0x9, "e7ee0c90e4b8058048"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) r4 = io_uring_setup(0x357b, &(0x7f0000000180)={0x0, 0xfffffffc, 0x100, 0xb733, 0xffffffbe}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r6, &(0x7f0000000740), 0xff67) sendfile(r5, r6, &(0x7f00000000c0), 0xfffb) fcntl$addseals(r6, 0x409, 0x8) pwritev(r6, &(0x7f0000000100)=[{&(0x7f00000006c0)="d3", 0x1}], 0x1, 0x1, 0x7) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x20, 0xc}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x0, 0x20}}, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x3ff}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x38}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000100)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="400ea3000000a3117c6b4b72fca474cd0777317537dbe8d80bcabca9b565e55ebc1eb39d5f18e04fd7079589ffb726c4979e51ad657d092b680050ba9e7961cdc928047754f3e037ef1c6d2324df66abc38bd04da90aff0c8d044353e728868444b0e325ac511b5f2216b6a0d8a95250cdf43f0991cab31efa1aaa704b80b05c324c35968a0696633d977db00d1d51c3668733eb903d3260e2ac0ff68d044158778518bde58258a22f"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x20, 0xf, 0x49, "82540861fabc381ec2c6363cebf392fe507dcb77e566a6141963352836191540bce8d938add3d7f7fe730f27116181536f671d035534eb260a83b670e75c04b1b7b297323aef48732d"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x200, 0x1, 0x8, 0x10, 0x1, 0x8, 0x32, 0x3, 0x1000, 0x1, 0x7fff, 0x8000}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x68d1}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) syz_usb_control_io$printer(r3, &(0x7f0000000640)={0x14, &(0x7f0000000600)={0x0, 0x2, 0x1f, {0x1f, 0xa, "e44397e048d294be3d4c8df45f90e2cabf16fe372fdb6cfc34ea05e6ef"}}, &(0x7f0000000780)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "7c1242afebf04dfc7f2b86460a142899e0cf7a8538d10ecc40337b3ed2e50481d360c304cee83c9a382696914aa772e94953a8a76d28fb56c4298ab0fb998e42b4d870c12d0cb29f8f5a7e9e0446b106c3dc69b24d27b46e503cba0790f80e48dd63002b3bb96ab47a046ed2f88c4246298dacd6ad329b02f5f312194e9644fb5ecd40d265866c5dc1c7ff8aad0b1908f67a739e14f027c7e34428c9468d8c234f905d1b85888a330f43867a3bf38bc2c48667320685880f6c318cb4ae7ce999136b9652863cfda09c8590742478f6e27a6f2615bb9aa42af388"}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000880)={0x40, 0x7, 0x4, "23283fd2"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000c00)={0x20, 0x0, 0x1, 0x8}}) sched_setaffinity(0x0, 0xfffffffffffffeee, &(0x7f0000000540)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.115527784s ago: executing program 3 (id=368): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="85e3de50d5b66bd8f1ff08251a6c", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0}) 2.633624841s ago: executing program 1 (id=369): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x96906, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r3, 0x4) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000032006bcd9e3fe3dc6e48aa31086b876c1d0002007ea60264160af3653c000a000f0000008bc3a0e69ee517d34460bc24eab556a705", 0x39}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x9) 2.496140732s ago: executing program 2 (id=370): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @remote, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000}, 0x2c) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000f80)={{0x4, 0x74}, 'port0\x00', 0x0, 0x100020, 0xfffffff7, 0x8, 0x0, 0x1, 0x400, 0x0, 0x7, 0x10}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x5}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000de83e1ace4c8810be0000000006241a050000152412"], 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'sh\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.448447384s ago: executing program 1 (id=371): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) socket$kcm(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) (async) r5 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) unshare(0x4000000) sendmsg$NL80211_CMD_TDLS_MGMT(r5, 0x0, 0x40001) socket$packet(0x11, 0x2, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x82010, r0, 0x6dd5f000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, 0x0, 0x8000) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) 2.333888292s ago: executing program 0 (id=372): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x20, 0xa, 0x11, "9000e346d50e408760e71d90ae77623fcb"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x5}, 0x0}) 1.795015378s ago: executing program 1 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000000c0)={0x30, "b187fd8620bebd71d20d98c3df1fef74d1e4a1cb5fb6a1a50a952a459d457872b02c7807e64dd2ea15390863a14d1baf"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x40004) 1.622767166s ago: executing program 0 (id=374): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x5, [@fwd, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0xfffffffd}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f0000000300)=""/237, 0x55, 0xed, 0x1, 0x6, 0x0, @void, @value}, 0x28) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x4, 0x1, {{0x21, 0x4, 0x2, 0x15, 0x84, 0x66, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0x17, 0xf0, [@multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2]}, @noop, @timestamp_addr={0x44, 0x2c, 0xae, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x2}, {@remote, 0x2bd3d4e9}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x95}, {@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0x24, 0x7d, 0x3, 0x8, [{@rand_addr=0x64010101, 0x3}, {@loopback, 0x2d}, {@private=0xa010101, 0x4}, {@multicast2, 0x6}]}, @lsrr={0x83, 0x7, 0x71, [@multicast1]}, @end]}}}}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0xf, 0xfffffff8, 0x2a034, 0x1, 0x40, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @value=r4, @void, @void, @value}, 0x50) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x5) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000000c0)=""/154, 0x9a) lseek(r7, 0x8, 0x1) getdents64(r7, 0x0, 0x0) 1.497792976s ago: executing program 1 (id=375): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) gettid() sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x240408d0}, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x400000) 1.461155155s ago: executing program 1 (id=376): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0xb0147000) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff0295c200000000000000000000000114000400fc0000000000000000000000000000000600034000010000080007"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, 0x0) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5f75}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8805}, 0x4008040) (async) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1, &(0x7f0000000300)=""/243, 0xf3}, 0x93d}], 0x1, 0x10040, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000280)=0x7ffffdff, 0x4) 1.365228777s ago: executing program 1 (id=377): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x3, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4040040) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) clock_gettime(0x2, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000040)=0xfffffffc) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000001380)) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b000000000", 0x25) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) add_key(&(0x7f0000000280)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x20100, 0x46, 0x30}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="d33b2c2e4e3ee111b9c661f975f0e84a1cbf6d4c2081691cb55d031d90b316e31141e886ada750a104c49227f48e1878ceabb1f8b21a1873551418f38c79", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES64, @ANYRES8=r5, @ANYRESDEC=r6, @ANYRESOCT=r3, @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x88c5}, 0x80c4) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3504000040000511d25a35400c00020001ffe42037153e370c04018006041000450000002a560000e7ff00000000", 0xff20}, {&(0x7f0000000180)="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"/1031, 0x407}], 0x2}, 0x140458d0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x4) gettid() 1.289626635s ago: executing program 5 (id=378): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000008400000006000000010000000000000041b703a8cc27a94b1d186144ace77fd7b0f416eafbdb28182a289f1ae69fc9e71d70f752c6a94c41a7c501286cbb609ddb1c935759f8eaa64c3640c6d8dda2bed45c45677485f1c13e8c4e7df9e783569123323bd9e505bb1a1fd5ea0f990ed9461ca88a4ded8f8ddab43a6756d959fb2daea9583b6664cef17f810d1e139f106a8998a8b328d023c1fa8767ad5d6ae558e09a0179390cc5bf5fc203fe6a63bb3ec49bcb8ec49ccdec81968b7059fe53c4d51aeb"], 0x18}], 0x1, 0x40000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) socket$packet(0x11, 0x2, 0x300) inotify_init1(0x0) memfd_secret(0x80000) epoll_create1(0x0) syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0xb}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f0000000480)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x32, 0x0, r1, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="0ff0", 0x2}, {&(0x7f0000000300)="1ec039b6797d55eebac77237b8d645c2667a4acb602674814a24e64e0431aa2ae7", 0x21}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f00000004c0)="886090cf68", 0x5}, {&(0x7f0000000840)="bbfb28165d4e0611f46bc7b2f3d072bbdfaafd09865e80c3558a4578db88fe1596aba3bdd5316c9d41f371b44dc374dfe888bf6295afb8032e6342eb57e106308e226b960b82d9298c10ccb7abb7bd8cf4439bf1536d9b57eb93647b99f28f10b87f7c15c66c3ceaf0de359c3047e84aac0cbec278e8607355d67ccd6e295db9865b905a495529db529d88be458dcf9a222d1f1e7fe88c30ef72dbcfc499cbf0f6f1a1e468964ce216ce", 0xaa}], 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x180}, 0x0, 0x805}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x408a21, 0x0) r6 = epoll_create(0x6) epoll_pwait2(r6, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 645.591611ms ago: executing program 0 (id=379): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00') r0 = syz_io_uring_setup(0x7db3, &(0x7f0000000300)={0x0, 0x7f76, 0x20, 0x2, 0x2e8}, &(0x7f0000000200), &(0x7f0000000380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000a, 0x50, r0, 0x0) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0xa4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r3) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x81, 0xffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000140)={0x300, 0x1, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r7, 0xfffffffc, 0x1) (async) lseek(r7, 0xfffffffc, 0x1) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) ptrace(0x8, r8) (async) ptrace(0x8, r8) 387.752939ms ago: executing program 0 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000140)=ANY=[], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 163.700334ms ago: executing program 0 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000000183fdee865e1af936c0338f4d3ccd9f8c46e184da63c7b4f1d2062857347a423d2"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}}, 0x14}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r2 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440)=r1, 0x1) (async) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @broadcast}, {0x6, @local}, 0x16, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'rose0\x00'}) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) 109.616986ms ago: executing program 5 (id=382): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0x7, 0x78, {0x78, 0x21, "06d6efd3621016bf5b184ef1270070318168a506e7ec374ff6e8680cf47929631388506e7d8ca3b189956970bfc8618593850d43dffa12de3b2ddf010f197420788108f720e4fb5e7d6d681cd4b4c09633158f10b4a1e8101e2b7462422ddc1840cf0f54fcad0fe160f47a28608d797c7d902757df68"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}, &(0x7f0000000180)={0x0, 0xf, 0x9a, {0x5, 0xf, 0x9a, 0x2, [@generic={0x92, 0x10, 0x0, "0c92ffda03ec01f31721c55de7ce4488b5308938b3d8c69dff29f6272d2dee75e170ce3e3729a4c221bdaee0d8c5ffbc353790b24c5ee9c2684e7b4901600c66b1b60d4b0a2da6bf60eb6524b5041234fb13175bca4f7de997dfa71b7d3ca1470b7d07b989937af1ea257105fefe9b7f470b7ead83719d028861663c97bff58d8367b5fc2856a9eb1b8c3332401ef4"}, @ptm_cap={0x3}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x5, 0x4, "1e9d6f7f", "a8300dcb"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0xa, 0x40, 0x7, 0x36, 0x8}}}, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0xc, 0xc8, "c2647d7a7a443bf05788eea8b08d3b7a7f5a8246c75f8a805ceaee4008a5d88a6f3b4b1c8b56520cc3aedf30ed53c4c8a31aa649b225048c9fd6842086360c7641b33c5da33d4e065e91fdccff95fa477a3d4827321a65fe91250f1f583a31b879f835a6289024bf4701a6211e662cbb9037bb207fb5340f56388d4be8e52bac3ed1e59fd48e1da11fc0e6da029414309abc679ef4b290429dfd6c96914eae115fe35606d559d58bdab5dcc983ccc967d623b4905364b73734ec3ff7f90733f1d3b5bb94a2bd78f2"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x20, 0x40}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xf001}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xfa}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'pb'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "5dc9"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xb770}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x4}}) 17.676063ms ago: executing program 3 (id=383): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2e855cb2b0b1e61d3fe47d", 0xe}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6c48a2c", 0xf6}, {&(0x7f0000000480)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a8548c37cb000b211d41d078761fda02a7bdf922761d9b76f1792ed08629bbce9d921fccdef1655e255a98705191f2abff1410851b2473d58f94dfc2a32c62979077f5663697e5328066986f3f9be56e14b041fcb6012bb7e0ec1d6a153cd016076b263a379002b2f872a0b4e7b9a778", 0x13e}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acc2ef0a9b0f9964d5705db134bdd9f261b7349aeede1c42e31b1082eec37b959d16afb967f54c471f2c7922c3c069f6a67c6ffee04bb1", 0x98}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)='_t', 0x2}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000040)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a50001006970766c616e00000348028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 0 (id=384): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000}, 0x1d) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c00010026bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): ges RAM [ 80.562415][ T6271] 0 pages HighMem/MovableOnly [ 80.562419][ T6271] 428705 pages reserved [ 80.562422][ T6271] 0 pages cma reserved [ 80.620700][ T6266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 80.620745][ T6266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 80.626144][ T30] audit: type=1400 audit(1743030627.938:321): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.703407][ T6266] vhci_hcd vhci_hcd.0: Device attached [ 80.860144][ T5887] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 81.054866][ T6293] vhci_hcd: connection reset by peer [ 81.057318][ T5826] usb 2-1: USB disconnect, device number 9 [ 81.089798][ T6298] warning: `syz.3.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.117215][ T3465] vhci_hcd: stop threads [ 81.124318][ T3465] vhci_hcd: release socket [ 81.142314][ T3465] vhci_hcd: disconnect device [ 81.214391][ T6300] overlayfs: failed to get inode (-116) [ 81.220407][ T6300] overlayfs: failed to get inode (-116) [ 81.241082][ T6300] overlayfs: failed to get inode (-116) [ 81.256008][ T6300] overlayfs: failed to get inode (-116) [ 81.643465][ T6313] netlink: 288 bytes leftover after parsing attributes in process `syz.0.115'. [ 81.780867][ T6320] netem: invalid attributes len -3 [ 81.786027][ T6320] netem: change failed [ 82.070223][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 82.480631][ T6327] syz.3.120 uses obsolete (PF_INET,SOCK_PACKET) [ 82.526498][ T6328] netlink: 'syz.3.120': attribute type 11 has an invalid length. [ 82.551681][ T6327] netlink: 'syz.3.120': attribute type 11 has an invalid length. [ 82.556475][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 82.556488][ T30] audit: type=1400 audit(1743030629.878:334): avc: denied { bind } for pid=6326 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.593955][ T30] audit: type=1400 audit(1743030629.908:335): avc: denied { write } for pid=6326 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.640281][ T5826] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 82.782439][ T6337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 82.803921][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.849068][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.900200][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.909866][ T5826] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 82.932223][ T5826] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 82.942154][ T5826] usb 2-1: Manufacturer: syz [ 82.952166][ T5826] usb 2-1: config 0 descriptor?? [ 83.053922][ T6345] xt_hashlimit: size too large, truncated to 1048576 [ 83.070913][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 83.077637][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.089244][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.100240][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 83.103684][ T6346] xt_HMARK: proto mask must be zero with L3 mode [ 83.110061][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.151654][ T24] usb 1-1: config 0 descriptor?? [ 83.162533][ T47] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 83.380161][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 83.389361][ T47] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 83.399551][ T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.410269][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.421713][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.432408][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 83.438727][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 83.446850][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.463847][ T24] usb 1-1: USB disconnect, device number 6 [ 83.486495][ T47] usb 4-1: Product: syz [ 83.569441][ T47] usb 4-1: Manufacturer: syz [ 83.677201][ T47] usb 4-1: SerialNumber: syz [ 83.806883][ T5826] cougar 0003:060B:700A.0006: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 83.858469][ T30] audit: type=1400 audit(1743030631.178:336): avc: denied { watch watch_reads } for pid=6360 comm="syz.0.128" path="/40/file0" dev="tmpfs" ino=234 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.863539][ T6361] netlink: 'syz.0.128': attribute type 3 has an invalid length. [ 83.881725][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.900037][ T6361] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 84.190240][ T5125] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 84.208662][ T47] usb 4-1: 0:2 : does not exist [ 84.325481][ T6369] netlink: 11 bytes leftover after parsing attributes in process `syz.2.131'. [ 84.341093][ T5125] usb 1-1: Using ep0 maxpacket: 16 [ 84.386398][ T5125] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.405681][ T5125] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.472823][ T5125] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.483269][ T5125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.491708][ T5125] usb 1-1: Product: syz [ 84.495888][ T5125] usb 1-1: Manufacturer: syz [ 84.500574][ T5125] usb 1-1: SerialNumber: syz [ 84.788953][ T5826] usb 2-1: USB disconnect, device number 10 [ 84.852604][ T30] audit: type=1400 audit(1743030632.178:337): avc: denied { bind } for pid=6376 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.395613][ T30] audit: type=1400 audit(1743030632.718:338): avc: denied { write } for pid=6388 comm="syz.2.135" path="socket:[10349]" dev="sockfs" ino=10349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 85.425137][ T30] audit: type=1400 audit(1743030632.748:339): avc: denied { create } for pid=6388 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.426158][ T6391] Cannot find add_set index 0 as target [ 85.549702][ T47] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 85.587535][ T47] usb 4-1: USB disconnect, device number 8 [ 85.593870][ T5125] usb 1-1: cannot find UAC_HEADER [ 85.635095][ T5125] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 85.685254][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 85.790758][ T5880] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 85.830412][ T9] usb 1-1: USB disconnect, device number 7 [ 85.980169][ T5880] usb 2-1: Using ep0 maxpacket: 8 [ 85.987138][ T5880] usb 2-1: config 8 has an invalid interface number: 110 but max is 1 [ 85.996032][ T5880] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 86.039798][ T5880] usb 2-1: config 8 has an invalid interface number: 140 but max is 1 [ 86.059856][ T5880] usb 2-1: config 8 has an invalid interface number: 167 but max is 1 [ 86.068779][ T5880] usb 2-1: config 8 has an invalid interface number: 2 but max is 1 [ 86.076918][ T5880] usb 2-1: config 8 has an invalid descriptor of length 170, skipping remainder of the config [ 86.087440][ T5880] usb 2-1: config 8 has 4 interfaces, different from the descriptor's value: 2 [ 86.096730][ T5880] usb 2-1: config 8 has no interface number 0 [ 86.116489][ T5880] usb 2-1: config 8 has no interface number 1 [ 86.124045][ T5880] usb 2-1: config 8 has no interface number 3 [ 86.131905][ T30] audit: type=1400 audit(1743030633.458:340): avc: denied { shutdown } for pid=6395 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.152277][ T5880] usb 2-1: config 8 interface 110 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 86.164165][ T5880] usb 2-1: config 8 interface 110 altsetting 3 endpoint 0x1 has invalid maxpacket 1056, setting to 64 [ 86.170338][ T5887] vhci_hcd: vhci_device speed not set [ 86.177115][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.188222][ T5880] usb 2-1: config 8 interface 110 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 86.199514][ T5880] usb 2-1: config 8 interface 110 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 86.205207][ T30] audit: type=1400 audit(1743030633.528:341): avc: denied { create } for pid=6395 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.211346][ T5880] usb 2-1: config 8 interface 110 altsetting 3 endpoint 0x9 has an invalid bInterval 192, changing to 11 [ 86.230913][ T30] audit: type=1400 audit(1743030633.558:342): avc: denied { write } for pid=6395 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.267797][ T5880] usb 2-1: config 8 interface 110 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 86.279175][ T5880] usb 2-1: config 8 interface 110 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 11 [ 86.295057][ T5880] usb 2-1: too many endpoints for config 8 interface 140 altsetting 192: 213, using maximum allowed: 30 [ 86.306480][ T5880] usb 2-1: config 8 interface 140 altsetting 192 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 86.321983][ T5880] usb 2-1: config 8 interface 140 altsetting 192 has an invalid descriptor for endpoint zero, skipping [ 86.335206][ T5880] usb 2-1: config 8 interface 140 altsetting 192 has 2 endpoint descriptors, different from the interface descriptor's value: 213 [ 86.391890][ T6398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.405176][ T5880] usb 2-1: config 8 interface 167 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 86.424599][ T5880] usb 2-1: config 8 interface 2 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 25 [ 86.439872][ T5880] usb 2-1: config 8 interface 110 has no altsetting 0 [ 86.919328][ T5880] usb 2-1: config 8 interface 140 has no altsetting 0 [ 86.926253][ T5880] usb 2-1: config 8 interface 167 has no altsetting 0 [ 86.935411][ T5880] usb 2-1: config 8 interface 2 has no altsetting 0 [ 86.943705][ T5880] usb 2-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=74.7e [ 86.955366][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.012696][ T5880] usb 2-1: Product: 篔î¢âµ”ꭔ♒⇡쨻湡㮊ꡗ逷딲គｔ頬≷䅞â’è²â³’á“拇Ⴔé‚팬䧹閶朹头붱ᰌᨤ挃騉兺ⶲ緔ꡚ鑽绚ⶮ㑺䈮îꉠç°ã¨¥å®¶æ‡«â¡Šã…·â¤±ïœ›è£î‡®é¥ë‡©ã€ïž£çµ“è‚Žâ æ»“㳵ᦢçªè€™é¶¸ã‰šé’šïŸ« [ 87.063795][ T5880] usb 2-1: Manufacturer: 〠[ 87.068426][ T5880] usb 2-1: SerialNumber: Ñ [ 87.071757][ T30] audit: type=1400 audit(1743030634.388:343): avc: denied { map } for pid=6404 comm="syz.3.140" path="socket:[10383]" dev="sockfs" ino=10383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 87.474138][ T6394] bridge0: port 3(team0) entered blocking state [ 87.480541][ T6394] bridge0: port 3(team0) entered disabled state [ 87.487040][ T6394] team0: entered allmulticast mode [ 87.492241][ T6394] team_slave_0: entered allmulticast mode [ 87.498091][ T6394] team_slave_1: entered allmulticast mode [ 87.503995][ T6394] geneve0: entered allmulticast mode [ 87.511400][ T6394] team0: entered promiscuous mode [ 87.516515][ T6394] team_slave_0: entered promiscuous mode [ 87.522903][ T6394] team_slave_1: entered promiscuous mode [ 87.528662][ T6394] geneve0: entered promiscuous mode [ 87.534312][ T6394] bridge0: port 3(team0) entered blocking state [ 87.540642][ T6394] bridge0: port 3(team0) entered forwarding state [ 87.595728][ T5880] usb-storage 2-1:8.110: USB Mass Storage device detected [ 87.613399][ T5880] usb-storage 2-1:8.110: Quirks match for vid 4971 pid 1012: 800000 [ 87.695062][ T5880] usb-storage 2-1:8.140: USB Mass Storage device detected [ 87.713238][ T5880] usb-storage 2-1:8.140: Quirks match for vid 4971 pid 1012: 800000 [ 87.769850][ T5880] usb-storage 2-1:8.167: USB Mass Storage device detected [ 87.784707][ T5880] usb-storage 2-1:8.167: Quirks match for vid 4971 pid 1012: 800000 [ 87.859407][ T5880] hub 2-1:8.2: Invalid hub with more than one config or interface [ 87.880042][ T5880] hub 2-1:8.2: probe with driver hub failed with error -22 [ 87.892622][ T5880] usb-storage 2-1:8.2: USB Mass Storage device detected [ 87.916098][ T5880] usb-storage 2-1:8.2: Quirks match for vid 4971 pid 1012: 800000 [ 88.022102][ T5880] usb 2-1: USB disconnect, device number 11 [ 88.030593][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.140223][ T5887] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 88.213189][ T9] usb 1-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 88.245770][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.330338][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 88.343773][ T5887] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 88.355890][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.356487][ T9] usb 1-1: config 0 descriptor?? [ 88.395348][ T5887] usb 4-1: Product: syz [ 88.417032][ T5887] usb 4-1: Manufacturer: syz [ 88.420037][ T9] usb 1-1: selecting invalid altsetting 1 [ 88.427655][ T5887] usb 4-1: SerialNumber: syz [ 88.476546][ T5887] usb 4-1: config 0 descriptor?? [ 88.481359][ T9] flexcop_usb: set interface failed. [ 88.488770][ T9] b2c2_flexcop_usb 1-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 88.518754][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 88.528780][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 88.538552][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 88.547481][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 88.626820][ T47] usb 1-1: USB disconnect, device number 8 [ 88.690884][ T5887] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 88.779350][ T6453] syz.1.148 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 88.797121][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 88.797160][ T30] audit: type=1400 audit(1743030636.118:347): avc: denied { map } for pid=6445 comm="syz.1.148" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.830569][ T30] audit: type=1400 audit(1743030636.118:348): avc: denied { execute } for pid=6445 comm="syz.1.148" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.853895][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.869988][ T30] audit: type=1400 audit(1743030636.188:349): avc: denied { write } for pid=6445 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.211177][ T30] audit: type=1400 audit(1743030636.228:350): avc: denied { block_suspend } for pid=6445 comm="syz.1.148" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.232426][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.430235][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 89.520915][ T5880] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 89.583267][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.594945][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.611069][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 89.630274][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.653871][ T9] usb 1-1: config 0 descriptor?? [ 89.675582][ T5880] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 89.692178][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 89.710239][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 89.730343][ T5880] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 89.759942][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.772184][ T5880] usb 3-1: config 0 descriptor?? [ 89.777848][ T6459] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 90.020589][ T5880] asus 0003:0B05:1ABE.0007: hidraw0: USB HID vf.ff Device [HID 0b05:1abe] on usb-dummy_hcd.2-1/input0 [ 90.043294][ T5880] asus 0003:0B05:1ABE.0007: Asus input not registered [ 90.061429][ T5880] asus 0003:0B05:1ABE.0007: probe with driver asus failed with error -12 [ 90.093703][ T5880] usb 3-1: USB disconnect, device number 5 [ 90.174148][ T5887] gspca_sunplus: reg_w_riv err -71 [ 90.205583][ T5887] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 90.221820][ T5887] usb 4-1: USB disconnect, device number 9 [ 90.410237][ T9] usb 1-1: language id specifier not provided by device, defaulting to English [ 90.422772][ T30] audit: type=1400 audit(1743030637.698:351): avc: denied { setopt } for pid=6479 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.603206][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.631263][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.675139][ T9] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 90.686168][ T9] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 90.789306][ T9] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 90.817290][ T9] usb 1-1: USB disconnect, device number 9 [ 90.856858][ T30] audit: type=1400 audit(1743030638.178:352): avc: denied { bind } for pid=6474 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.329063][ T6501] FAULT_INJECTION: forcing a failure. [ 91.329063][ T6501] name failslab, interval 1, probability 0, space 0, times 1 [ 91.380254][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz.0.159 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 91.380283][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.380293][ T6501] Call Trace: [ 91.380298][ T6501] [ 91.380305][ T6501] dump_stack_lvl+0x16c/0x1f0 [ 91.380332][ T6501] should_fail_ex+0x512/0x640 [ 91.380349][ T6501] ? fs_reclaim_acquire+0xae/0x150 [ 91.380373][ T6501] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 91.380389][ T6501] should_failslab+0xc2/0x120 [ 91.380408][ T6501] __kmalloc_noprof+0xd2/0x510 [ 91.380427][ T6501] tomoyo_realpath_from_path+0xc2/0x6e0 [ 91.380445][ T6501] ? tomoyo_profile+0x47/0x60 [ 91.380465][ T6501] tomoyo_path_number_perm+0x245/0x580 [ 91.380492][ T6501] ? tomoyo_path_number_perm+0x237/0x580 [ 91.380520][ T6501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.380544][ T6501] ? find_held_lock+0x2b/0x80 [ 91.380578][ T6501] ? find_held_lock+0x2b/0x80 [ 91.380595][ T6501] ? __fget_files+0x204/0x3c0 [ 91.380614][ T6501] ? __fget_files+0x20e/0x3c0 [ 91.380631][ T6501] security_file_ioctl+0x9b/0x240 [ 91.380659][ T6501] __x64_sys_ioctl+0xb7/0x200 [ 91.380683][ T6501] do_syscall_64+0xcd/0x260 [ 91.380705][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.380722][ T6501] RIP: 0033:0x7f70a538d169 [ 91.380734][ T6501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.380750][ T6501] RSP: 002b:00007f70a62c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.380767][ T6501] RAX: ffffffffffffffda RBX: 00007f70a55a5fa0 RCX: 00007f70a538d169 [ 91.380777][ T6501] RDX: 0000200000000240 RSI: 00000000c0405602 RDI: 0000000000000003 [ 91.380787][ T6501] RBP: 00007f70a62c0090 R08: 0000000000000000 R09: 0000000000000000 [ 91.380797][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.380806][ T6501] R13: 0000000000000000 R14: 00007f70a55a5fa0 R15: 00007ffdaf498958 [ 91.380826][ T6501] [ 91.380864][ T6501] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.315528][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.340290][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.533184][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.543652][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.555117][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.563105][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.670138][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 92.852835][ T749] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.931597][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.950304][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.972318][ T9] usb 3-1: string descriptor 0 read error: -22 [ 92.978594][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.008044][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.068671][ T5885] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 93.091774][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.119348][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 93.167006][ T749] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.309183][ T30] audit: type=1400 audit(1743030640.628:353): avc: denied { name_connect } for pid=6521 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 93.334894][ T30] audit: type=1400 audit(1743030640.658:354): avc: denied { write } for pid=6521 comm="syz.3.163" path="socket:[10679]" dev="sockfs" ino=10679 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.369874][ T30] audit: type=1400 audit(1743030640.658:355): avc: denied { nlmsg_read } for pid=6521 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.390687][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 93.427804][ T749] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.438976][ T5885] usb 2-1: config 221 has an invalid interface number: 184 but max is 0 [ 93.448017][ T30] audit: type=1400 audit(1743030640.658:356): avc: denied { create } for pid=6521 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.468121][ T5885] usb 2-1: config 221 has an invalid descriptor of length 202, skipping remainder of the config [ 93.524568][ T5885] usb 2-1: config 221 has no interface number 0 [ 93.555274][ T5885] usb 2-1: config 221 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.572509][ T749] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.586112][ T5885] usb 2-1: config 221 interface 184 has no altsetting 0 [ 93.602929][ T5885] usb 2-1: New USB device found, idVendor=005d, idProduct=7500, bcdDevice=69.ee [ 93.612197][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.621891][ T5885] usb 2-1: Product: syz [ 93.628531][ T5885] usb 2-1: Manufacturer: syz [ 93.642359][ T5885] usb 2-1: SerialNumber: syz [ 93.687682][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 93.887480][ T749] bridge_slave_1: left allmulticast mode [ 93.900002][ T749] bridge_slave_1: left promiscuous mode [ 93.907888][ T5885] usb 2-1: USB disconnect, device number 12 [ 93.918920][ T749] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.954737][ T749] bridge_slave_0: left allmulticast mode [ 93.965645][ T749] bridge_slave_0: left promiscuous mode [ 93.974064][ T749] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.059303][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 94.059320][ T30] audit: type=1400 audit(1743030641.378:358): avc: denied { read write } for pid=6532 comm="syz.3.164" dev="sockfs" ino=11555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.630329][ T54] Bluetooth: hci1: command tx timeout [ 94.753697][ T749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.768638][ T749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.794731][ T749] bond0 (unregistering): Released all slaves [ 94.868129][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 94.960162][ T6542] syzkaller1: entered promiscuous mode [ 94.972676][ T6542] syzkaller1: entered allmulticast mode [ 95.022719][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.030834][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.038056][ T6515] bridge_slave_0: entered allmulticast mode [ 95.051967][ T6515] bridge_slave_0: entered promiscuous mode [ 95.059890][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.067325][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.086904][ T6515] bridge_slave_1: entered allmulticast mode [ 95.123853][ T6515] bridge_slave_1: entered promiscuous mode [ 95.257362][ T5885] usb 3-1: USB disconnect, device number 6 [ 95.405688][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.442824][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.660396][ T5885] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 95.978013][ T30] audit: type=1400 audit(1743030643.298:359): avc: denied { read } for pid=6564 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.017544][ T30] audit: type=1400 audit(1743030643.328:360): avc: denied { open } for pid=6564 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.201435][ T5885] usb 3-1: config 6 has an invalid interface number: 239 but max is 3 [ 96.236210][ T5885] usb 3-1: config 6 has an invalid interface number: 254 but max is 3 [ 96.560410][ T30] audit: type=1400 audit(1743030643.328:361): avc: denied { getattr } for pid=6564 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.627973][ T5885] usb 3-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 96.631987][ T30] audit: type=1400 audit(1743030643.948:362): avc: denied { connect } for pid=6569 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.644043][ T5885] usb 3-1: config 6 has 3 interfaces, different from the descriptor's value: 4 [ 96.679360][ T5885] usb 3-1: config 6 has no interface number 0 [ 96.685567][ T5885] usb 3-1: config 6 has no interface number 1 [ 96.692128][ T5885] usb 3-1: config 6 has no interface number 2 [ 96.703108][ T5885] usb 3-1: config 6 interface 3 altsetting 236 endpoint 0xD has invalid maxpacket 1032, setting to 8 [ 96.714214][ T5885] usb 3-1: config 6 interface 3 altsetting 236 endpoint 0x85 has invalid maxpacket 1023, setting to 8 [ 96.716278][ T54] Bluetooth: hci1: command tx timeout [ 96.725195][ T5885] usb 3-1: config 6 interface 3 altsetting 236 endpoint 0x4 has invalid maxpacket 1024, setting to 8 [ 96.725220][ T5885] usb 3-1: config 6 interface 3 altsetting 236 has a duplicate endpoint with address 0xD, skipping [ 96.752524][ T5885] usb 3-1: config 6 interface 3 altsetting 236 has an invalid descriptor for endpoint zero, skipping [ 96.752950][ T749] hsr_slave_0: left promiscuous mode [ 96.763454][ T5885] usb 3-1: config 6 interface 3 altsetting 236 has a duplicate endpoint with address 0xD, skipping [ 96.779525][ T5885] usb 3-1: config 6 interface 3 altsetting 236 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 96.782622][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 96.791262][ T5885] usb 3-1: config 6 interface 3 altsetting 236 endpoint 0xB has invalid maxpacket 32, setting to 8 [ 96.808462][ T5885] usb 3-1: config 6 interface 3 altsetting 236 has a duplicate endpoint with address 0x4, skipping [ 96.821126][ T749] hsr_slave_1: left promiscuous mode [ 96.846042][ T749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.850228][ T5885] usb 3-1: config 6 interface 3 altsetting 236 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 96.854633][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 96.877291][ T5885] usb 3-1: config 6 interface 3 altsetting 236 endpoint 0xC has invalid maxpacket 16, setting to 8 [ 96.878125][ T749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.903083][ T6571] ceph: No mds server is up or the cluster is laggy [ 96.919989][ T749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.927593][ T5885] usb 3-1: config 6 interface 3 altsetting 236 has a duplicate endpoint with address 0xC, skipping [ 96.930894][ T749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.962744][ T30] audit: type=1400 audit(1743030644.288:363): avc: denied { write } for pid=6561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.007579][ T5885] usb 3-1: config 6 interface 254 altsetting 3 endpoint 0x6 is Bulk; changing to Interrupt [ 97.030014][ T749] veth1_macvtap: left promiscuous mode [ 97.041993][ T5885] usb 3-1: config 6 interface 254 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 97.058229][ T30] audit: type=1400 audit(1743030644.288:364): avc: denied { add_name } for pid=6561 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.088290][ T749] veth0_macvtap: left promiscuous mode [ 97.098175][ T749] veth1_vlan: left promiscuous mode [ 97.103613][ T5885] usb 3-1: config 6 interface 3 has no altsetting 0 [ 97.110656][ T749] veth0_vlan: left promiscuous mode [ 97.115944][ T5885] usb 3-1: config 6 interface 239 has no altsetting 0 [ 97.124624][ T30] audit: type=1400 audit(1743030644.288:365): avc: denied { create } for pid=6561 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.147365][ T5885] usb 3-1: config 6 interface 254 has no altsetting 0 [ 97.171056][ T5885] usb 3-1: Dual-Role OTG device on HNP port [ 97.177308][ T5885] usb 3-1: New USB device found, idVendor=05c6, idProduct=7101, bcdDevice=df.b8 [ 97.196014][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.205014][ T30] audit: type=1400 audit(1743030644.288:366): avc: denied { write } for pid=6561 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.260245][ T5885] usb 3-1: Product: ᚼ͜辅髎蒲䈂㦇í§á€ƒì¯¯ç‘‰ã‘¡ï¾ê‘¹ã—ퟆㄣㅴ뵞褶悴ìºÛ¦î‚¾é±‰â€ˆäºïªä¤ˆá‰èŠì¥‹î—žé©­é…©á â¡—ꈋꔓ㺰ꈋêºè‰”㈕싻蘤榡ᗟä±äŽŽîŸ©Å·Õºëª•ë¥‘஋왋탒⪯áŠè«‡ï¨…캚냻⌆迵픒㋖藊啒平铋탘䫳酹â¡ã§·à£¶çºê¤¯ä—œÖ¨ã£µî€†à½‰âˆšè®‰á™—涚 [ 97.282418][ T30] audit: type=1400 audit(1743030644.288:367): avc: denied { append } for pid=6561 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.313838][ T5885] usb 3-1: SerialNumber: Ð [ 97.346976][ T6554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.356318][ T6554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.896897][ T749] team0 (unregistering): Port device team_slave_1 removed [ 98.010128][ T749] team0 (unregistering): Port device team_slave_0 removed [ 98.668388][ T6515] team0: Port device team_slave_0 added [ 98.688768][ T6515] team0: Port device team_slave_1 added [ 98.751909][ T6588] netlink: 10 bytes leftover after parsing attributes in process `syz.3.173'. [ 98.790375][ T54] Bluetooth: hci1: command tx timeout [ 98.872932][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.908834][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.938985][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.973071][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.983539][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.023640][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.226238][ T6515] hsr_slave_0: entered promiscuous mode [ 99.276788][ T6515] hsr_slave_1: entered promiscuous mode [ 99.282957][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.310299][ T6515] Cannot create hsr debugfs directory [ 99.417658][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 99.417675][ T30] audit: type=1400 audit(1743030646.738:371): avc: denied { getopt } for pid=6603 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.623973][ T5885] usb 3-1: USB disconnect, device number 7 [ 99.809332][ T6515] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.887575][ T6515] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.930476][ T6515] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.956006][ T6515] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.156065][ T5885] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 100.175144][ T6642] sg_write: process 131 (syz.1.182) changed security contexts after opening file descriptor, this is not allowed. [ 100.323717][ T30] audit: type=1400 audit(1743030647.648:372): avc: denied { getopt } for pid=6645 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 100.380338][ T30] audit: type=1400 audit(1743030647.668:373): avc: denied { shutdown } for pid=6645 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.400331][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 100.416549][ T5885] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.217308][ T54] Bluetooth: hci1: command tx timeout [ 101.270142][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.278166][ T5885] usb 3-1: Product: syz [ 101.342206][ T5885] usb 3-1: Manufacturer: syz [ 101.358055][ T5885] usb 3-1: SerialNumber: syz [ 101.375969][ T5885] usb 3-1: config 0 descriptor?? [ 101.429762][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.514537][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.548815][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.556009][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.576194][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.583319][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.599684][ T5885] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.639185][ T5885] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 101.692736][ T5885] usb 3-1: USB disconnect, device number 8 [ 101.760504][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 101.933394][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 101.946129][ T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 101.954546][ T9] usb 2-1: config 0 has no interface number 0 [ 101.972284][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 102.010179][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.030264][ T5885] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 102.037388][ T9] usb 2-1: Product: syz [ 102.047245][ T9] usb 2-1: Manufacturer: syz [ 102.060151][ T9] usb 2-1: SerialNumber: syz [ 102.074557][ T9] usb 2-1: config 0 descriptor?? [ 102.084659][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.091017][ T9] hub 2-1:0.89: bad descriptor, ignoring hub [ 102.109461][ T9] hub 2-1:0.89: probe with driver hub failed with error -5 [ 102.147288][ T9] option 2-1:0.89: GSM modem (1-port) converter detected [ 102.158740][ T9] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 102.212011][ T5885] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 102.233131][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.252482][ T6705] netlink: 17 bytes leftover after parsing attributes in process `syz.3.193'. [ 102.261477][ T6705] netlink: zone id is out of range [ 102.266638][ T6705] netlink: zone id is out of range [ 102.271850][ T6705] netlink: zone id is out of range [ 102.278175][ T6705] netlink: zone id is out of range [ 102.283426][ T6705] netlink: zone id is out of range [ 102.288535][ T6705] netlink: zone id is out of range [ 102.293661][ T6705] netlink: zone id is out of range [ 102.298786][ T6705] netlink: zone id is out of range [ 102.303918][ T6705] netlink: zone id is out of range [ 102.309103][ T6705] netlink: zone id is out of range [ 102.400122][ T30] audit: type=1400 audit(1743030649.568:374): avc: denied { bind } for pid=6703 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.433860][ T30] audit: type=1400 audit(1743030649.568:375): avc: denied { name_bind } for pid=6703 comm="syz.3.193" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 102.627502][ T5885] usb 3-1: config 0 descriptor?? [ 102.633228][ T30] audit: type=1400 audit(1743030649.568:376): avc: denied { node_bind } for pid=6703 comm="syz.3.193" saddr=224.0.0.2 src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 102.657139][ T5885] cp210x 3-1:0.0: cp210x converter detected [ 103.073664][ T6515] veth0_vlan: entered promiscuous mode [ 103.091869][ T6515] veth1_vlan: entered promiscuous mode [ 103.163825][ T6515] veth0_macvtap: entered promiscuous mode [ 103.171778][ T5885] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 103.204207][ T6515] veth1_macvtap: entered promiscuous mode [ 103.234506][ T30] audit: type=1400 audit(1743030650.558:377): avc: denied { create } for pid=6661 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.253932][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.289482][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.325274][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.464991][ T30] audit: type=1400 audit(1743030650.608:378): avc: denied { connect } for pid=6661 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.490017][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.490464][ T30] audit: type=1400 audit(1743030650.628:379): avc: denied { ioctl } for pid=6661 comm="syz.1.186" path="socket:[12047]" dev="sockfs" ino=12047 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.501035][ T6728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.525138][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.541619][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.552080][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.563495][ T6728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.571394][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.582257][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.681848][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.714748][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.771374][ T5885] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 103.786448][ T5885] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 103.789600][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.804303][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.804826][ T5885] usb 3-1: cp210x converter now attached to ttyUSB1 [ 103.814467][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.814494][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.828051][ T5885] usb 3-1: USB disconnect, device number 9 [ 103.831678][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.858949][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.860417][ T24] usb 2-1: USB disconnect, device number 13 [ 103.869845][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.887697][ T5885] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 103.892354][ T6515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.905307][ T6515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.905992][ T24] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 103.914543][ T6515] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.936299][ T6515] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.939508][ T5885] cp210x 3-1:0.0: device disconnected [ 103.966526][ T24] option 2-1:0.89: device disconnected [ 104.044104][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.058551][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.087755][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.096711][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.136467][ T30] audit: type=1400 audit(1743030651.448:380): avc: denied { mounton } for pid=6515 comm="syz-executor" path="/root/syzkaller.zvy4bl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 104.163080][ C0] vkms_vblank_simulate: vblank timer overrun [ 104.535783][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 104.535821][ T30] audit: type=1400 audit(1743030651.858:384): avc: denied { setrlimit } for pid=6754 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 104.609396][ T30] audit: type=1400 audit(1743030651.928:385): avc: denied { setopt } for pid=6755 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.650477][ T5880] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 104.668516][ T30] audit: type=1400 audit(1743030651.958:386): avc: denied { bind } for pid=6755 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.734898][ T5885] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 104.920297][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 104.949381][ T5885] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 104.975427][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.987323][ T5880] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.998742][ T5880] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 105.019852][ T5880] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.029669][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.057673][ T5880] usb 6-1: Product: syz [ 105.064730][ T5880] usb 6-1: Manufacturer: syz [ 105.072090][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.127086][ T5885] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.135558][ T5880] usb 6-1: SerialNumber: syz [ 105.140825][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.148921][ T5885] usb 4-1: Product: syz [ 105.168337][ T5885] usb 4-1: Manufacturer: syz [ 105.178381][ T5885] usb 4-1: SerialNumber: syz [ 105.325761][ T6788] fuse: Bad value for 'fd' [ 105.387744][ T54] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 105.400356][ T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 105.406781][ T6790] IPVS: set_ctl: invalid protocol: 43 172.20.20.19:20003 [ 105.430977][ T6749] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 105.550292][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 105.563694][ T47] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 105.573068][ T47] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.584297][ T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.652485][ T47] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.686011][ T5885] usb 4-1: 0:2 : does not exist [ 105.697499][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.727896][ T47] usb 2-1: Product: syz [ 105.739815][ T47] usb 2-1: Manufacturer: syz [ 105.750029][ T47] usb 2-1: SerialNumber: syz [ 105.765742][ T30] audit: type=1400 audit(2000000000.590:387): avc: denied { getopt } for pid=6797 comm="syz.2.205" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.092742][ T6749] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 106.308038][ T5880] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 106.311786][ T5885] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 106.316730][ T5826] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 106.334312][ T5880] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 106.342143][ T5880] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 106.368224][ T5885] usb 4-1: USB disconnect, device number 10 [ 106.374445][ T47] usb 2-1: 0:2 : does not exist [ 106.490307][ T5826] usb 1-1: Invalid ep0 maxpacket: 64 [ 106.818017][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.196'. [ 106.873531][ T5826] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 106.893757][ T5880] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 106.931014][ T6749] team0 (unregistering): Port device team_slave_0 removed [ 106.942182][ T6749] team0 (unregistering): Port device team_slave_1 removed [ 106.977969][ T5880] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 107.005911][ T5880] wwan wwan0: port wwan0mbim0 attached [ 107.031440][ T5880] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 107.051329][ T30] audit: type=1400 audit(2000000001.870:388): avc: denied { map } for pid=6839 comm="syz.2.208" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.096333][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.104906][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.130200][ T5826] usb 1-1: Invalid ep0 maxpacket: 64 [ 107.147107][ T5826] usb usb1-port1: attempt power cycle [ 107.212993][ T30] audit: type=1400 audit(2000000001.870:389): avc: denied { execute } for pid=6839 comm="syz.2.208" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 107.239198][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 107.246021][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 107.252427][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 107.259104][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 107.265502][ C1] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 107.272179][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 107.278385][ C1] cdc_mbim 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 107.738855][ T9] usb 6-1: USB disconnect, device number 2 [ 107.763847][ T9] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 107.813693][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 107.893217][ T30] audit: type=1400 audit(2000000002.720:390): avc: denied { connect } for pid=6853 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.923257][ T30] audit: type=1400 audit(2000000002.720:391): avc: denied { write } for pid=6853 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.969023][ T47] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 108.021884][ T47] usb 2-1: USB disconnect, device number 14 [ 108.102534][ T5826] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 108.143777][ T5826] usb 1-1: Invalid ep0 maxpacket: 64 [ 108.232197][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 108.270312][ T5826] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 108.312815][ T5826] usb 1-1: Invalid ep0 maxpacket: 64 [ 108.327833][ T5826] usb usb1-port1: unable to enumerate USB device [ 108.360536][ T5885] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 108.368731][ T5125] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 108.530220][ T5125] usb 3-1: Using ep0 maxpacket: 8 [ 108.539545][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.558964][ T30] audit: type=1400 audit(2000000003.380:392): avc: denied { listen } for pid=6893 comm="syz.1.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 108.581158][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.618779][ T5125] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 108.627094][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 108.638336][ T5125] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.648512][ T30] audit: type=1400 audit(2000000003.380:393): avc: denied { mounton } for pid=6893 comm="syz.1.214" path="/43/file0" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 108.671862][ T5125] usb 3-1: config 0 has no interface number 0 [ 108.678040][ T5125] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 108.690476][ T5125] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.703547][ T5125] usb 3-1: config 0 interface 52 has no altsetting 0 [ 108.754040][ T6903] netlink: 96 bytes leftover after parsing attributes in process `syz.5.216'. [ 108.763728][ T5885] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.781214][ T6904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.215'. [ 108.910484][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.918573][ T5885] usb 4-1: Product: syz [ 108.946863][ T5885] usb 4-1: Manufacturer: syz [ 108.955514][ T5885] usb 4-1: SerialNumber: syz [ 108.962433][ T5125] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 108.972269][ T5125] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 108.972446][ T6848] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 108.988111][ T5125] usb 3-1: Manufacturer: syz [ 108.988854][ T5885] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 109.032469][ T5125] usb 3-1: config 0 descriptor?? [ 109.081134][ T5885] cdc_ncm 4-1:1.0: bind() failure [ 109.121914][ T5885] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 109.128754][ T5885] cdc_ncm 4-1:1.1: bind() failure [ 109.706019][ T30] audit: type=1400 audit(2000000004.140:394): avc: denied { append } for pid=6908 comm="syz.0.219" name="sg0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.759118][ T5125] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input9 [ 109.857574][ T30] audit: type=1400 audit(2000000004.680:395): avc: denied { create } for pid=6916 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 110.253462][ T5826] usb 4-1: USB disconnect, device number 11 [ 110.439084][ T30] audit: type=1400 audit(2000000005.190:396): avc: denied { append } for pid=6866 comm="syz.2.212" name="usbmon5" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.505803][ T6924] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 110.505803][ T6924] program syz.0.222 not setting count and/or reply_len properly [ 110.559682][ T30] audit: type=1400 audit(2000000005.190:397): avc: denied { open } for pid=6866 comm="syz.2.212" path="/dev/usbmon5" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.636425][ T30] audit: type=1400 audit(2000000005.360:398): avc: denied { accept } for pid=6921 comm="syz.3.221" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.671335][ T30] audit: type=1400 audit(2000000005.360:399): avc: denied { read } for pid=6921 comm="syz.3.221" laddr=127.0.0.1 lport=50894 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 110.724729][ T30] audit: type=1400 audit(2000000005.420:400): avc: denied { write } for pid=6921 comm="syz.3.221" path="socket:[13516]" dev="sockfs" ino=13516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.400151][ T5826] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 111.550201][ T5826] usb 2-1: Using ep0 maxpacket: 32 [ 111.560208][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 111.579994][ T5826] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 111.604177][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.748178][ T30] audit: type=1400 audit(2000000006.460:401): avc: denied { bind } for pid=6946 comm="syz.3.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.770291][ T5826] usb 2-1: Product: syz [ 111.774792][ T5826] usb 2-1: Manufacturer: syz [ 111.779942][ T5826] usb 2-1: SerialNumber: syz [ 111.964866][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 112.071361][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.094455][ T5826] usb 2-1: config 0 descriptor?? [ 112.334126][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.345152][ T5826] hub 2-1:0.0: bad descriptor, ignoring hub [ 112.353120][ T5826] hub 2-1:0.0: probe with driver hub failed with error -5 [ 112.361535][ T10] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 112.372167][ T5826] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 112.379127][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.399431][ T10] usb 6-1: config 0 descriptor?? [ 112.566542][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.671621][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.739749][ T5826] gspca_vc032x: reg_w err -71 [ 112.767364][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.788669][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.799230][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.833447][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.853983][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.867450][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.880721][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.891888][ T10] ft260 0003:0403:6030.0009: item fetching failed at offset 0/2 [ 112.902983][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.908317][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.914460][ T10] ft260 0003:0403:6030.0009: failed to parse HID [ 112.921581][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.927228][ T10] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -22 [ 112.936612][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.946227][ T30] audit: type=1326 audit(2000000007.770:402): auid=4294967295 uid=3327 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6956 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ab1b8d169 code=0x7fc00000 [ 112.970248][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 112.975572][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 113.426830][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 113.434882][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 113.451516][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 113.464211][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 113.488614][ T10] usb 6-1: USB disconnect, device number 3 [ 113.515895][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 113.544080][ T5826] gspca_vc032x: I2c Bus Busy Wait 00 [ 113.567701][ T5826] gspca_vc032x: Unknown sensor... [ 113.588233][ T5826] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 113.644869][ T5826] usb 2-1: USB disconnect, device number 15 [ 113.687214][ T10] usb 3-1: USB disconnect, device number 10 [ 113.687260][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 113.982181][ T30] audit: type=1400 audit(2000000008.760:403): avc: denied { create } for pid=6976 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 114.062457][ T5880] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 114.687691][ T5880] usb 6-1: config 6 has an invalid interface number: 152 but max is 3 [ 114.862067][ T5880] usb 6-1: config 6 has an invalid interface number: 126 but max is 3 [ 114.980371][ T5880] usb 6-1: config 6 has an invalid interface number: 169 but max is 3 [ 114.996392][ T5880] usb 6-1: config 6 has an invalid interface number: 214 but max is 3 [ 115.041061][ T5880] usb 6-1: config 6 has an invalid interface number: 247 but max is 3 [ 115.054693][ T6995] netlink: 'syz.3.240': attribute type 1 has an invalid length. [ 115.070354][ T5880] usb 6-1: config 6 has an invalid interface number: 221 but max is 3 [ 115.108989][ T5880] usb 6-1: config 6 has 6 interfaces, different from the descriptor's value: 4 [ 115.240373][ T5826] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 115.417793][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.434878][ T5880] usb 6-1: config 6 has no interface number 0 [ 115.461615][ T5880] usb 6-1: config 6 has no interface number 1 [ 115.482146][ T5880] usb 6-1: config 6 has no interface number 2 [ 115.501956][ T5880] usb 6-1: config 6 has no interface number 3 [ 115.519145][ T5880] usb 6-1: config 6 has no interface number 4 [ 115.535269][ T5880] usb 6-1: config 6 has no interface number 5 [ 115.551315][ T5880] usb 6-1: config 6 interface 152 altsetting 71 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 115.715169][ T7004] bond1: (slave gretap1): making interface the new active one [ 115.729951][ T7004] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 115.969986][ T5880] usb 6-1: config 6 interface 152 altsetting 71 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 115.984843][ T5880] usb 6-1: too many endpoints for config 6 interface 126 altsetting 163: 255, using maximum allowed: 30 [ 115.996323][ T5880] usb 6-1: config 6 interface 126 altsetting 163 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 116.007649][ T5880] usb 6-1: config 6 interface 126 altsetting 163 endpoint 0xC has invalid maxpacket 1007, setting to 64 [ 116.029398][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 116.040469][ T5880] usb 6-1: config 6 interface 126 altsetting 163 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 116.053712][ T5826] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 116.066122][ T5880] usb 6-1: config 6 interface 126 altsetting 163 has a duplicate endpoint with address 0xE, skipping [ 116.495373][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.510369][ T5880] usb 6-1: config 6 interface 126 altsetting 163 has 4 endpoint descriptors, different from the interface descriptor's value: 255 [ 116.570428][ T5826] usb 1-1: config 0 descriptor?? [ 116.579231][ T6991] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 116.590435][ T5880] usb 6-1: config 6 interface 169 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 116.608009][ T5880] usb 6-1: config 6 interface 169 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 116.634045][ T5880] usb 6-1: config 6 interface 169 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 117.272523][ T5880] usb 6-1: config 6 interface 169 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 117.424485][ T5880] usb 6-1: config 6 interface 169 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 117.435552][ T5880] usb 6-1: config 6 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.452546][ T5880] usb 6-1: config 6 interface 214 altsetting 0 endpoint 0x1 has invalid maxpacket 1032, setting to 64 [ 117.477783][ T5880] usb 6-1: config 6 interface 214 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 117.492498][ T5880] usb 6-1: config 6 interface 214 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.582851][ T30] audit: type=1400 audit(2000000012.410:404): avc: denied { create } for pid=7030 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 117.602485][ T5880] usb 6-1: config 6 interface 214 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 117.639059][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.661149][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.668986][ T5880] usb 6-1: too many endpoints for config 6 interface 247 altsetting 17: 98, using maximum allowed: 30 [ 117.703269][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.715834][ T5880] usb 6-1: config 6 interface 247 altsetting 17 has an invalid descriptor for endpoint zero, skipping [ 117.720418][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.729591][ T5880] usb 6-1: config 6 interface 247 altsetting 17 has a duplicate endpoint with address 0x2, skipping [ 117.750248][ T5880] usb 6-1: config 6 interface 247 altsetting 17 has a duplicate endpoint with address 0xF, skipping [ 117.784259][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 117.808109][ T5880] usb 6-1: config 6 interface 247 altsetting 17 has 4 endpoint descriptors, different from the interface descriptor's value: 98 [ 117.830340][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 117.851562][ T5826] usbhid 1-1:0.0: can't add hid device: -71 [ 117.858683][ T5826] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.879356][ T5880] usb 6-1: config 6 interface 221 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 117.900854][ T5826] usb 1-1: USB disconnect, device number 14 [ 117.909029][ T5880] usb 6-1: config 6 interface 221 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 117.931669][ T5880] usb 6-1: config 6 interface 152 has no altsetting 0 [ 117.938486][ T5880] usb 6-1: config 6 interface 126 has no altsetting 0 [ 117.976492][ T5880] usb 6-1: config 6 interface 247 has no altsetting 0 [ 117.994935][ T5880] usb 6-1: config 6 interface 221 has no altsetting 0 [ 118.014177][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 118.020671][ T5880] usb 6-1: string descriptor 0 read error: -71 [ 118.028146][ T24] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 118.030723][ T5880] usb 6-1: New USB device found, idVendor=2040, idProduct=b910, bcdDevice= 3.bc [ 118.053116][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.073593][ T24] usb 4-1: config 0 has no interface number 0 [ 118.091371][ T24] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 118.110427][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.128256][ T24] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 118.156289][ T5880] usb 6-1: can't set config #6, error -71 [ 118.170297][ T24] usb 4-1: config 0 interface 255 has no altsetting 0 [ 118.177124][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 118.190248][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.204102][ T5125] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 118.205284][ T5880] usb 6-1: USB disconnect, device number 4 [ 118.231392][ T24] usb 4-1: config 0 descriptor?? [ 118.255760][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 118.262896][ T30] audit: type=1400 audit(2000000013.080:405): avc: denied { connect } for pid=7051 comm="syz.5.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.370211][ T5125] usb 2-1: Using ep0 maxpacket: 32 [ 118.376966][ T5125] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 118.409029][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 118.445322][ T5125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 118.501335][ T30] audit: type=1400 audit(2000000013.300:406): avc: denied { read } for pid=7060 comm="syz.0.251" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 118.525080][ T5125] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.554959][ T5125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.596101][ T5125] usb 2-1: config 0 descriptor?? [ 118.602002][ T30] audit: type=1400 audit(2000000013.300:407): avc: denied { open } for pid=7060 comm="syz.0.251" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 118.638356][ T7046] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 118.647321][ T5125] hub 2-1:0.0: USB hub found [ 118.860890][ T5125] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 118.978802][ T7086] »»»»»»: renamed from lo (while UP) [ 119.121419][ T24] gspca_vc032x: reg_w err -71 [ 119.126208][ T24] vc032x 4-1:0.255: probe with driver vc032x failed with error -71 [ 119.141632][ T24] usb 4-1: USB disconnect, device number 12 [ 119.143376][ T54] Bluetooth: hci3: adv larger than maximum supported [ 119.148660][ T54] Bluetooth: hci3: Malformed LE Event: 0x0d [ 119.318557][ T7095] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.254'. [ 119.365749][ T5125] hid-generic 0003:046D:C314.000A: item fetching failed at offset 2/3 [ 119.400274][ T7064] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.450010][ T5125] hid-generic 0003:046D:C314.000A: probe with driver hid-generic failed with error -22 [ 119.506332][ T7064] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.579644][ T7064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.608436][ T7064] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 119.611270][ T5125] usb 2-1: USB disconnect, device number 16 [ 119.623960][ T7064] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.631743][ T7064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.639905][ T7064] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.649985][ T7064] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 119.656904][ T7064] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 119.665466][ T7064] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 119.672804][ T7064] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.678844][ T7064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.685851][ T7064] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.776188][ T30] audit: type=1400 audit(2000000014.600:408): avc: denied { setattr } for pid=7097 comm="syz.0.255" name="vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 119.970595][ T7105] overlayfs: overlapping lowerdir path [ 120.002228][ T7105] overlay: Unknown parameter 'fowner<00000000000000000000' [ 120.010165][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 120.023080][ T7105] TCP: TCP_TX_DELAY enabled [ 120.146240][ T30] audit: type=1400 audit(2000000014.970:409): avc: denied { accept } for pid=7108 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.190232][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 120.201067][ T24] usb 6-1: config 65 has an invalid interface number: 95 but max is 0 [ 120.209545][ T24] usb 6-1: config 65 has no interface number 0 [ 120.238593][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6 [ 120.248649][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.263310][ T24] usb 6-1: Product: syz [ 120.267033][ T7114] [U] [ 120.272538][ T7114] [U] [ 120.272903][ T24] usb 6-1: Manufacturer: syz [ 120.275237][ T7114] [U] [ 120.275267][ T7114] [U] [ 120.280017][ T24] usb 6-1: SerialNumber: syz [ 120.306157][ T7114] [U] [ 120.308911][ T7114] [U] [ 120.311653][ T7114] [U] [ 120.314342][ T7114] [U] [ 120.338003][ T7114] [U] [ 120.340811][ T7114] [U] [ 120.343529][ T7114] [U] [ 120.346239][ T7114] [U] [ 120.375007][ T7114] [U] [ 120.377754][ T7114] [U] [ 120.380497][ T7114] [U] [ 120.383236][ T7114] [U] [ 120.413768][ T7114] [U] [ 120.416535][ T7114] [U] [ 120.419252][ T7114] [U] [ 120.421957][ T7114] [U] [ 120.431843][ T7114] [U] [ 120.434593][ T7114] [U] [ 120.437296][ T7114] [U] [ 120.439993][ T7114] [U] [ 120.455245][ T7114] [U] [ 120.458004][ T7114] [U] [ 120.460710][ T7114] [U] [ 120.463413][ T7114] [U] [ 120.472555][ T7114] [U] [ 120.475308][ T7114] [U] [ 120.477988][ T7114] [U] [ 120.480661][ T7114] [U] [ 120.491664][ T7114] [U] [ 120.494429][ T7114] [U] [ 120.497126][ T7114] [U] [ 120.499824][ T7114] [U] [ 120.582245][ T24] usbtest 6-1:65.95: couldn't get endpoints, -22 [ 120.590615][ T24] usbtest 6-1:65.95: probe with driver usbtest failed with error -22 [ 120.673935][ T24] usb 6-1: USB disconnect, device number 5 [ 120.695528][ T7114] [U] [ 120.698263][ T7114] [U] [ 120.700966][ T7114] [U] [ 120.703633][ T7114] [U] [ 120.771728][ T5833] udevd[5833]: setting mode of /dev/bus/usb/006/005 to 020664 failed: No such file or directory [ 120.784791][ T5833] udevd[5833]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: No such file or directory [ 120.796796][ T7114] [U] [ 120.799515][ T7114] [U] [ 120.802208][ T7114] [U] [ 120.804886][ T7114] [U] [ 120.868049][ T7114] [U] [ 120.870752][ T7114] [U] [ 120.873431][ T7114] [U] [ 120.876105][ T7114] [U] [ 120.900350][ T7114] [U] [ 120.903093][ T7114] [U] [ 120.905785][ T7114] [U] [ 120.908457][ T7114] [U] [ 120.925082][ T7114] [U] [ 120.927826][ T7114] [U] [ 120.930529][ T7114] [U] [ 120.933223][ T7114] [U] [ 120.954055][ T7114] [U] [ 120.956796][ T7114] [U] [ 120.959500][ T7114] [U] [ 120.962204][ T7114] [U] [ 120.972585][ T7114] [U] [ 120.975327][ T7114] [U] [ 120.978027][ T7114] [U] [ 120.980728][ T7114] [U] [ 120.993013][ T7114] [U] [ 120.995763][ T7114] [U] [ 120.998470][ T7114] [U] [ 121.001170][ T7114] [U] [ 121.005565][ T7114] [U] [ 121.008295][ T7114] [U] [ 121.011001][ T7114] [U] [ 121.013701][ T7114] [U] [ 121.021266][ T7114] [U] [ 121.024004][ T7114] [U] [ 121.026713][ T7114] [U] [ 121.029418][ T7114] [U] [ 121.040468][ T7114] [U] [ 121.043206][ T7114] [U] [ 121.045913][ T7114] [U] [ 121.048630][ T7114] [U] [ 121.054571][ T7114] [U] [ 121.057297][ T7114] [U] [ 121.060001][ T7114] [U] [ 121.062705][ T7114] [U] [ 121.067323][ T7114] [U] [ 121.070054][ T7114] [U] [ 121.072784][ T7114] [U] [ 121.075479][ T7114] [U] [ 121.081668][ T7114] [U] [ 121.084398][ T7114] [U] [ 121.087091][ T7114] [U] [ 121.089785][ T7114] [U] [ 121.099754][ T7114] [U] [ 121.150204][ T5826] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 121.252494][ T7124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7124 comm=syz.0.262 [ 121.296424][ T7127] overlay: Bad value for 'index' [ 121.309280][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.263'. [ 121.332447][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 121.345866][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 121.402871][ T5826] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.427737][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.446107][ T5826] usb 4-1: Product: syz [ 121.454799][ T5826] usb 4-1: Manufacturer: syz [ 121.524110][ T5826] usb 4-1: SerialNumber: syz [ 121.553593][ T5826] usb 4-1: config 0 descriptor?? [ 121.576170][ T5826] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.590185][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.604866][ T5826] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 121.670530][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 121.677357][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.760809][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.770255][ T47] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 121.957983][ T47] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 121.973208][ T47] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 122.069754][ T47] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 122.103847][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.293978][ T5826] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 122.464674][ T7170] xt_hashlimit: invalid interval [ 122.472009][ T30] audit: type=1400 audit(2000000017.240:410): avc: denied { map } for pid=7162 comm="syz.1.267" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.790331][ T30] audit: type=1400 audit(2000000017.240:411): avc: denied { execute } for pid=7162 comm="syz.1.267" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.814144][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.081843][ T7180] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 123.100295][ T7180] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 123.221632][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 123.375013][ T47] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 123.390256][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 123.395087][ T47] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input10 [ 123.406033][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 123.418374][ T47] input: failed to attach handler kbd to device input10, error: -5 [ 123.429999][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.442173][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 123.472720][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.484843][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.505043][ T10] usb 6-1: Product: syz [ 123.509294][ T10] usb 6-1: Manufacturer: syz [ 123.533690][ T10] usb 6-1: SerialNumber: syz [ 123.555390][ T10] usb 6-1: config 0 descriptor?? [ 123.576125][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.587459][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 123.620309][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 123.638527][ T9] usb 2-1: config 4 has an invalid interface number: 34 but max is 3 [ 123.646935][ T9] usb 2-1: config 4 has an invalid interface number: 185 but max is 3 [ 123.657843][ T9] usb 2-1: config 4 has an invalid interface association descriptor of length 4, skipping [ 123.668799][ T9] usb 2-1: config 4 has an invalid interface number: 170 but max is 3 [ 123.677441][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.832704][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.838988][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 123.845239][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.921745][ T9] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 123.931206][ T9] usb 2-1: config 4 has an invalid interface number: 183 but max is 3 [ 123.939418][ T9] usb 2-1: config 4 has no interface number 0 [ 123.945665][ T9] usb 2-1: config 4 has no interface number 1 [ 123.951817][ T9] usb 2-1: config 4 has no interface number 2 [ 123.957904][ T9] usb 2-1: config 4 has no interface number 3 [ 123.964070][ T9] usb 2-1: config 4 interface 185 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 123.978107][ T9] usb 2-1: config 4 interface 185 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 123.988897][ T9] usb 2-1: config 4 interface 185 altsetting 5 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 124.005884][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 124.013046][ T9] usb 2-1: config 4 interface 185 altsetting 5 endpoint 0x8E has invalid maxpacket 1024, setting to 64 [ 124.024320][ T10] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 124.032396][ T9] usb 2-1: config 4 interface 170 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 124.046456][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 124.066996][ T30] audit: type=1400 audit(2000000018.880:412): avc: denied { append } for pid=7219 comm="syz.5.274" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.091940][ T9] usb 2-1: config 4 interface 170 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 124.103459][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 124.107830][ T30] audit: type=1400 audit(2000000018.880:413): avc: denied { read } for pid=7219 comm="syz.5.274" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 124.121195][ T9] usb 2-1: config 4 interface 170 altsetting 9 endpoint 0xC has invalid maxpacket 1056, setting to 64 [ 124.145093][ T9] usb 2-1: config 4 interface 170 altsetting 9 bulk endpoint 0x4 has invalid maxpacket 32 [ 124.159247][ T10] usb 6-1: USB disconnect, device number 6 [ 124.169221][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 124.204099][ T10] em28xx 6-1:0.0: Freeing device [ 124.232468][ T9] usb 2-1: config 4 interface 170 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 124.281083][ T9] usb 2-1: config 4 interface 170 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.308397][ T9] usb 2-1: config 4 interface 170 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 124.331340][ T9] usb 2-1: config 4 interface 170 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.369564][ T9] usb 2-1: config 4 interface 170 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.409277][ T9] usb 2-1: config 4 interface 183 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.429403][ T9] usb 2-1: config 4 interface 183 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 124.457575][ T9] usb 2-1: config 4 interface 183 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 124.480356][ T9] usb 2-1: config 4 interface 183 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 124.502072][ T9] usb 2-1: config 4 interface 183 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 124.524923][ T9] usb 2-1: config 4 interface 183 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 124.558669][ T9] usb 2-1: config 4 interface 183 altsetting 9 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 124.573368][ T7247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.582729][ T9] usb 2-1: config 4 interface 183 altsetting 9 has a duplicate endpoint with address 0x86, skipping [ 124.597740][ T7247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.618261][ T10] usb 1-1: USB disconnect, device number 15 [ 124.633946][ T9] usb 2-1: config 4 interface 183 altsetting 9 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 124.675431][ T9] usb 2-1: config 4 interface 34 has no altsetting 0 [ 124.689358][ T9] usb 2-1: config 4 interface 185 has no altsetting 0 [ 124.704535][ T9] usb 2-1: config 4 interface 170 has no altsetting 0 [ 124.712278][ T9] usb 2-1: config 4 interface 183 has no altsetting 0 [ 124.722357][ T9] usb 2-1: New USB device found, idVendor=0b3c, idProduct=c002, bcdDevice=5e.25 [ 124.723672][ T7250] overlay: ./file1 is not a directory [ 124.757353][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.759809][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.776759][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.780139][ T9] usb 2-1: Product: á·Šå—䫊锦脲깣ꇾ髇Ⱝã¢àªŒë¼¢â­Ö’ລ鵪㟿ﺞࢯ땩뢸뫩圠肹ᅥëžê¸¡ážé¾³è‚©î…á†á¼¡è›¶ï¿”兔䈤䶄ë¢à¸¢æ§¬ï•¼ë²µã¢‘î˜ï¢—凅畞᭟뙺â¸êŽ©ë˜±ï„Œî“†äˆ„䎇칎х姟蓱䠈Փ趦ëˆì¢.ê¬â·£áˆ ç¡‘怣ä–鮜鿠ä‚é©ã¢¶æ´¼ã…“퓶ᆚಉ़咉次芄洜⸚Ⱋ아挎䦎ꭌᰚ몀䟬á·ì¿¯ä¼·ì…°ë§å‰Ÿäœ‘蚲᫧놴臓á–뤳乔緅ꀶ縄髲肓껤 [ 124.796823][ T30] audit: type=1400 audit(2000000019.620:414): avc: denied { execute_no_trans } for pid=7249 comm="syz.2.276" path="/58/file1" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.820064][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.894270][ T9] usb 2-1: Manufacturer: à ‰ [ 124.898468][ T7224] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.909105][ T9] usb 2-1: SerialNumber: syz [ 124.932332][ T7224] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 125.023443][ T30] audit: type=1400 audit(2000000019.740:415): avc: denied { create } for pid=7120 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.118212][ T30] audit: type=1400 audit(2000000019.750:416): avc: denied { bind } for pid=7120 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.179443][ T9] option 2-1:4.34: GSM modem (1-port) converter detected [ 125.215747][ T9] option 2-1:4.185: GSM modem (1-port) converter detected [ 125.234325][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 125.249055][ T9] option 2-1:4.170: GSM modem (1-port) converter detected [ 125.285267][ T9] option 2-1:4.183: GSM modem (1-port) converter detected [ 125.292637][ T30] audit: type=1400 audit(2000000019.750:417): avc: denied { write } for pid=7120 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 125.324938][ T7224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.341209][ T9] usb 2-1: USB disconnect, device number 17 [ 125.366550][ T7224] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 125.381788][ T7224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.396324][ T7224] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 125.413657][ T9] option 2-1:4.34: device disconnected [ 125.453885][ T7224] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.471487][ T5826] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.479842][ T5826] em28xx 4-1:0.0: board has no eeprom [ 125.491618][ T9] option 2-1:4.185: device disconnected [ 125.505797][ T7224] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 125.517195][ T9] option 2-1:4.170: device disconnected [ 125.542375][ T9] option 2-1:4.183: device disconnected [ 125.591191][ T6001] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 125.599375][ T5826] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 125.615858][ T5826] em28xx 4-1:0.0: dvb set to bulk mode. [ 125.627541][ T10] em28xx 4-1:0.0: Binding DVB extension [ 125.650785][ T5826] usb 4-1: USB disconnect, device number 13 [ 125.677687][ T5826] em28xx 4-1:0.0: Disconnecting em28xx [ 125.707261][ T10] em28xx 4-1:0.0: Registering input extension [ 125.720046][ T5826] em28xx 4-1:0.0: Closing input extension [ 125.753373][ T6001] usb 1-1: Using ep0 maxpacket: 16 [ 125.772571][ T6001] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 125.840926][ T5826] em28xx 4-1:0.0: Freeing device [ 125.917817][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.918126][ T6001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.020403][ T7299] libceph: resolve '0.0' (ret=-3): failed [ 126.161777][ T6001] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.272601][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.307914][ T6001] usb 1-1: Product: syz [ 126.338159][ T6001] usb 1-1: Manufacturer: syz [ 126.368290][ T6001] usb 1-1: SerialNumber: syz [ 126.378611][ T7224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 126.391508][ T7224] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 126.608146][ T30] audit: type=1400 audit(2000000021.430:418): avc: denied { listen } for pid=7313 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 126.911176][ T6001] usb 1-1: 0:2 : does not exist [ 127.070546][ T6001] usb 1-1: USB disconnect, device number 16 [ 127.490789][ T30] audit: type=1400 audit(2000000022.320:419): avc: denied { connect } for pid=7342 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.570819][ T30] audit: type=1400 audit(2000000022.340:420): avc: denied { read } for pid=7342 comm="syz.3.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.780201][ T6001] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 127.820885][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 127.820900][ T30] audit: type=1400 audit(2000000022.650:429): avc: denied { append } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.890407][ T30] audit: type=1400 audit(2000000022.680:430): avc: denied { write } for pid=7355 comm="rm" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.913112][ T30] audit: type=1400 audit(2000000022.680:431): avc: denied { remove_name } for pid=7355 comm="rm" name="resolv.conf.lapb4.ipv4ll" dev="tmpfs" ino=2984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.936820][ T30] audit: type=1400 audit(2000000022.680:432): avc: denied { unlink } for pid=7355 comm="rm" name="resolv.conf.lapb4.ipv4ll" dev="tmpfs" ino=2984 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.968927][ T30] audit: type=1400 audit(2000000022.790:433): avc: denied { read write } for pid=7363 comm="syz.0.291" name="radio2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 128.001291][ T6001] usb 4-1: Using ep0 maxpacket: 16 [ 128.060185][ T30] audit: type=1400 audit(2000000022.820:434): avc: denied { open } for pid=7363 comm="syz.0.291" path="/dev/radio2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 128.084462][ T30] audit: type=1400 audit(2000000022.820:435): avc: denied { ioctl } for pid=7363 comm="syz.0.291" path="/dev/radio2" dev="devtmpfs" ino=968 ioctlcmd=0x5665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 128.098926][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 128.142640][ T6001] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 128.152718][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.160966][ T6001] usb 4-1: Product: syz [ 128.165168][ T6001] usb 4-1: Manufacturer: syz [ 128.169771][ T6001] usb 4-1: SerialNumber: syz [ 128.182751][ T6001] usb 4-1: config 0 descriptor?? [ 128.190966][ T6001] hub 4-1:0.0: bad descriptor, ignoring hub [ 128.196988][ T6001] hub 4-1:0.0: probe with driver hub failed with error -5 [ 128.254493][ T30] audit: type=1400 audit(2000000022.820:436): avc: denied { write } for pid=7363 comm="syz.0.291" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.273870][ T6001] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 128.286965][ T30] audit: type=1400 audit(2000000022.820:437): avc: denied { open } for pid=7363 comm="syz.0.291" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.410338][ T30] audit: type=1400 audit(2000000022.820:438): avc: denied { ioctl } for pid=7363 comm="syz.0.291" path="/dev/input/event1" dev="devtmpfs" ino=919 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 128.933660][ T6001] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.110535][ T6001] usb 3-1: Using ep0 maxpacket: 32 [ 129.139765][ T6001] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 129.184772][ T6001] usb 3-1: config 0 has no interface number 0 [ 129.207884][ T6001] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 129.226167][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.264483][ T6001] usb 3-1: Product: syz [ 129.297892][ T6001] usb 3-1: Manufacturer: syz [ 129.331455][ T6001] usb 3-1: SerialNumber: syz [ 129.357634][ T6001] usb 3-1: config 0 descriptor?? [ 129.386109][ T6001] smsc95xx v2.0.0 [ 129.826883][ T6001] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 129.936836][ T6001] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 130.348652][ T6001] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 130.836260][ T6001] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 130.861472][ T6001] usb 3-1: USB disconnect, device number 11 [ 130.879968][ T47] kernel write not supported for file [eventfd] (pid: 47 comm: kworker/1:1) [ 131.060699][ T9] usb 4-1: USB disconnect, device number 14 [ 131.932724][ T47] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 132.130392][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 132.136804][ T47] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 132.146570][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.175797][ T47] usb 6-1: config 0 descriptor?? [ 132.291838][ T47] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 132.365840][ T7498] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 132.365840][ T7498] The task syz.2.306 (7498) triggered the difference, watch for misbehavior. [ 132.390204][ T5885] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 132.528252][ T7504] x_tables: duplicate underflow at hook 2 [ 132.542362][ T7507] netlink: 236 bytes leftover after parsing attributes in process `syz.1.308'. [ 132.571640][ T5885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 132.579284][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 132.590397][ T5885] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.606338][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 132.623290][ T5885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 132.632374][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 132.647018][ T5885] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.659597][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 132.675082][ T5885] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 132.682951][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 132.697341][ T5885] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.739930][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.746614][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.763316][ T5885] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 132.794164][ T5885] usb 4-1: string descriptor 0 read error: -22 [ 132.810390][ T5885] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 132.829718][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.856525][ T5885] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 132.895859][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 132.895876][ T30] audit: type=1400 audit(2000000027.720:533): avc: denied { create } for pid=7511 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.969105][ T7519] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (6516), value rounded to 0 ms [ 132.991744][ T7520] kvm: user requested TSC rate below hardware speed [ 133.014699][ T7519] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 133.028129][ T7462] XFS (nullb0): Invalid superblock magic number [ 133.046184][ T47] gspca_vc032x: reg_w err -71 [ 133.053225][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.066007][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.099588][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.105128][ T30] audit: type=1400 audit(2000000027.720:534): avc: denied { accept } for pid=7511 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.126662][ T7527] 9pnet_fd: Insufficient options for proto=fd [ 133.151041][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.156370][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.170031][ T9] usb 4-1: USB disconnect, device number 15 [ 133.200255][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.211981][ T30] audit: type=1400 audit(2000000027.720:535): avc: denied { listen } for pid=7511 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.236574][ T7519] can0: slcan on ttyprintk. [ 133.242506][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.261117][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.270148][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.286985][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.292839][ T30] audit: type=1400 audit(2000000027.760:536): avc: denied { mounton } for pid=7461 comm="syz.5.300" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 133.316677][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.327431][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.344720][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.360175][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.370963][ T30] audit: type=1400 audit(2000000027.950:537): avc: denied { mounton } for pid=7518 comm="syz.2.311" path="/70" dev="tmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.394263][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.399582][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.414051][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.419818][ T47] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.425374][ T47] gspca_vc032x: Unknown sensor... [ 133.431908][ T30] audit: type=1400 audit(2000000027.990:538): avc: denied { wake_alarm } for pid=7487 comm="syz.3.305" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.437705][ T7518] can0 (unregistered): slcan off ttyprintk. [ 133.460446][ T47] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 133.488355][ T47] usb 6-1: USB disconnect, device number 7 [ 133.504459][ T30] audit: type=1400 audit(2000000028.090:539): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 133.698064][ T30] audit: type=1400 audit(2000000028.520:540): avc: denied { create } for pid=7533 comm="syz.5.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.738756][ T30] audit: type=1400 audit(2000000028.550:541): avc: denied { create } for pid=7524 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 133.773686][ T30] audit: type=1400 audit(2000000028.560:542): avc: denied { write } for pid=7524 comm="syz.0.313" path="socket:[14400]" dev="sockfs" ino=14400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 134.311154][ T7542] overlay: ./file0 is not a directory [ 134.349526][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 134.600187][ T5880] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 134.938525][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 134.954786][ T5880] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 135.065971][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.217542][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.287711][ T5880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.326652][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.365268][ T5880] usb 4-1: Product: syz [ 135.374273][ T5880] usb 4-1: Manufacturer: syz [ 135.378910][ T5880] usb 4-1: SerialNumber: syz [ 135.437861][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 135.720147][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 135.814092][ T7567] hsr_slave_1 (unregistering): left promiscuous mode [ 136.370147][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 136.378493][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 136.387363][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 136.395682][ T9] usb 6-1: config 127 has an invalid interface number: 65 but max is 1 [ 136.404234][ T9] usb 6-1: config 127 has an invalid interface number: 196 but max is 1 [ 136.412796][ T9] usb 6-1: config 127 has no interface number 0 [ 136.419127][ T9] usb 6-1: config 127 has no interface number 1 [ 136.425979][ T9] usb 6-1: config 127 interface 65 has no altsetting 0 [ 136.433112][ T9] usb 6-1: config 127 interface 196 has no altsetting 0 [ 136.443547][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice= 0.6b [ 136.453367][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.461919][ T9] usb 6-1: Product: syz [ 136.466254][ T9] usb 6-1: Manufacturer: syz [ 136.471238][ T9] usb 6-1: SerialNumber: syz [ 136.483570][ T7601] ceph: No mds server is up or the cluster is laggy [ 136.629632][ T5880] usb 4-1: 0:2 : does not exist [ 136.950534][ T5826] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 137.150863][ T5826] usb 3-1: too many configurations: 199, using maximum allowed: 8 [ 137.159632][ T5826] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 137.169825][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.183837][ T5826] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 137.194352][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 137.210934][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.227035][ T5826] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 137.237557][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.260182][ T5826] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 137.271674][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.286440][ T5826] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 137.297677][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.312183][ T5826] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 137.332698][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.350510][ T10] usb 1-1: device descriptor read/64, error -71 [ 137.484052][ T5826] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 137.494497][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.508623][ T5826] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 137.519313][ T5826] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 137.535146][ T5826] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 137.544477][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.624932][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.334'. [ 137.637498][ T7624] macsec1: entered allmulticast mode [ 137.642874][ T7624] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 137.705873][ T5826] usb 3-1: Product: syz [ 137.710765][ T7624] mac80211_hwsim hwsim13 wlan0: left allmulticast mode [ 137.737769][ T5826] usb 3-1: Manufacturer: syz [ 137.742594][ T5826] usb 3-1: SerialNumber: syz [ 137.758610][ T5826] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.769767][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 137.802818][ T6001] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 137.920533][ T10] usb 1-1: device descriptor read/64, error -71 [ 138.040825][ T10] usb usb1-port1: attempt power cycle [ 138.308631][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 138.308652][ T30] audit: type=1400 audit(2000000033.130:572): avc: denied { create } for pid=7631 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 138.359299][ T5880] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 138.401039][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 138.422796][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.435285][ T5880] usb 4-1: USB disconnect, device number 16 [ 138.450260][ T10] usb 1-1: device descriptor read/8, error -71 [ 138.481540][ T30] audit: type=1400 audit(2000000033.260:573): avc: denied { map_read map_write } for pid=7636 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.595276][ T9] snd-usb-audio 6-1:127.65: probe with driver snd-usb-audio failed with error -2 [ 138.599609][ T30] audit: type=1400 audit(2000000033.340:574): avc: denied { read } for pid=7636 comm="syz.3.337" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.627575][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.672607][ T30] audit: type=1400 audit(2000000033.340:575): avc: denied { open } for pid=7636 comm="syz.3.337" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 138.696123][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.708695][ T30] audit: type=1400 audit(2000000033.360:576): avc: denied { read write } for pid=7607 comm="syz.2.328" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.719802][ T9] usb 6-1: USB disconnect, device number 8 [ 138.734909][ T30] audit: type=1400 audit(2000000033.360:577): avc: denied { open } for pid=7607 comm="syz.2.328" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.736458][ T30] audit: type=1400 audit(2000000033.360:578): avc: denied { read } for pid=7607 comm="syz.2.328" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 138.736525][ T30] audit: type=1400 audit(2000000033.360:579): avc: denied { read write } for pid=7607 comm="syz.2.328" dev="sockfs" ino=15443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.745245][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 138.961433][ T10] usb 1-1: device descriptor read/8, error -71 [ 138.972948][ T7644] overlayfs: failed to get inode (-116) [ 138.978888][ T7644] overlayfs: failed to get inode (-116) [ 139.018094][ T30] audit: type=1400 audit(2000000033.840:580): avc: denied { create } for pid=7645 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 139.040575][ T5880] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 139.141988][ T6001] usb 3-1: Service connection timeout for: 256 [ 139.152630][ T30] audit: type=1400 audit(2000000033.970:581): avc: denied { connect } for pid=7645 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.173617][ T10] usb usb1-port1: unable to enumerate USB device [ 139.190251][ T6001] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 139.224310][ T6001] ath9k_htc: Failed to initialize the device [ 139.232315][ T5880] usb 4-1: device descriptor read/64, error -71 [ 139.241440][ T6001] usb 3-1: ath9k_htc: USB layer deinitialized [ 139.272528][ T7651] netlink: 100 bytes leftover after parsing attributes in process `syz.1.340'. [ 139.283828][ T7651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=7651 comm=syz.1.340 [ 139.350193][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 139.470196][ T5880] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 139.513670][ T7653] syz.1.340: attempt to access beyond end of device [ 139.513670][ T7653] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 139.526776][ T7653] FAT-fs (loop3): unable to read boot sector [ 139.534479][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 139.542317][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.553902][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.566098][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.585956][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.613921][ T5880] usb 4-1: device descriptor read/64, error -71 [ 139.638805][ T6001] usb 3-1: USB disconnect, device number 12 [ 139.687085][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.705633][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.715908][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.724103][ T9] usb 6-1: Manufacturer: syz [ 139.729810][ T9] usb 6-1: config 0 descriptor?? [ 139.740465][ T5880] usb usb4-port1: attempt power cycle [ 139.841977][ T7659] xt_socket: unknown flags 0xc [ 139.981242][ T9] rc_core: IR keymap rc-hauppauge not found [ 139.987518][ T9] Registered IR keymap rc-empty [ 139.993276][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.020260][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.042250][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 140.054776][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 140.068381][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.080205][ T5880] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 140.090256][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.103858][ T5880] usb 4-1: device descriptor read/8, error -71 [ 140.120260][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.140256][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.160509][ T5125] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 140.160703][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.177998][ T7632] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 140.185035][ T7632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.194001][ T7632] vhci_hcd vhci_hcd.0: Device attached [ 140.198062][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.209034][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.219276][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.222654][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.231227][ T7671] vhci_hcd: connection closed [ 140.235345][ T58] vhci_hcd: stop threads [ 140.256034][ T58] vhci_hcd: release socket [ 140.260275][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.262642][ T58] vhci_hcd: disconnect device [ 140.280192][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.300235][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 140.320734][ T9] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 140.329459][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 140.332644][ T5125] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 140.342372][ T9] usb 6-1: USB disconnect, device number 9 [ 140.365668][ T5125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.370149][ T5880] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 140.375250][ T5125] usb 1-1: Product: syz [ 140.386339][ T5125] usb 1-1: Manufacturer: syz [ 140.391802][ T5125] usb 1-1: SerialNumber: syz [ 140.399302][ T5125] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 140.402542][ T5880] usb 4-1: device descriptor read/8, error -71 [ 140.422552][ T5825] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 140.480150][ T7280] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 140.520426][ T5880] usb usb4-port1: unable to enumerate USB device [ 140.542117][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.572268][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:127.65/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 140.620926][ T7280] usb 2-1: device descriptor read/64, error -71 [ 140.677584][ T9] usb 1-1: USB disconnect, device number 21 [ 140.719972][ T5880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5880 comm=kworker/0:4 [ 140.870225][ T7280] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 141.011586][ T7280] usb 2-1: device descriptor read/64, error -71 [ 141.120973][ T7280] usb usb2-port1: attempt power cycle [ 141.160168][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 141.310192][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 141.317527][ T24] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 141.326651][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 141.336554][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.350619][ T24] usb 6-1: config 0 descriptor?? [ 141.470355][ T7280] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 141.562332][ T5825] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 141.646675][ T5825] ath9k_htc: Failed to initialize the device [ 141.746199][ T24] usb 6-1: string descriptor 0 read error: -71 [ 141.778613][ T7280] usb 2-1: device descriptor read/8, error -71 [ 141.796705][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 141.816978][ T24] usb 6-1: USB disconnect, device number 10 [ 141.889863][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 141.912723][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 141.933724][ T5885] IPVS: starting estimator thread 0... [ 142.030576][ T7705] IPVS: using max 48 ests per chain, 115200 per kthread [ 142.150220][ T7280] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 142.172482][ T7280] usb 2-1: device descriptor read/8, error -71 [ 142.280621][ T7280] usb usb2-port1: unable to enumerate USB device [ 142.332963][ T7719] overlayfs: failed to resolve './file0': -2 [ 142.616085][ T7736] veth0_vlan: entered allmulticast mode [ 142.830433][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 142.953046][ T7280] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 143.000534][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 143.007045][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 143.018517][ T9] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 143.027653][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.036728][ T9] usb 1-1: Product: syz [ 143.041232][ T9] usb 1-1: Manufacturer: syz [ 143.045901][ T9] usb 1-1: SerialNumber: syz [ 143.052732][ T9] usb 1-1: config 0 descriptor?? [ 143.059453][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 143.060286][ T5825] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 143.065580][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 143.089119][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 143.120254][ T7280] usb 6-1: Using ep0 maxpacket: 32 [ 143.131498][ T7280] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 143.142474][ T7280] usb 6-1: config 0 has no interface number 0 [ 143.148687][ T7280] usb 6-1: config 0 interface 184 has no altsetting 0 [ 143.158170][ T7280] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 143.167894][ T7280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.176371][ T7280] usb 6-1: Product: syz [ 143.180685][ T7280] usb 6-1: Manufacturer: syz [ 143.185367][ T7280] usb 6-1: SerialNumber: syz [ 143.194018][ T7280] usb 6-1: config 0 descriptor?? [ 143.202959][ T7280] smsc75xx v1.0.0 [ 143.231730][ T5825] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 143.245150][ T5825] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 143.256620][ T5825] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 143.290670][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.299686][ T5825] usb 4-1: Product: syz [ 143.306537][ T5825] usb 4-1: Manufacturer: syz [ 143.311687][ T5825] usb 4-1: SerialNumber: syz [ 143.445148][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.455158][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.456221][ T5825] usb 4-1: config 0 descriptor?? [ 143.505435][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 143.505451][ T30] audit: type=1400 audit(2000000038.330:609): avc: denied { bind } for pid=7747 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.611026][ T5880] usb 1-1: USB disconnect, device number 22 [ 144.034657][ T30] audit: type=1400 audit(2000000038.800:610): avc: denied { map } for pid=7740 comm="syz.3.368" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.100611][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.118961][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 144.128755][ T7280] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 144.130278][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.160551][ T7280] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 144.274197][ T24] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 144.283975][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.302279][ T24] usb 3-1: config 0 descriptor?? [ 144.318877][ T24] rndis_host 3-1:0.0: skipping garbage [ 144.330283][ T24] usb 3-1: bad CDC descriptors [ 144.488285][ T30] audit: type=1400 audit(2000000039.310:611): avc: denied { map } for pid=7768 comm="syz.1.376" path="/dev/v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.517947][ T30] audit: type=1400 audit(2000000039.340:612): avc: denied { create } for pid=7768 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.566528][ T7280] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 144.666820][ T30] audit: type=1400 audit(2000000039.480:613): avc: denied { mount } for pid=7764 comm="syz.0.374" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 144.721308][ T7280] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 144.732024][ T7280] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 144.752960][ T7280] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 144.905326][ T7280] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 144.953412][ T30] audit: type=1400 audit(2000000039.670:614): avc: denied { write } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.991079][ T7280] usb 6-1: USB disconnect, device number 11 [ 145.147223][ T30] audit: type=1400 audit(2000000039.670:615): avc: denied { remove_name } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.252300][ T30] audit: type=1400 audit(2000000039.670:616): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.278164][ T30] audit: type=1400 audit(2000000039.680:617): avc: denied { add_name } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.311991][ T30] audit: type=1400 audit(2000000039.680:618): avc: denied { unlink } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 145.569485][ T7782] netlink: 17 bytes leftover after parsing attributes in process `syz.1.377'. [ 145.609430][ T7782] net_ratelimit: 50 callbacks suppressed [ 145.609448][ T7782] netlink: zone id is out of range [ 145.651149][ T5885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5885 comm=kworker/1:5 [ 145.655820][ T7782] netlink: zone id is out of range [ 145.726880][ T7782] netlink: zone id is out of range [ 145.748706][ T7782] netlink: zone id is out of range [ 145.780811][ T7782] netlink: zone id is out of range [ 145.788263][ T7782] netlink: zone id is out of range [ 145.818172][ T7782] netlink: zone id is out of range [ 145.856519][ T5825] mos7840 4-1:0.0: required endpoints missing [ 145.875768][ T7782] netlink: zone id is out of range [ 145.887343][ T5825] usb 4-1: USB disconnect, device number 21 [ 145.900324][ T7782] netlink: zone id is out of range [ 145.913761][ T7782] netlink: zone id is out of range [ 145.998805][ T7798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.383'. [ 146.190135][ T5880] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 146.330903][ T7748] ------------[ cut here ]------------ [ 146.336381][ T7748] UBSAN: array-index-out-of-bounds in kernel/bpf/core.c:2384:29 [ 146.344467][ T7748] index 16 is out of range for type ' *[16]' [ 146.351407][ T7748] CPU: 0 UID: 0 PID: 7748 Comm: syz.2.370 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 146.351433][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.351444][ T7748] Call Trace: [ 146.351450][ T7748] [ 146.351456][ T7748] dump_stack_lvl+0x16c/0x1f0 [ 146.351486][ T7748] __ubsan_handle_out_of_bounds+0x11c/0x160 [ 146.351512][ T7748] bpf_prog_select_runtime+0x665/0x6f0 [ 146.351529][ T7748] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 146.351552][ T7748] bpf_prog_load+0xe70/0x2480 [ 146.351573][ T7748] ? __pfx_bpf_prog_load+0x10/0x10 [ 146.351588][ T7748] ? avc_has_perm_noaudit+0x149/0x3b0 [ 146.351617][ T7748] ? selinux_bpf+0xde/0x130 [ 146.351635][ T7748] __sys_bpf+0x4890/0x4c80 [ 146.351651][ T7748] ? __pfx___sys_bpf+0x10/0x10 [ 146.351664][ T7748] ? kfree+0x252/0x4d0 [ 146.351689][ T7748] ? selinux_socket_setsockopt+0x6a/0x80 [ 146.351710][ T7748] ? sock_common_setsockopt+0x2e/0xf0 [ 146.351735][ T7748] ? do_futex+0x122/0x350 [ 146.351752][ T7748] ? __pfx_do_futex+0x10/0x10 [ 146.351773][ T7748] ? xfd_validate_state+0x5d/0x180 [ 146.351788][ T7748] ? rcu_is_watching+0x12/0xc0 [ 146.351806][ T7748] __x64_sys_bpf+0x78/0xc0 [ 146.351818][ T7748] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.351836][ T7748] do_syscall_64+0xcd/0x260 [ 146.351857][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.351874][ T7748] RIP: 0033:0x7ff51e18d169 [ 146.351886][ T7748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.351902][ T7748] RSP: 002b:00007ff51bff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.351920][ T7748] RAX: ffffffffffffffda RBX: 00007ff51e3a5fa0 RCX: 00007ff51e18d169 [ 146.351931][ T7748] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 146.351942][ T7748] RBP: 00007ff51e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.351953][ T7748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.351962][ T7748] R13: 0000000000000000 R14: 00007ff51e3a5fa0 R15: 00007ffe5af80dd8 [ 146.351977][ T7748] [ 146.352125][ T7748] ---[ end trace ]--- [ 146.564389][ T7748] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 146.571591][ T7748] CPU: 0 UID: 0 PID: 7748 Comm: syz.2.370 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 146.583129][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.593194][ T7748] Call Trace: [ 146.596453][ T7748] [ 146.599364][ T7748] dump_stack_lvl+0x3d/0x1f0 [ 146.603942][ T7748] panic+0x71c/0x800 [ 146.607825][ T7748] ? __pfx_panic+0x10/0x10 [ 146.612226][ T7748] ? __pfx__printk+0x10/0x10 [ 146.616804][ T7748] check_panic_on_warn+0xab/0xb0 [ 146.621748][ T7748] __ubsan_handle_out_of_bounds+0x143/0x160 [ 146.627630][ T7748] bpf_prog_select_runtime+0x665/0x6f0 [ 146.633167][ T7748] ? selinux_bpf_prog_load+0x15f/0x1c0 [ 146.638613][ T7748] bpf_prog_load+0xe70/0x2480 [ 146.643276][ T7748] ? __pfx_bpf_prog_load+0x10/0x10 [ 146.648375][ T7748] ? avc_has_perm_noaudit+0x149/0x3b0 [ 146.653740][ T7748] ? selinux_bpf+0xde/0x130 [ 146.658228][ T7748] __sys_bpf+0x4890/0x4c80 [ 146.662640][ T7748] ? __pfx___sys_bpf+0x10/0x10 [ 146.667387][ T7748] ? kfree+0x252/0x4d0 [ 146.671446][ T7748] ? selinux_socket_setsockopt+0x6a/0x80 [ 146.677071][ T7748] ? sock_common_setsockopt+0x2e/0xf0 [ 146.682438][ T7748] ? do_futex+0x122/0x350 [ 146.686756][ T7748] ? __pfx_do_futex+0x10/0x10 [ 146.691423][ T7748] ? xfd_validate_state+0x5d/0x180 [ 146.696520][ T7748] ? rcu_is_watching+0x12/0xc0 [ 146.701273][ T7748] __x64_sys_bpf+0x78/0xc0 [ 146.705673][ T7748] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.710869][ T7748] do_syscall_64+0xcd/0x260 [ 146.715357][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.721233][ T7748] RIP: 0033:0x7ff51e18d169 [ 146.725630][ T7748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.745220][ T7748] RSP: 002b:00007ff51bff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.753618][ T7748] RAX: ffffffffffffffda RBX: 00007ff51e3a5fa0 RCX: 00007ff51e18d169 [ 146.761572][ T7748] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 146.769523][ T7748] RBP: 00007ff51e20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.777485][ T7748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.785443][ T7748] R13: 0000000000000000 R14: 00007ff51e3a5fa0 R15: 00007ffe5af80dd8 [ 146.793423][ T7748] [ 146.796669][ T7748] Kernel Offset: disabled [ 146.800986][ T7748] Rebooting in 86400 seconds..