last executing test programs: 9m46.123284467s ago: executing program 32 (id=222): prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x208000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x8c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xffe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x4}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xf85a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xa3}}]}]}}}]}, 0x8c}}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926"], 0x0) 7m31.115062525s ago: executing program 3 (id=781): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x17}}]}}}]}, 0x40}}, 0x0) (fail_nth: 1) 7m30.676536585s ago: executing program 3 (id=785): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x2e8}}], 0x2, 0x0) 7m30.087282112s ago: executing program 33 (id=785): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x2e8}}], 0x2, 0x0) 6m8.463244795s ago: executing program 34 (id=1073): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000440)={&(0x7f0000179000/0x4000)=nil, 0x4000}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x5cc0b16b64748802, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x8000}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r5, 0x0) write(r5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0xb9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) write$UHID_INPUT(r1, &(0x7f0000000800)={0x8, {"21388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb69e6f4048f2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778681ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae38d36b839e3cd54ae4933ad529888fdac7bb08000000c0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659e506d5c7e63fb67c81164c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f96d467ddcabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b560300020000000000005131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca168eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa812a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc67c78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d526d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe65701000000000000000742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa70010de2573530324e14d158607883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca89db0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7f6ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) 5m38.224863328s ago: executing program 35 (id=1184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) (async) r3 = fsmount(r2, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000220000/0xf000)=nil, 0xf000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000220000/0xf000)=nil, 0xf000}, 0x1}) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) (async) r6 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) write$binfmt_format(r6, &(0x7f00000003c0)='1\x00', 0x2) fcntl$setpipe(r6, 0x407, 0x9) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000640)='\n', 0x1}], 0x1, 0x1) poll(&(0x7f0000000240)=[{r5}], 0x1, 0xffffffff) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) 5m34.739795772s ago: executing program 36 (id=1196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, 0x0) bind$inet6(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0xfffffffd) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r6, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000003c0)=ANY=[@ANYBLOB="e00000002d0008002abd7000fedbdf2571074b7988add824df11581e7c22111abf5bfc4c8161830b45fca7f85ae0539e30486b8ceb400af13fcd3bd565ace8f4bd02b34e89bef84d585c02f175dd2f6eb25af54a04c70b0ddcf1829aadee65c60861a13645b47483f9b2844bac2207a8007c5042c66cd82047dc73feee5e3d588a6a0f7aac58ac32ac955ec288437b919f67ad48c3a21685a591eee418dd36af7d50103bb114c45379c76abbc6fdbfbdcf9553e00fe5f9996729d1ac914f1de7a2fd738fa0f8aa4c25c798c721eb86f777b12db12434e145915b88d655000000"], 0xe0}, {&(0x7f00000029c0)=ANY=[], 0x18}, {0x0, 0x1068}], 0x4, 0x0, 0x0, 0x48800}, 0x20040001) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) lseek(r7, 0x40, 0x1) 5m27.148904005s ago: executing program 37 (id=1217): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4882ab41b72c8ed0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x34d03000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$team(0x0, r3) recvmsg(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x40002040) 5m24.162414264s ago: executing program 38 (id=1229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1ca3201b2aba3983d90455a000000000000109022400010000100009040000c4030002000921001000012207000905810300000d0040"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000004c0)={0x28, 0x0, 0x0, @host}, 0x10) bind$vsock_stream(r1, &(0x7f0000000700)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00'], 0x0}, 0x0) 5m5.808200692s ago: executing program 3 (id=1251): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000300)=@md0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20e012, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0013fef0fd00010400", @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000400030000"], 0x3c}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c0002800800018000000000340001800c000100626974776973650024"], 0x104}}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) 5m4.646435883s ago: executing program 3 (id=1272): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000020000000109021b000111000000090400000195699b001c058b", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)={0x20, 0x31, 0x5, "7430470687"}, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x81, 0x3, "8fb42c"}, &(0x7f0000000280)={0x20, 0x82, 0x3, "3514c6"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "a450b8"}, &(0x7f0000000300)={0x20, 0x84, 0x4, "340100bf"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "83f981"}}) 4m59.632461293s ago: executing program 3 (id=1278): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4882ab41b72c8ed0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x34d03000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$team(0x0, r3) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x40002040) openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) 4m59.625091434s ago: executing program 39 (id=1260): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$TIOCSETD(r0, 0x5423, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x4d) 4m58.887006624s ago: executing program 3 (id=1280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000040)) 4m54.021875249s ago: executing program 40 (id=1267): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r3, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000000) 4m42.914051016s ago: executing program 41 (id=1280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000040)) 4m11.271846957s ago: executing program 2 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x8, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x2, 0x0, 0x0, 0x2000}, 0x67, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffcc5, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000000ab1d0000000000"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=@newtaction={0x4b4, 0x30, 0x1, 0x0, 0x0, {}, [{0x4a0, 0x1, [@m_ct={0x58, 0x11, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_ACTION={0x6, 0x3, 0x1d}, @TCA_CT_ZONE={0x6, 0x4, 0x9}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}, @m_vlan={0x38, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x253}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x1b0, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0xff, 0x20000000, 0xc, 0x8}, 0x4e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400000a, 0x6, 0xffffffffffffffff, 0x2, 0x6}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4620, 0x8, 0x4, 0x4}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffffa, 0x8, 0xffff, 0x6111}, 0xf4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x1, 0x9, 0xfffffffb}, 0x5b}}]}, {0xf7, 0x6, "9f606b8cffe935d610bdeac278f27838950e68760f2c7299e71d4ea14c1f9d3aa6f31d49728529c15930311dbd8eaab2622f08f81eb05416731220c4ed3926b65985e29f1d34c970821e701c331bd1f701fe6aa1670316aa82c2982b8d621931ed496eeba04da6ee778b315d443738230702681b62aa41afd77fdbf9777cf38bcb05dfd0e088e94a69a8e7076df7a49ab621b08b731d670c53daf7e3a831a167a12ec80946bd84e2c7dd77eed10b624e13397946c259f5029dadc94e4d09749dd33e236c9bad581dff8a9ad1a1dfac3ba8f71b15d8573c064262224182a8271d2193aa9d6008744d48a475470a42015cf86a83"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x74, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x47, 0x6, "6fdf31a3b60299855742a7f25e2191b6973b772134bfdd94d6b797f4eba3f6de2229788168b657b5b742406587df992e5fd4387a47bbd1f8186e73670f5d45de431dcb"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x11}]}, {0x26, 0x6, "d0e33794532919542a4b58d07d6b1becb30b7375748d2c87be988eb7abb15b1734df"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x180, 0xb, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x8, 0x1, 0xffffff81}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6bbc, 0x10000000, 0x6, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1ff, 0xffffffffffffffff, 0xd785}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x8, 0x950, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8e9f, 0x5, 0x2, 0x7, 0x1528}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x6, 0x8e94}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6000000, 0x7, 0xffffffff, 0x3}, 0x4, r8}}]}, {0x72, 0x6, "c5f75d4911cc08d1d6e6ad6201c06fb84de7199f0bbcd0893a0c47eb1c5e7d892fafedbec05924a15aa466b0e517bcb96c5f67f530a62460af30ab403a335aef4127b2b95dba97d88121f3e67eac46179c329da05c564fa82f9f4ce44a36b0444f9596a9b0200e4d1dd0d157d6c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000800)=""/196, 0x26, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x20) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x4, 0x2, 0x1, 0xc}}, @common=@unspec=@mac={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x800}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 4m8.249529292s ago: executing program 2 (id=1446): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x104}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x8c2b01) (async) syz_open_dev$evdev(0x0, 0x1, 0x8c2b01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000002340)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, &(0x7f0000000440)=""/247, 0x26) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) (async) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r11, @ANYBLOB="0a0034000202020202020000080035003f00d129"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500003f0000000000002e00000008000300", @ANYRES32=r11, @ANYBLOB="0a0034000202020202020000080035003f00d129"], 0x30}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) getegid() (async) getegid() read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) getgid() 4m6.747085011s ago: executing program 2 (id=1449): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x7fffffff) (async) mmap(&(0x7f0000201000/0x3000)=nil, 0x3000, 0x200000c, 0x200000006c832, r0, 0x0) 4m5.914690643s ago: executing program 2 (id=1452): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000280)={0x80000000, 0x109, "c25e269ab156f817287930ab91ecf504de9943eeaa614cb0f177ccd3ddabddfc", 0x9, 0x3, 0xf09, 0x100000001, 0x6, 0x3000, 0x10000, 0xfffffffe, [0xd594, 0xff, 0x2, 0x5]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x3ff, 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 4m2.744605962s ago: executing program 2 (id=1458): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4882ab41b72c8ed0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x34d03000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$team(0x0, r3) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x40002040) openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) 4m1.870506389s ago: executing program 2 (id=1466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) sync() 4m0.860922608s ago: executing program 4 (id=1470): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xfffffffffffffc3f, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r9 = dup(r8) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="ee20adc7fe4ec3304d502c8ce9d47d1f97edb874b142cdb074fa826cd2d67004e963483800e0d787e1782caa64"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000003060102000000000000000005000000050001000700d81a8d8a00000900020073797a31"], 0x28}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) 3m59.61094077s ago: executing program 4 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x20540, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000850000000700000095007970c4995fcd57ed05c50000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000f80)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1443}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x8, 0x15b}}) 3m58.599088277s ago: executing program 4 (id=1473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) r1 = socket$kcm(0x2, 0xc, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00'}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef2", 0x27}, {&(0x7f00000003c0)="051a00000e8000655890c0b0cb386fa95eb225b4d0c9ed491be1b153af1d531e83dc5a7921e12775a08cbaa8f18514c61823d57fc4b7e3d5491f8b342acab6eb7312edd77b35d24c318d5cdee6813eb747fe1d546952c1a708ba345a4efd23cbfc1752032be45f2003b7ddb9e91676f463560bb4747af7e20ec55d96a85ec6d5f45e6fd6c0d677fb1309e032ffb4107a05f72b80fb72829a703e5233c8844f", 0x9f}], 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003140)=ANY=[@ANYBLOB="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"], 0x408}}], 0x1, 0x4044) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6072b2af00042f00fe80000000"], 0x0) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) get_robust_list(0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x7) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d30001280200001800a00010071756f7461000000100002800c00014000000000800000010c000180070001006374000008000340000001"], 0xbc}}, 0x20050800) 3m57.478533585s ago: executing program 4 (id=1476): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYBLOB="04000400000000004800128008000100677470003c000280140008002001000000000000000000000000000208000700e00000021400080000000000000000000000ffff7f000001050005000000000008000a00", @ANYRES32=r1, @ANYRESOCT=r0], 0x70}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYRESDEC=r0], 0x70}}, 0x0) 3m57.22099522s ago: executing program 4 (id=1477): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4882ab41b72c8ed0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x34d03000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$team(0x0, r3) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x40002040) openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) 3m56.704081413s ago: executing program 4 (id=1478): socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xcc, "8b114b877fe493fb4fe09e2bd40a09ad0f00c665fb13febe1c2694b6219c63adbcae39bc17fc9e779af13fdbe92e5f2785de3dbbaf567d2a49d2781c0f85af0a6c24b92d007f6ad4baacd74f6825dbdf2b7f626072a202d65b86c5fce8f540120805c26e7d64fa22fe2211914e7f782a0732a7bb74de1790a34c897c2fcae26ed67e7304beb876248da8fa1241bbb1be09f4d2e76a2f04670617c830e4d8c91d63653393294ba78da02200a19b859f763fe5a458cd9d212c4c254d317f8043d478f78a0d4e4dbeb02be299a8"}, &(0x7f0000000300)=0xd4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r4, 0x3, 0x2, 0x5, 0xfff, 0x81}, 0x14) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r7, &(0x7f0000000200)=""/209, 0x128) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) (async) tkill(r6, 0x7) (async) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008001}, 0x400c0) 3m55.127089657s ago: executing program 1 (id=1482): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x381880, 0x0) ioctl$TIOCGPTPEER(r0, 0x80045439, 0x800000400002) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) capset(&(0x7f0000000200)={0x20071026, r1}, &(0x7f0000000240)={0x6, 0x3, 0x8, 0x4, 0x2, 0x6}) (async) syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000002f80)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000640)=""/100, 0x64}], 0x5, &(0x7f0000000740)=""/63, 0x3f}, 0x8}, {{&(0x7f0000001800)=@nfc_llcp, 0x80, &(0x7f0000001980)=[{&(0x7f0000001880)=""/236, 0xec}, {&(0x7f0000000780)=""/45, 0x2d}], 0x2, &(0x7f00000019c0)=""/251, 0xfb}, 0x4}, {{&(0x7f0000001ac0)=@can, 0x80, &(0x7f0000003140)=[{&(0x7f0000001b40)=""/99, 0x63}, {&(0x7f0000001bc0)=""/76, 0x4c}, {&(0x7f0000001c40)=""/15, 0xf}, {&(0x7f0000001c80)=""/55, 0x37}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/249, 0xf9}, {&(0x7f0000003040)=""/243, 0xf3}, {&(0x7f0000002ec0)=""/38, 0x26}, {&(0x7f0000002dc0)=""/140, 0x8c}], 0x9}, 0x5}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={&(0x7f0000000340), 0x0, 0x0, 0x0, 0xc, 0xffffffffffffffff, 0x4}, 0x38) 3m54.560334615s ago: executing program 1 (id=1484): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) (async) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e7522"], 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x16) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00}, [@call={0x75, 0x0, 0x0, 0x700}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00}, [@call={0x75, 0x0, 0x0, 0x700}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r5 = epoll_create1(0x0) fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000008000700", @ANYRES16], 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x5, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e8235, 0x4) (async) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e8235, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 3m53.765149161s ago: executing program 1 (id=1486): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x400e044) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x40001) (async) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be", @ANYRES32=0x0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 32) execveat(r8, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x1000) (async, rerun: 64) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00060000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) (async, rerun: 64) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 64) r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10], 0x5c}, 0x1, 0xba01}, 0x0) (async, rerun: 32) syz_usb_connect(0x3, 0x3b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x7, 0x42, 0x79, 0x40, 0xccd, 0x38, 0xb09b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0xd, 0x0, 0x1, 0xd4, 0x43, 0x18, 0x4, [], [{{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x9, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x41, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x77, 0x6}]}}]}}]}}]}}, 0x0) (rerun: 32) 3m53.458659658s ago: executing program 1 (id=1488): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x5, 0x4}, @float={0xe, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e, 0x61, 0x2e, 0x61, 0x2e, 0x2e, 0x0, 0x30]}}, &(0x7f00000000c0)=""/76, 0x3e, 0x4c, 0x1, 0x401, 0x10000, @value}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6055}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x80, 0x0, 0x6, 0x87, &(0x7f0000000140)="b444900f6200", &(0x7f0000000440)="b05c54cb77163cb707f7f54606bbfcf0691c58748fa4a4ff1710687468148d2c046ab1d81a70b44230407180fcd3bf332c2664c1b0bce9e0cae11ded10f9d1db80642699e0b8c7cebd149b0d3df18d4f70ad5651aea850f1fe5b0bf3e83e9108bd1fb573e9c444acfba3a231fc532e9a67ed838a44b376effd304c9b9a25c48b35cec0aba410c0", 0x2, 0x0, 0x8}, 0x50) 3m53.256244007s ago: executing program 1 (id=1489): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4882ab41b72c8ed0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x34d03000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$team(0x0, r3) recvmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x40002040) openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x0, 0x0) 3m52.753958262s ago: executing program 1 (id=1490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000080), 0xa2000003) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x68, 0x57, 0x31, 0x10, 0x17ef, 0xa387, 0x304, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x40, 0x1b, [{{0x9, 0x4, 0xc3, 0x5, 0x0, 0x8f, 0xb5, 0xd6, 0x9}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="0519050020c0fcf102989c08ccc503a0c89a82454a4a26825d570fb6b8b156ec2172dbb9bdca01d10f4a629268227cb2f39c094912c244a7635c0813653b9772ab13df990f8a62dda154f9a53aad7930ccdcec9d064c4d430d7d1f059e3283f9d53c9540afd2782376e9705a785bd24aae71bdbd174cadf0a945f7c625d4273ad370841ad814ffecd6b93a385fd8698559b4c10c8ec4c5d0e6aaf8f04ecaaecc08f2b58cb75c302e331896e2d55f88821c8532ed0326d03e5f0d3820e5a6b86aa3ca11918e3ed96454fec894136988498daf89bd09a317beacb48445"], 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1409}}]}) 3m45.934702065s ago: executing program 42 (id=1466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) sync() 3m41.681743228s ago: executing program 43 (id=1478): socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xcc, "8b114b877fe493fb4fe09e2bd40a09ad0f00c665fb13febe1c2694b6219c63adbcae39bc17fc9e779af13fdbe92e5f2785de3dbbaf567d2a49d2781c0f85af0a6c24b92d007f6ad4baacd74f6825dbdf2b7f626072a202d65b86c5fce8f540120805c26e7d64fa22fe2211914e7f782a0732a7bb74de1790a34c897c2fcae26ed67e7304beb876248da8fa1241bbb1be09f4d2e76a2f04670617c830e4d8c91d63653393294ba78da02200a19b859f763fe5a458cd9d212c4c254d317f8043d478f78a0d4e4dbeb02be299a8"}, &(0x7f0000000300)=0xd4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r4, 0x3, 0x2, 0x5, 0xfff, 0x81}, 0x14) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r7, &(0x7f0000000200)=""/209, 0x128) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) (async) tkill(r6, 0x7) (async) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x3, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008001}, 0x400c0) 3m36.851108485s ago: executing program 44 (id=1490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000080), 0xa2000003) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x68, 0x57, 0x31, 0x10, 0x17ef, 0xa387, 0x304, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x40, 0x1b, [{{0x9, 0x4, 0xc3, 0x5, 0x0, 0x8f, 0xb5, 0xd6, 0x9}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="0519050020c0fcf102989c08ccc503a0c89a82454a4a26825d570fb6b8b156ec2172dbb9bdca01d10f4a629268227cb2f39c094912c244a7635c0813653b9772ab13df990f8a62dda154f9a53aad7930ccdcec9d064c4d430d7d1f059e3283f9d53c9540afd2782376e9705a785bd24aae71bdbd174cadf0a945f7c625d4273ad370841ad814ffecd6b93a385fd8698559b4c10c8ec4c5d0e6aaf8f04ecaaecc08f2b58cb75c302e331896e2d55f88821c8532ed0326d03e5f0d3820e5a6b86aa3ca11918e3ed96454fec894136988498daf89bd09a317beacb48445"], 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x1409}}]}) 2m33.075599725s ago: executing program 5 (id=1722): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x340}]}]}, 0x20}}, 0x10000000) 2m32.905983603s ago: executing program 5 (id=1725): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x3000, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000400)=0x80, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="e2ff", 0x2}], 0x1}, 0x4040001) r3 = socket$inet(0x2, 0x4, 0xa1) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x5e, @broadcast, 0x4e20, 0x2, 'sh\x00', 0x10, 0xaee, 0x4d}, 0x2c) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x7, [@enum64={0x1, 0x2, 0x0, 0x13, 0x1, 0x0, [{0x2, 0xbe, 0xfff}, {0x5, 0x4, 0x2f0}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0x7}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @float={0xf}]}, {0x0, [0x2e, 0x2e, 0x0, 0x61, 0x5f]}}, &(0x7f0000000100)=""/120, 0x83, 0x78, 0x0, 0x400, 0x0, @void, @value}, 0x28) (async) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x4010}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x40000004}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000440)={0x0, r6, 0x7, 0x101, 0x1, 0x2, 0xd}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0xc4, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x0, 0x1, @void, @value, @void, @value}, 0x50) (async) recvmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x10002) 2m32.777046415s ago: executing program 5 (id=1726): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0110000190001000000000000000000e000000200000000000000000000ec000000000000000000000000000000000000000000000000000a000000110000004954fa4bc361bdb7087ce2c30eb606412da744acfc02ec8408647f1d60550ecc3fa3ced37693b38a276cd33d7c8bb7a1999c610acdc22cb684849b5b210cab1e680b3bdc03e1a2578f73c759c80446a3607099a048f2f101c55020c667edb728e73292d5f1444d1a9ed32206fd062d0b3327fdf6b0fa29c6e1f97bd8a5f269cc", @ANYRESDEC=r0, @ANYRES32=0x0], 0x11c0}}, 0x20004800) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) (async, rerun: 64) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000005000000000000000000000000000500030005000000110004006163746976656a61847611e09e"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x8000}, 0x4) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() (async, rerun: 64) write$P9_RLCREATE(r3, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x1, 0x0, 0x8}, 0xc}}, 0x18) (rerun: 64) sched_setscheduler(r7, 0x5, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x184) read$char_usb(r9, &(0x7f0000000480)=""/205, 0xffffffffffffff23) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) 2m32.190029034s ago: executing program 5 (id=1727): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000}) 2m31.263441404s ago: executing program 5 (id=1728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x878d532fc4273152, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = dup(r7) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x533c) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101440, 0x0) ioctl$FBIOGET_CON2FBMAP(r9, 0x460f, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m30.212863758s ago: executing program 5 (id=1731): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0xfffffffffffffdca) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200480d4}, 0x20008000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) sendto$packet(r6, &(0x7f0000000300)="0e407f434a30926f919a229cadaaeff512b2760fc88f87235c868e72b0e801d91335a851c18fc1f22c429e56bbc9a6f34745d719736a4fa563e5a44521fe70922ad6234e9805ebc514647ffbd2655f28c7563eae813a0c93c71b24167e1eb907a94db5ecd692c71ec0dbcb5950f005064bd3ecec15f62d9737c7db9ea29e77261ea3c7c80900"/143, 0x8f, 0x7388495f99282fd2, 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x533c) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101440, 0x0) ioctl$FBIOGET_CON2FBMAP(r10, 0x460f, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r9) ioctl$NBD_DO_IT(r4, 0xab03) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m14.711851933s ago: executing program 45 (id=1731): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0xfffffffffffffdca) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200480d4}, 0x20008000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) sendto$packet(r6, &(0x7f0000000300)="0e407f434a30926f919a229cadaaeff512b2760fc88f87235c868e72b0e801d91335a851c18fc1f22c429e56bbc9a6f34745d719736a4fa563e5a44521fe70922ad6234e9805ebc514647ffbd2655f28c7563eae813a0c93c71b24167e1eb907a94db5ecd692c71ec0dbcb5950f005064bd3ecec15f62d9737c7db9ea29e77261ea3c7c80900"/143, 0x8f, 0x7388495f99282fd2, 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r9 = dup(r8) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x533c) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101440, 0x0) ioctl$FBIOGET_CON2FBMAP(r10, 0x460f, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r9) ioctl$NBD_DO_IT(r4, 0xab03) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9.37195827s ago: executing program 8 (id=2255): r0 = syz_open_dev$amidi(0x0, 0x2, 0x80042) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 9.2093325s ago: executing program 8 (id=2258): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xa1641000) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x8a2042, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fffffff, 0x0, 0x0, 0x0, 0xd, 0x22, 0x3, 0xe4}) madvise(&(0x7f00001dc000/0x2000)=nil, 0x2000, 0xd) 7.909710231s ago: executing program 0 (id=2260): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/57) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x101082) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x101082) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x0, 0x7, 0x6f}) 7.602821137s ago: executing program 0 (id=2264): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c000280"], 0x74}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010000000000ffdbdf2500000000", @ANYRES32, @ANYBLOB="0006f80000000000140012800b00010067656e65766500"], 0x48}, 0x1, 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() recvmsg$unix(0xffffffffffffffff, 0x0, 0x11000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x69) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) ioctl$TIOCNOTTY(r5, 0x5422) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="4b00030000", 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfff, 0x2, &(0x7f00000000c0)) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0xf8, 0x190, 0xfeffffff, 0x238, 0xf8, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x6, 0x4}}, @common=@ttl={{0x28}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x6000, {0x0, @broadcast, @loopback, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x238}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'team_slave_1\x00', 'bond_slave_0\x00'}, 0x0, 0x1a8, 0x208, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0xb, 0xea, 0x1}}, @common=@inet=@recent1={{0x108}, {0xd8, 0x8, 0x20, 0x0, 'syz1\x00', 0x4, [0xffffffff, 0xff, 0xff, 0xff]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 7.350049167s ago: executing program 7 (id=2266): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x40850}, 0xc814) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x4050) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4008001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001000000000000000000000010000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5883688fe36c29be82fd3f8cd1001377615d999194302bbb4eb9ca8d"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) socket$nl_xfrm(0x10, 0x3, 0x6) 7.307395386s ago: executing program 6 (id=2267): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mknod(&(0x7f00000002c0)='./file0\x00', 0x40, 0x7ff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700b00095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.687445768s ago: executing program 6 (id=2268): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000300)=@md0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20e012, 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0013fef0fd000104000000004befd548f79b", @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000400030000"], 0x3c}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd", 0x29}, {&(0x7f0000000040)}], 0x2) 6.687011561s ago: executing program 8 (id=2269): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x8, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f00000000c0)=""/104, 0x68}, &(0x7f0000000040), 0x20}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 6.677022653s ago: executing program 7 (id=2270): socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000}) 6.349435517s ago: executing program 9 (id=2271): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x3, 0x9, 0x0, @tick, {0xbc}, {0x0, 0x8}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}, {0x0, 0x6, 0x0, 0x0, @tick=0x1, {}, {}, @addr={0xc6, 0xf8}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x6, {0x9}, {}, @quote={{0x2}, 0x5}}, {0x0, 0x0, 0x0, 0x1, @time={0x0, 0x4001}, {}, {0xef, 0xfe}, @raw32={[0x200, 0xee, 0xc1]}}, {0x7, 0x0, 0x0, 0x0, @tick=0x1c71, {0x0, 0x9}, {}, @control={0x0, 0x6}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x9, 0x5}, {}, @quote={{}, 0xffff}}, {0x10, 0x8, 0x0, 0xfc, @time={0x7, 0x7}, {0x0, 0x8}, {}, @control={0xce, 0x4, 0x966}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x12, 0x6}}], 0xa8) syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000008e64500e0000001000c00003000000020000001200000e0200"/43], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x80000}) syz_open_dev$sndctrl(&(0x7f0000000080), 0x80000001, 0x2880) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000002fc0)='1', 0x1) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 5.312089874s ago: executing program 8 (id=2272): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) fchdir(r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x3f}) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x1ff, 0x6, 0x12, 0x6}, 0x2e, [0xdb8, 0xfffe, 0x4, 0x8, 0x2, 0x40, 0x5, 0x2, 0xb, 0x4, 0x5, 0x2, 0xa6d8, 0x4, 0xfffffff8, 0x7, 0x9, 0x1, 0x2, 0x7, 0x2fe, 0x7ff, 0x8, 0x1ff, 0x739, 0x6, 0x930, 0x4, 0x1a12, 0xfffffc00, 0x200, 0x4, 0x0, 0xb, 0x6, 0xa, 0x81, 0x6, 0x1000, 0x1, 0x9, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x8, 0xa, 0xffffffff, 0x5a3a8d03, 0x81, 0x6, 0xdf4, 0x5, 0x10001, 0x9, 0x7, 0x81, 0xb4c, 0x8e, 0x5, 0x8, 0x3, 0xab, 0x2], [0x9, 0x8, 0x791, 0xe0, 0x1, 0xdae9, 0xb8f, 0x7, 0x9, 0x7fffffff, 0x1, 0x3, 0x6, 0x8, 0xffffe45d, 0x6, 0x5, 0x20, 0x1, 0x4, 0xce, 0x2, 0x1, 0x0, 0x2, 0x7f, 0x4d5, 0x0, 0x5176145d, 0x3f, 0x0, 0x3, 0x100, 0x82, 0x4, 0x5a, 0x3, 0xf459, 0x2, 0x8, 0x3ce67e22, 0x2, 0x7, 0x0, 0x80, 0x1d5, 0x7, 0x4, 0xffffffff, 0x5, 0x4, 0xe21, 0x4, 0x8, 0xbe9c, 0x6, 0xa, 0x0, 0x9, 0x1, 0x100, 0x2, 0xfffffffb, 0x1], [0x3, 0x5, 0x100, 0x10001, 0x2, 0x8, 0x5c, 0x2, 0x48, 0x0, 0x5, 0x4, 0x4a, 0x7, 0x8, 0x5, 0x6, 0x3, 0x5983, 0x9bc5, 0x81, 0x1, 0xfffffffa, 0xfc78, 0x4, 0x8, 0x0, 0x14, 0xa, 0x101, 0x9, 0x7, 0x0, 0x44ccc0de, 0x3, 0x6, 0x6, 0x200, 0xd7, 0x3, 0xff, 0x27f2, 0x9, 0x6, 0xffffffff, 0x2, 0x526, 0x8, 0x7fff, 0x400, 0x6, 0xa4, 0x0, 0x2, 0xffffffff, 0xc4e, 0x1, 0x3, 0xfffffffa, 0x2, 0x80, 0x1, 0x2, 0xff], [0x563bac4e, 0x80000000, 0x1, 0x4, 0xbfe, 0x9, 0x8, 0x0, 0x2a7, 0x1, 0x7, 0x7, 0x7fffffff, 0x137b00, 0x7fff, 0xffffffff, 0xb0a, 0x5, 0x5, 0x6, 0x101, 0x2, 0x2, 0x100, 0xddc4, 0x6, 0x9, 0x7f, 0x8, 0x100, 0x4, 0xea, 0x3, 0x7, 0x6, 0x2, 0x7f, 0xfffffffd, 0x4, 0x401, 0x401, 0x2, 0x3, 0x3, 0x1, 0xc, 0x7, 0x9, 0x3d1a, 0x7, 0x7, 0x4, 0x0, 0x2, 0x0, 0xfffffc00, 0x7, 0x1, 0x1, 0x3, 0x40, 0x3, 0xcd5d, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) write$cgroup_int(r1, &(0x7f0000000080)=0xff, 0x12) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @dest_unreach={0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) (async) fchdir(r1) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x3f}) (async) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x1ff, 0x6, 0x12, 0x6}, 0x2e, [0xdb8, 0xfffe, 0x4, 0x8, 0x2, 0x40, 0x5, 0x2, 0xb, 0x4, 0x5, 0x2, 0xa6d8, 0x4, 0xfffffff8, 0x7, 0x9, 0x1, 0x2, 0x7, 0x2fe, 0x7ff, 0x8, 0x1ff, 0x739, 0x6, 0x930, 0x4, 0x1a12, 0xfffffc00, 0x200, 0x4, 0x0, 0xb, 0x6, 0xa, 0x81, 0x6, 0x1000, 0x1, 0x9, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x8, 0xa, 0xffffffff, 0x5a3a8d03, 0x81, 0x6, 0xdf4, 0x5, 0x10001, 0x9, 0x7, 0x81, 0xb4c, 0x8e, 0x5, 0x8, 0x3, 0xab, 0x2], [0x9, 0x8, 0x791, 0xe0, 0x1, 0xdae9, 0xb8f, 0x7, 0x9, 0x7fffffff, 0x1, 0x3, 0x6, 0x8, 0xffffe45d, 0x6, 0x5, 0x20, 0x1, 0x4, 0xce, 0x2, 0x1, 0x0, 0x2, 0x7f, 0x4d5, 0x0, 0x5176145d, 0x3f, 0x0, 0x3, 0x100, 0x82, 0x4, 0x5a, 0x3, 0xf459, 0x2, 0x8, 0x3ce67e22, 0x2, 0x7, 0x0, 0x80, 0x1d5, 0x7, 0x4, 0xffffffff, 0x5, 0x4, 0xe21, 0x4, 0x8, 0xbe9c, 0x6, 0xa, 0x0, 0x9, 0x1, 0x100, 0x2, 0xfffffffb, 0x1], [0x3, 0x5, 0x100, 0x10001, 0x2, 0x8, 0x5c, 0x2, 0x48, 0x0, 0x5, 0x4, 0x4a, 0x7, 0x8, 0x5, 0x6, 0x3, 0x5983, 0x9bc5, 0x81, 0x1, 0xfffffffa, 0xfc78, 0x4, 0x8, 0x0, 0x14, 0xa, 0x101, 0x9, 0x7, 0x0, 0x44ccc0de, 0x3, 0x6, 0x6, 0x200, 0xd7, 0x3, 0xff, 0x27f2, 0x9, 0x6, 0xffffffff, 0x2, 0x526, 0x8, 0x7fff, 0x400, 0x6, 0xa4, 0x0, 0x2, 0xffffffff, 0xc4e, 0x1, 0x3, 0xfffffffa, 0x2, 0x80, 0x1, 0x2, 0xff], [0x563bac4e, 0x80000000, 0x1, 0x4, 0xbfe, 0x9, 0x8, 0x0, 0x2a7, 0x1, 0x7, 0x7, 0x7fffffff, 0x137b00, 0x7fff, 0xffffffff, 0xb0a, 0x5, 0x5, 0x6, 0x101, 0x2, 0x2, 0x100, 0xddc4, 0x6, 0x9, 0x7f, 0x8, 0x100, 0x4, 0xea, 0x3, 0x7, 0x6, 0x2, 0x7f, 0xfffffffd, 0x4, 0x401, 0x401, 0x2, 0x3, 0x3, 0x1, 0xc, 0x7, 0x9, 0x3d1a, 0x7, 0x7, 0x4, 0x0, 0x2, 0x0, 0xfffffc00, 0x7, 0x1, 0x1, 0x3, 0x40, 0x3, 0xcd5d, 0x3]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) write$cgroup_int(r1, &(0x7f0000000080)=0xff, 0x12) (async) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000000)=0x2, 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @broadcast}, @dest_unreach={0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) (async) 4.614142438s ago: executing program 7 (id=2273): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r0, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x34}}, 0x0) 4.612189295s ago: executing program 6 (id=2274): syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) epoll_create1(0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="69a6b4c51c3a404310bf82596c1a97a66ede77bbbbda08599581863ba841f0b9321147b0c75c10acf59a0cc722dab0e95582dd615f1418c17ada8997f115599cc0d063f872f4ce6294a396f18506e99d39d3292291bd337633f3f0d16579fdd602e7eee381c4d7e520f1be11e47ecb22fe60c56f7766fc86037c83968dd8dada4b731170b6fb54bd216ec3355b73c2d4e335d6d6cade86e362755a2017194e6ec17cb62d773a9e0e23e10686"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x69ea41, 0x109) write$cgroup_pid(r4, &(0x7f0000000000), 0x12) io_uring_enter(0xffffffffffffffff, 0x2dbe, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket(0x1e, 0x4, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r10, &(0x7f0000000340)=[{}], 0x1, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.140019147s ago: executing program 0 (id=2275): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00007cb000/0x2000)=nil, 0x2000}, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000000c0)={0x0}) chdir(&(0x7f0000000180)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000140)=r5) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x2284, &(0x7f0000000000)) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmmsg(r6, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001280)="da9a", 0x2}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xa3, 0x4}}}}}}}, 0x0) r8 = socket(0x8, 0x4, 0x3a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000040), 0xc) sendmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='f<', 0x2}], 0x1}}], 0x1, 0x4895) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x8a8, 0x10, 0xd, 0x11, 0x3a, 0x6}}]}}]}, 0x148}}, 0x20000000) 4.080077688s ago: executing program 9 (id=2276): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x560, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = syz_open_dev$audion(&(0x7f0000000000), 0xffff, 0x210000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = epoll_create1(0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_deladdr={0x20, 0x15, 0x801, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x65, 0xfd, r9}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000200)={0xe0000003}) (async) finit_module(r10, 0x0, 0x3) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000040), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) r11 = eventfd2(0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x0, r11, 0xa}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x1, 0x0, 0x2, r11, 0x2}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x3ffe, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r13 = dup(r12) connect$802154_dgram(r13, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) 3.949006872s ago: executing program 7 (id=2277): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x3f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.768317579s ago: executing program 9 (id=2278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='contention_end\x00', r0, 0x0, 0x652}, 0x18) openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="57bebdc10e4ff6ddb3a4d05c027db2e2", 0x10) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0xed, 0xc3, 0xff, 0x90c, 0x1132, 0x14d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x7f, 0xd0, 0xa6, [{{0x9, 0x4, 0x60, 0xf, 0x0, 0xb7, 0xab, 0x46, 0x8}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000099d000/0x4000)=nil, 0x4000}, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121) getdents(0xffffffffffffffff, &(0x7f0000001280)=""/4075, 0xffb) syz_usb_connect$cdc_ecm(0x2, 0x66, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x40, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xf4, {{0x8, 0x24, 0x6, 0x0, 0x0, "5c73c7"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x400, 0xfffd, 0x2, 0x5b}, [@ncm={0x6, 0x24, 0x1a, 0x6}, @dmm={0x7, 0x24, 0x14, 0xff, 0x818b}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3d, 0x3, 0x19}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x0, 0x91}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x81, 0x0, 0x4b}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x351, 0x0, 0x8, 0x8, 0x20, 0x9}, 0x8, &(0x7f00000005c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf4ff}}]}) 3.743575006s ago: executing program 0 (id=2279): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mknod(&(0x7f00000002c0)='./file0\x00', 0x40, 0x7ff) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700bf0095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.728515435s ago: executing program 7 (id=2280): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0xb, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000089dd1900bc49c16be6825c62bd0000000066da43d7645016678d634cad985610683e38094038b9999eaa6adda2c373267a25260856122c81ab21c72704edfcc67759a093e647fa17f7684da394ed5c2da3df63365bcf67cca5ce4b747fb67fbbcaf9d24953b42a46df79315970ff8d3b9c5fa34859845f0585d100000b38363f04b1d9927141ebef079603595f2b9113f2b83ca643b28a104419a5ec1599ab982ea0e8b068e760bfeec560b91bc04f01015dd988b55c79f49be114eec73a0a42985cf8631f7677"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x282e000, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x282e000, @void, @value}, 0x94) r3 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@getnexthop={0x17, 0x76, 0xd11, 0x0, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048840) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="080002"], 0x40}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r5, &(0x7f0000000100)=@abs={0x27}, 0x6e) (async) connect$unix(r5, &(0x7f0000000100)=@abs={0x27}, 0x6e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000021c0), 0x0, 0x8004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.680196674s ago: executing program 8 (id=2281): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) fchmod(r0, 0xc0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x2}, 0x8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {}, 0xc}}, 0x26) sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) syz_usb_connect(0x6, 0x444, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x38, 0x58, 0x4c, 0xff, 0x9c0, 0x201, 0xafed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x432, 0x2, 0xc5, 0x2, 0x50, 0x8, [{{0x9, 0x4, 0xbd, 0x0, 0x3, 0x8c, 0xcf, 0xa1, 0x0, [@hid_hid={0x9, 0x21, 0xf, 0x3b, 0x1, {0x22, 0x256}}], [{{0x9, 0x5, 0xe, 0x10, 0x7d7, 0xc, 0xfb, 0x4, [@generic={0xad, 0x8, "71dc43da15a8e4e41816002a183647020cc5e62a5bcaa633d6e09fb831dfa99f64720cc217f8d1eb70c770969a16d89e7f81eddfb2043aec96eb405e3e0f8cdc05cee378e17d78fd4d5a529c4f09ecb111d22c31d59420a1288dcb799a8f0da5ce54b5ffd2a25d4cc5539c5678ce3f367c01d8e29035932724f614fe8d81fa64f56da3106387424fba94af03206aa81de19a5dd936e87675b77f5d3098e9578d3e0042be66640e308976ee"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xc3, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x6, 0x8, 0xff}}]}}, {{0x9, 0x4, 0x50, 0x5, 0x7, 0x87, 0x1a, 0x28, 0x4, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "93637ac8"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5b70, 0x1, 0x2, 0x4e}, [@ncm={0x6, 0x24, 0x1a, 0xffff, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x4}, @acm={0x4, 0x24, 0x2, 0xe}]}, @hid_hid={0x9, 0x21, 0x78, 0x6b, 0x1, {0x22, 0xff4}}], [{{0x9, 0x5, 0x7, 0x1, 0x8, 0x3, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0xc1, 0x6, 0x7, [@generic={0xec, 0x22, "bf30d01cc6da71042f999884db981b983cf8d508824e7f4c782b663c689c6b366aff03ad53266cfb74e501703ad161f488e0350be9d0ee6bb4b502795cc1923c2e42f606c2728db4a345a58838b2a11201fcb32a093fde3832ca426b7d01a1d3c5a5c5a64655857cc40ce6e72601e9a7d520f623ab669ecac91f42cd1851ef548d84e12ba456321c30614e35b4ffb62260b684dc8f35f0d60e9f4f70135dae4088a708c88b6ae6601a9356d9160e5ca8ccf7a44b4661fda8da23735423ebe254a80b7653d8a16787bd60c72b5183ae89a3b2d5f38bd30a650ee8b6d86be0189601ae239b6219d3931626"}]}}, {{0x9, 0x5, 0x9, 0x18, 0x200, 0x8, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x5ad6}, @generic={0x5c, 0x31, "e6cf77a0efdfbbf1ffae06cdbece8adc0e42daa62347d6ac083e66a4d3277caab5f8c1e0c0cfc3c6a431ec501fa18c367ef7ad2722faaaf3bd4d664f3319716dda22b613b57d734cd423f57cea74e82f93c6b5ee12f54fefb0a0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x4, 0xf4}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x7, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x66}, @generic={0xd4, 0x5, "5c634178b98e15dd9521390869acbb1061c189a614271adf8e1ff6831b7d9e4740bd645863affadd100c4d83e642343f72355a4fa71a21457af51d7228038a595b23807079eb4f59bf7cee26f957161a4c14a1b531cebe14829dd4dce54a9421e7e6e4364c29e7dbb146557eb5f78ac59344b45b13be1896a1c68ef496c0f7c6c223d126cf02d34642bb37a2c8c5d0b5cf80929cd4168b537eece8724f82761ce9e6e9cd300300864f077e2f24bc8940eae419db77788bbd0bdb18bb18f70eaefbe3aa5899ef3423704a38b7845e53273590"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x1, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x401}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x80, 0x6, [@generic={0x9b, 0xd, "ee2866c4ff45e99888cbb7d2e6c065b558f93a1bd5a6faf3bb16d36ba5f40499cf471b8f5e63c132692651573072557d9c4995ba2feddf2ac76a99992a296297245075e68427b220cc0fee1921fd5d92f0f137816731268495f17c9bdbc9af92a1c1be558ce069a403984a17e37186776aaf9c5bd3feb3c1786b4bb67a3239dee721564f35ea73c3f8100ba924ce25b3866d8b615d68668ece"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x0, 0x7, 0x2, 0x0, 0xff, 0x9}, 0x19, &(0x7f0000000300)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x3e, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0xa, 0x800}]}, 0x6, [{0x4f, &(0x7f0000000340)=@string={0x4f, 0x3, "dd476b5ba6dc2174746d38188f90f31979da98d8d3d2f8d0810c656b8a580f373f176a30eb13a2a8d1a85d07055a2e956926fbd0ebc1a539ecf73c2eec52ac5ee74904a61bf176853fee847827"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x200a}}, {0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="2403837c09cc2a2e4ae1798eb17f54dad5db752807be504201332677f49c8c752cb012c215d1e621baa54c17b1b061da1dee"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x68, &(0x7f0000000500)=@string={0x68, 0x3, "e89f68f347295f39170716c332b677371bcfaa0f21f8e75a6a23a4697ef850f4a21cc2a18deccefa131bc3387de4cb0a5221aeea2b238d591255be06bbd5a07c06d343d2453a60c2d33b5ac2aa79933f7e0d644a12fed5bd91b0920dab018998f55411c6148e"}}, {0xc5, &(0x7f0000000b00)=@string={0xc5, 0x3, "46e92e9e1d76789479c48e8f5424b55d11a78e2639cf60f49b67c671711b56a413b7f51b099058580df4e5742b89cecaf22b726fe9ad6fcbf937a9510f9658e2eaf47a3159d78100a3e548a4f1c2701fab160de5761e3386011699afbac2fc8d701a812a9ddccd93822d2cadb45e350e0d1967ed0210da14d63b4fef8c8fe3a3dbb34ffc1eee90478cff1bb7b6196ab669d634ab7b72e3cb016e4518172cddfcf6077cf6a4871267d38ce154899baf2c6638183a9fe93b9cbafe3b1ae5b8fd1495a0ff"}}]}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000080), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1e, &(0x7f0000000c00)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @call={0x85, 0x0, 0x0, 0x2e}, @jmp={0x5, 0x0, 0x6, 0x5, 0x7, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xec4c00598fa0ffbd, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19d8, @void, @value}, 0x94) 2.587973626s ago: executing program 0 (id=2282): r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup2(r2, r1) write$P9_RREMOVE(r3, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8908040400", 0x5) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup(0x21bd, &(0x7f0000000340)={0x0, 0xe247, 0x4000, 0x2, 0x14c}) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x20}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/profiling', 0x8201, 0x81) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x9}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000440)={r9}, &(0x7f0000000500)=0x8) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001c8, 0x12) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r10 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x0, 0x4a}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r10, 0x1f82, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7e3e, &(0x7f0000000180)={0x0, 0x8710, 0x80, 0x1, 0x32c, 0x0, r10}, &(0x7f0000000300), &(0x7f0000000200)) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000000)={0x6, {0x0, 0x2, 0x9}}) sched_setscheduler(r7, 0x2, &(0x7f0000000240)=0x5) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0xc, 0x4, 0x0, 0x25}) 2.557323759s ago: executing program 7 (id=2283): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="641db2bb00"/26]) read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) chdir(&(0x7f00000003c0)='./bus\x00') r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) 1.971363154s ago: executing program 6 (id=2284): socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r7, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r9 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000}) 1.506936428s ago: executing program 0 (id=2285): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001f00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0xed, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x2, 0xd, 0x1, {0x22, 0x8c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x1, 0x40}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0xdf00cf5a81f86d43, 0x1, 0xff, 0x5, 0x40, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x6, 0x10, 0x10, 0x10, 0x8001, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 806.473956ms ago: executing program 6 (id=2286): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x3, 0x9, 0x0, @tick, {0xbc}, {0x0, 0x8}, @connect={{0xfd, 0x4}, {0x2, 0x6}}}, {0x0, 0x6, 0x0, 0x0, @tick=0x1, {}, {}, @addr={0xc6, 0xf8}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x6, {0x9}, {}, @quote={{0x2}, 0x5}}, {0x0, 0x0, 0x0, 0x1, @time={0x0, 0x4001}, {}, {0xef, 0xfe}, @raw32={[0x200, 0xee, 0xc1]}}, {0x7, 0x0, 0x0, 0x0, @tick=0x1c71, {0x0, 0x9}, {}, @control={0x0, 0x6}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x9, 0x5}, {}, @quote={{}, 0xffff}}, {0x10, 0x8, 0x0, 0xfc, @time={0x7, 0x7}, {0x0, 0x8}, {}, @control={0xce, 0x4, 0x966}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x12, 0x6}}], 0xa8) syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000008e64500e0000001000c00003000000020000001200000e0200"/43], 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x80000}) syz_open_dev$sndctrl(&(0x7f0000000080), 0x80000001, 0x2880) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000002fc0)='1', 0x1) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 639.523209ms ago: executing program 9 (id=2287): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r0, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x34}}, 0x0) 390.336238ms ago: executing program 8 (id=2288): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000040)="81fe89bd19980c320d0d5b1fb9005256cccc5f840edfad", 0x17}], 0x1) 113.541137ms ago: executing program 6 (id=2289): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac056902000000000001090224000100000000090404070103000100092100100601220700090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04220a007b1a06ec0000008377d10edc"], 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000180)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@my=0x0}, 0x400, "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"}, 0x418, 0x7fffffff}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="24a634bdbbf0", 0x206c}], 0x1}}], 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00'], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000005000"/32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r7, @ANYBLOB="8c38389c04b1f61e73b260da8a19b206611a18402e8bddca07496ca7ff0b0c88a7ffd0f9ba3b875d0b77c2ba83", @ANYBLOB="01cd17c2e9e33cf024281a9802dc988decda2a70f915b1a4f1a15b5853843801f0192829337e5ef356b1e94d074eacfa4c99fa8a7a45d859eec9118244284fc7ebfe5c80055fcde510dca7beb0", @ANYRES16=r1, @ANYRESHEX=r3], 0xb4}, 0x1, 0x0, 0x0, 0x44080}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = semget$private(0x0, 0x6, 0x4c) (async) semtimedop(0x0, &(0x7f00000000c0), 0x0, 0x0) semop(r9, &(0x7f0000000280)=[{0x4, 0x6, 0xfbebddb077920f20}], 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) 71.723863ms ago: executing program 9 (id=2290): r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = dup(r0) r2 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 0s ago: executing program 9 (id=2291): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/184, 0xb8}, {0x0}], 0x2) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000140)={{0xda, 0x8}, {0x0, 0xc6}, 0xc000, 0x4, 0x6}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB], 0x54}}, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004a00)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 00 audit(1742687231.744:6927): avc: denied { ioctl } for pid=16586 comm="syz.6.1920" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.589353][ T30] audit: type=1400 audit(1742687231.744:6928): avc: denied { ioctl } for pid=16583 comm="syz.0.1919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.615914][ T1200] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 612.665081][ T30] audit: type=1400 audit(1742687231.824:6929): avc: denied { search } for pid=16589 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.722119][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 612.730969][ T30] audit: type=1400 audit(1742687231.834:6930): avc: denied { ioctl } for pid=16583 comm="syz.0.1919" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 612.757386][ T9] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 612.781040][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 612.831288][ T1200] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.845429][ T30] audit: type=1400 audit(1742687231.844:6931): avc: denied { search } for pid=16590 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.869784][ T1200] usb 7-1: config 0 has no interface number 0 [ 612.884758][ T9] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=95.ff [ 612.906546][ T1200] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 612.926553][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.004488][ T1200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.043635][ T9] usb 1-1: Product: syz [ 613.062765][ T9] usb 1-1: Manufacturer: syz [ 613.076065][ T1200] usb 7-1: config 0 descriptor?? [ 613.089863][ T9] usb 1-1: SerialNumber: syz [ 613.135805][ T1200] usb 7-1: selecting invalid altsetting 1 [ 613.251557][ T9] usb 1-1: config 0 descriptor?? [ 613.303876][ T1200] dvb_ttusb_budget: ttusb_init_controller: error [ 613.335760][ T1200] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 614.173448][ T9] usb 1-1: USB disconnect, device number 71 [ 614.344422][ T1200] DVB: Unable to find symbol cx22700_attach() [ 614.530071][ T10] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 614.543369][ T1200] DVB: Unable to find symbol tda10046_attach() [ 614.589825][ T1200] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 614.629424][ T1200] usb 7-1: USB disconnect, device number 37 [ 614.753560][ T10] usb 10-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 614.772024][ T10] usb 10-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 614.789983][T16623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.818087][ T5870] Bluetooth: Can't get version to change to load ram patch err [ 614.827963][ T5870] Bluetooth: Loading patch file failed [ 614.836996][ T10] usb 10-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 614.840772][T16623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.847413][ T5870] ath3k 9-1:0.0: probe with driver ath3k failed with error -71 [ 614.875443][ T10] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 614.906236][ T5870] usb 9-1: USB disconnect, device number 12 [ 614.924012][ T10] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 614.955657][ T10] usb 10-1: Manufacturer: syz [ 614.971107][T16623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.971818][ T10] usb 10-1: SerialNumber: syz [ 615.026491][T16623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.083058][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.114919][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.199712][ T1200] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 615.275404][T16610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.287309][T16610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.310803][T16610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.321611][T16610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.360415][ T1200] usb 7-1: device descriptor read/64, error -71 [ 615.419818][ T5870] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 615.439730][ T3076] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 615.496471][ T10] yealink 10-1:36.0: invalid payload size 0, expected 16 [ 615.524423][ T10] input: Yealink usb-p1k as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:36.0/input/input28 [ 615.558059][ C0] yealink 10-1:36.0: urb_ctl_callback - urb status -71 [ 615.565253][ C0] yealink 10-1:36.0: urb_ctl_callback - urb status -71 [ 615.573464][ C0] yealink 10-1:36.0: urb_ctl_callback - urb status -71 [ 615.582541][ C0] yealink 10-1:36.0: urb_ctl_callback - urb status -71 [ 615.599727][ C0] yealink 10-1:36.0: urb_ctl_callback - urb status -71 [ 615.601144][ T3076] usb 1-1: Using ep0 maxpacket: 8 [ 615.606882][ C0] yealink 10-1:36.0: urb_ctl_callback - urb status -71 [ 615.619065][ C0] yealink 10-1:36.0: urb_ctl_callback - urb status -71 [ 615.626183][ C0] yealink 10-1:36.0: urb_ctl_callback - urb status -71 [ 615.633049][ C0] yealink 10-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 615.642828][ T3076] usb 1-1: unable to get BOS descriptor or descriptor too short [ 615.644882][ T1200] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 615.657621][ T3076] usb 1-1: config 2 has an invalid interface number: 224 but max is 0 [ 615.661727][ T10] usb 10-1: USB disconnect, device number 50 [ 615.670789][ T3076] usb 1-1: config 2 has no interface number 0 [ 615.680065][ T5870] usb 9-1: config 1 interface 0 has no altsetting 0 [ 615.692263][ T5870] usb 9-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.40 [ 615.709748][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.721499][ T5870] usb 9-1: Product: 뮴鐐異勧ႄ㢚㼼龀䂋좞깡聇ぞ⤴遛旂䄏匦⫏泌앶훧졎᥊〵莋瘒袹㶼۠薜㑻혟෾Ј巌빰纳魽䵵绨폄㈑伽﯑飝ਚ住⑸礌샹尺뼸Ѯ␵鎗꒙ꪧ죴꟣허２նც삳ﶮ욯뗏ຉ髢睛铖䫫跑璮죳鼣곑헆緜걚ܵ࿨쾌꽆秚ᘈ浫ड़᥄嗞話誏裹᪉쮘⬣⒪⎠ධ샴煇㖊㆐잸טּ㩪稱쳒ݾ▥ [ 615.738086][ T3076] usb 1-1: config 2 interface 224 altsetting 128 endpoint 0xF has invalid wMaxPacketSize 0 [ 615.783071][ T5870] usb 9-1: Manufacturer: Ќ [ 615.787845][ T3076] usb 1-1: config 2 interface 224 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 615.795300][ T5870] usb 9-1: SerialNumber: Є [ 615.804323][ T3076] usb 1-1: config 2 interface 224 has no altsetting 0 [ 615.815969][ T3076] usb 1-1: New USB device found, idVendor=54cf, idProduct=dbbc, bcdDevice=ab.d8 [ 615.826376][ T3076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.835704][ T3076] usb 1-1: Product: syz [ 615.840351][ T3076] usb 1-1: Manufacturer: syz [ 615.845070][ T3076] usb 1-1: SerialNumber: syz [ 615.849961][ T1200] usb 7-1: device descriptor read/64, error -71 [ 615.961065][ T1200] usb usb7-port1: attempt power cycle [ 616.126322][ T5823] Bluetooth: hci3: command 0x0405 tx timeout [ 616.182961][ T5870] usbhid 9-1:1.0: can't add hid device: -71 [ 616.203060][ T5870] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 616.223251][ T5870] usb 9-1: USB disconnect, device number 13 [ 616.279880][ T10] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 616.319672][ T1200] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 616.343815][ T1200] usb 7-1: device descriptor read/8, error -71 [ 616.429823][ T10] usb 10-1: device descriptor read/64, error -71 [ 616.480203][ T3076] usb-storage 1-1:2.224: USB Mass Storage device detected [ 616.559460][ T3076] usb 1-1: USB disconnect, device number 72 [ 616.619756][ T1200] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 616.658534][ T1200] usb 7-1: device descriptor read/8, error -71 [ 616.689921][ T10] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 616.781427][ T1200] usb usb7-port1: unable to enumerate USB device [ 616.840218][ T10] usb 10-1: device descriptor read/64, error -71 [ 616.969934][ T10] usb usb10-port1: attempt power cycle [ 617.481457][ T30] kauditd_printk_skb: 631 callbacks suppressed [ 617.481473][ T30] audit: type=1400 audit(1742687236.694:7563): avc: denied { create } for pid=16707 comm="syz.0.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 617.599774][ T10] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 617.618446][ T30] audit: type=1400 audit(1742687236.824:7564): avc: denied { read write } for pid=15797 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.649541][ T10] usb 10-1: device descriptor read/8, error -71 [ 617.716531][ T30] audit: type=1400 audit(1742687236.834:7565): avc: denied { create } for pid=16707 comm="syz.0.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 617.813449][ T30] audit: type=1400 audit(1742687236.834:7566): avc: denied { read write } for pid=11505 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.882667][ T30] audit: type=1400 audit(1742687236.834:7567): avc: denied { open } for pid=11505 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.909459][T16729] audit: audit_backlog=65 > audit_backlog_limit=64 [ 617.934645][T16731] audit: audit_backlog=65 > audit_backlog_limit=64 [ 617.940582][T16729] audit: audit_lost=121 audit_rate_limit=0 audit_backlog_limit=64 [ 617.941217][ T30] audit: type=1400 audit(1742687236.834:7568): avc: denied { ioctl } for pid=11505 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.969247][T16729] audit: backlog limit exceeded [ 618.082818][T16733] syz.0.1935 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 618.169733][ T10] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 618.213937][ T10] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 618.232859][ T10] usb 10-1: config 0 has no interface number 0 [ 618.264786][ T10] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 618.295185][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.328468][ T10] usb 10-1: config 0 descriptor?? [ 618.360564][ T10] usb 10-1: selecting invalid altsetting 1 [ 618.383526][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 618.401941][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 618.505478][ T10] DVB: Unable to find symbol cx22700_attach() [ 618.631985][ T10] DVB: Unable to find symbol tda10046_attach() [ 618.663878][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 618.696176][ T10] usb 10-1: USB disconnect, device number 54 [ 618.849936][ T1200] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 619.048950][ T1200] usb 7-1: config 46 has an invalid interface number: 228 but max is 1 [ 619.057614][ T1200] usb 7-1: config 46 has an invalid interface number: 114 but max is 1 [ 619.086014][ T1200] usb 7-1: config 46 contains an unexpected descriptor of type 0x2, skipping [ 619.126272][ T1200] usb 7-1: config 46 has an invalid interface number: 194 but max is 1 [ 619.133346][ T5874] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 619.159810][ T1200] usb 7-1: config 46 contains an unexpected descriptor of type 0x2, skipping [ 619.179714][ T1200] usb 7-1: config 46 has 3 interfaces, different from the descriptor's value: 2 [ 619.188787][ T1200] usb 7-1: config 46 has no interface number 0 [ 619.205331][ T1200] usb 7-1: config 46 has no interface number 1 [ 619.211813][ T1200] usb 7-1: config 46 has no interface number 2 [ 619.218128][ T1200] usb 7-1: config 46 interface 228 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 64 [ 619.228415][ T1200] usb 7-1: config 46 interface 228 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 619.247205][ T1200] usb 7-1: too many endpoints for config 46 interface 114 altsetting 94: 121, using maximum allowed: 30 [ 619.277766][ T1200] usb 7-1: config 46 interface 114 altsetting 94 has a duplicate endpoint with address 0xB, skipping [ 619.472189][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 619.534448][ T5874] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 619.534944][ T1200] usb 7-1: config 46 interface 114 altsetting 94 has an invalid descriptor for endpoint zero, skipping [ 619.719296][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 619.725486][ T1200] usb 7-1: config 46 interface 114 altsetting 94 has an invalid descriptor for endpoint zero, skipping [ 619.759095][ T5874] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 619.786385][ T1200] usb 7-1: config 46 interface 114 altsetting 94 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 619.811808][ T1200] usb 7-1: config 46 interface 114 altsetting 94 has a duplicate endpoint with address 0x8B, skipping [ 619.823383][ T1200] usb 7-1: config 46 interface 114 altsetting 94 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 619.860780][ T5874] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 619.869287][ T1200] usb 7-1: config 46 interface 114 altsetting 94 has a duplicate endpoint with address 0x5, skipping [ 619.890712][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.918478][ T1200] usb 7-1: config 46 interface 114 altsetting 94 has 10 endpoint descriptors, different from the interface descriptor's value: 121 [ 619.920186][ T5874] usb 1-1: config 0 descriptor?? [ 619.988727][ T1200] usb 7-1: config 46 interface 194 altsetting 7 endpoint 0x9 has invalid maxpacket 2031, setting to 64 [ 620.019765][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 620.079365][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 620.125286][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 620.183250][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 620.508844][ T5874] hdpvr 1-1:0.0: firmware version 0x0 dated [ 620.515748][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 620.540803][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 620.554268][ T5874] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 620.571194][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 620.609866][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 620.630790][ T5870] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 620.652838][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x8D, skipping [ 620.695799][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 620.717360][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 620.738633][ T1200] usb 7-1: config 46 interface 194 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 620.752012][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 620.780461][ T1200] usb 7-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 620.793917][ T5870] usb 10-1: Using ep0 maxpacket: 32 [ 620.806598][ T5870] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 620.818467][ T1200] usb 7-1: config 46 interface 228 has no altsetting 0 [ 620.828001][ T5870] usb 10-1: config 0 has no interface number 0 [ 620.847631][ T1200] usb 7-1: config 46 interface 114 has no altsetting 0 [ 620.862830][ T5870] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 620.883291][ T1200] usb 7-1: config 46 interface 194 has no altsetting 0 [ 620.894422][ T5870] usb 10-1: config 0 interface 1 has no altsetting 0 [ 620.909877][ T1200] usb 7-1: New USB device found, idVendor=045e, idProduct=07ab, bcdDevice=da.ca [ 620.916756][ T5874] hdpvr 1-1:0.0: Could not setup controls [ 620.925145][ T1200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.945029][ T5870] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 620.954514][ T5870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.960693][ T5874] hdpvr 1-1:0.0: registering videodev failed [ 620.964545][ T1200] usb 7-1: Product: syz [ 620.974700][ T5870] usb 10-1: Product: syz [ 620.994927][ T1200] usb 7-1: Manufacturer: 崲৮蒼聎∎綍ⶇ汬ເᶀ︘督쬼䉞믠篏ʢ⦶셱ꃬᏇ볎꺒넸遍稩鵄臏䭴ؘ罇럞ꅿ✺屋ྙ젆뱀⧈┱⹗쳤鏖 [ 621.001420][ T5874] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 621.013158][ T5870] usb 10-1: Manufacturer: syz [ 621.034791][ T5870] usb 10-1: SerialNumber: syz [ 621.068327][ T5870] usb 10-1: config 0 descriptor?? [ 621.077779][ T1200] usb 7-1: SerialNumber: syz [ 621.090927][ T1200] r8152-cfgselector 7-1: Unknown version 0x0000 [ 621.107675][ T5874] usb 1-1: USB disconnect, device number 73 [ 621.217814][T16754] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 621.420854][T16806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.765260][T16789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.787275][ T1200] hub 7-1:46.114: Invalid hub with more than one config or interface [ 621.802847][ T1200] hub 7-1:46.114: probe with driver hub failed with error -22 [ 621.832791][T16789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.886218][ T1200] r8152-cfgselector 7-1: USB disconnect, device number 42 [ 621.921142][ T5870] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 621.979036][ T5870] cx231xx 10-1:0.1: Failed to read PCB config [ 621.985726][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 621.995018][ T5870] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71 [ 622.027198][T16816] lo speed is unknown, defaulting to 1000 [ 622.066718][ T5870] usb 10-1: USB disconnect, device number 55 [ 622.700697][ T30] kauditd_printk_skb: 552 callbacks suppressed [ 622.700721][ T30] audit: type=1400 audit(1742687241.824:8080): avc: denied { search } for pid=16798 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.928631][ T30] audit: type=1400 audit(1742687241.844:8081): avc: denied { getattr } for pid=16798 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth21.dhcp" dev="tmpfs" ino=10193 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 623.146457][ T30] audit: type=1400 audit(1742687242.084:8082): avc: denied { read write } for pid=11939 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.206705][ T30] audit: type=1400 audit(1742687242.094:8083): avc: denied { open } for pid=11939 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.274460][ T30] audit: type=1400 audit(1742687242.094:8084): avc: denied { ioctl } for pid=11939 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.333674][ T30] audit: type=1400 audit(1742687242.194:8085): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 623.361159][ T30] audit: type=1400 audit(1742687242.194:8086): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.388965][ T30] audit: type=1400 audit(1742687242.194:8087): avc: denied { append } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 623.421492][ T30] audit: type=1400 audit(1742687242.214:8088): avc: denied { open } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 623.469681][ T30] audit: type=1400 audit(1742687242.214:8089): avc: denied { getattr } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 623.665094][T16820] lo speed is unknown, defaulting to 1000 [ 623.679236][T16816] lo speed is unknown, defaulting to 1000 [ 623.693626][T16837] 9pnet_fd: Insufficient options for proto=fd [ 624.123766][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.166599][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1951'. [ 624.193369][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1951'. [ 624.388738][T16820] lo speed is unknown, defaulting to 1000 [ 624.469766][ T1200] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 624.677654][ T1200] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 624.743005][ T1200] usb 1-1: config 0 has no interface number 0 [ 624.773380][ T1200] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 624.793047][T16859] sp0: Synchronizing with TNC [ 624.835695][ T1200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.901750][ T1200] usb 1-1: config 0 descriptor?? [ 624.924951][ T1200] usb 1-1: selecting invalid altsetting 1 [ 624.953994][ T1200] dvb_ttusb_budget: ttusb_init_controller: error [ 624.994203][ T1200] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 625.159787][ T10] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 625.423241][ T1200] DVB: Unable to find symbol cx22700_attach() [ 625.429793][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 625.450122][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.464829][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 625.474182][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 625.482296][ T10] usb 9-1: SerialNumber: syz [ 625.547842][ T10] cdc_ether 9-1:1.0: skipping garbage [ 625.569875][ T10] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 625.630857][ T1200] DVB: Unable to find symbol tda10046_attach() [ 625.674596][ T1200] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 625.694505][T16896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16896 comm=syz.9.1959 [ 625.697031][ T10] usb-storage 9-1:1.0: USB Mass Storage device detected [ 625.723234][ T1200] usb 1-1: USB disconnect, device number 74 [ 625.762535][ T10] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 625.889706][ T10] usb 9-1: USB disconnect, device number 14 [ 626.124215][T16910] veth1_to_hsr: entered promiscuous mode [ 626.170456][T16906] netlink: 'syz.0.1962': attribute type 1 has an invalid length. [ 626.189770][T16906] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1962'. [ 626.423411][T16918] netlink: 'syz.0.1963': attribute type 1 has an invalid length. [ 626.432708][T16918] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1963'. [ 626.486217][T11661] usb 10-1: new full-speed USB device number 56 using dummy_hcd [ 626.713277][T16910] veth1_to_hsr: left promiscuous mode [ 626.785123][T11661] usb 10-1: config 0 has an invalid interface number: 183 but max is 0 [ 626.824217][T11661] usb 10-1: config 0 has no interface number 0 [ 626.861354][T11661] usb 10-1: config 0 interface 183 altsetting 0 endpoint 0x2 has invalid maxpacket 528, setting to 64 [ 626.898463][T11661] usb 10-1: config 0 interface 183 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 626.923869][T16931] fuse: Unknown parameter 'Fe00000000000000000000003' [ 626.953340][T11661] usb 10-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 626.969200][T11661] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.991995][T11661] usb 10-1: Product: syz [ 627.005725][T11661] usb 10-1: Manufacturer: syz [ 627.012406][T11661] usb 10-1: SerialNumber: syz [ 627.025021][T16937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33406 sclass=netlink_route_socket pid=16937 comm=syz.7.1966 [ 627.064854][T11661] usb 10-1: config 0 descriptor?? [ 627.083649][T16914] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 627.113682][T16938] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 627.116185][T16914] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 627.299749][ T3076] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 627.480103][ T3076] usb 9-1: Using ep0 maxpacket: 8 [ 627.514913][ T3076] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 627.534300][T16909] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 627.541563][ T3076] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.546114][T16909] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 627.569653][ T3076] usb 9-1: Product: syz [ 627.573905][ T3076] usb 9-1: Manufacturer: syz [ 627.591955][ T3076] usb 9-1: SerialNumber: syz [ 627.600091][T11661] net1080 10-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.9-1, NetChip TurboCONNECT, 42:05:3d:89:df:bd [ 627.615437][ T3076] usb 9-1: config 0 descriptor?? [ 627.626140][ T3076] gspca_main: se401-2.14.0 probing 047d:5003 [ 627.738197][ T30] kauditd_printk_skb: 539 callbacks suppressed [ 627.738212][ T30] audit: type=1400 audit(1742687246.944:8629): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 627.836154][ T30] audit: type=1400 audit(1742687247.044:8630): avc: denied { ioctl } for pid=16932 comm="syz.8.1968" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.881832][ T5870] usb 10-1: USB disconnect, device number 56 [ 628.033890][ T5870] net1080 10-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.9-1, NetChip TurboCONNECT [ 628.044882][ T30] audit: type=1400 audit(1742687247.074:8631): avc: denied { read write } for pid=11939 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.070368][ T30] audit: type=1400 audit(1742687247.074:8632): avc: denied { read write open } for pid=11939 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.096847][ T30] audit: type=1400 audit(1742687247.074:8633): avc: denied { ioctl } for pid=11939 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.131736][ T3076] gspca_se401: Wrong descriptor type [ 628.276599][T16958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.315229][ T5874] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 628.530297][T16933] new mount options do not match the existing superblock, will be ignored [ 628.589215][T16933] option changes via remount are deprecated (pid=16932 comm=syz.8.1968) [ 628.614070][ T30] audit: type=1400 audit(1742687247.084:8634): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 628.722517][ T5874] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 628.739657][ T5874] usb 1-1: config 0 has no interface number 0 [ 629.076196][ T30] audit: type=1400 audit(1742687247.084:8635): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.132421][ T5874] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 629.165361][ T30] audit: type=1400 audit(1742687247.084:8636): avc: denied { append } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 629.169721][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.215342][ T30] audit: type=1400 audit(1742687247.084:8637): avc: denied { open } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 629.254362][T16969] audit: audit_backlog=65 > audit_backlog_limit=64 [ 629.265154][ T5874] usb 1-1: config 0 descriptor?? [ 629.289948][ T10] usb 9-1: USB disconnect, device number 15 [ 629.325886][ T5874] usb 1-1: selecting invalid altsetting 1 [ 629.366871][ T5874] dvb_ttusb_budget: ttusb_init_controller: error [ 629.414027][ T5874] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 629.435953][T16969] netlink: 'syz.6.1975': attribute type 1 has an invalid length. [ 629.460636][T16969] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1975'. [ 629.520526][T16981] ubi: mtd0 is already attached to ubi31 [ 629.573995][ T5874] DVB: Unable to find symbol cx22700_attach() [ 629.728271][ T5874] DVB: Unable to find symbol tda10046_attach() [ 629.745899][ T5874] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 629.811373][ T5874] usb 1-1: USB disconnect, device number 75 [ 631.137713][T17011] lo speed is unknown, defaulting to 1000 [ 631.350398][T17012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.496266][T17011] lo speed is unknown, defaulting to 1000 [ 632.318313][T17035] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 632.740681][T17047] veth0_vlan: entered allmulticast mode [ 632.767997][ T30] kauditd_printk_skb: 525 callbacks suppressed [ 632.768033][ T30] audit: type=1400 audit(1742687251.874:9050): avc: denied { create } for pid=17040 comm="syz.9.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 633.213211][ T30] audit: type=1400 audit(1742687251.874:9051): avc: denied { write } for pid=17040 comm="syz.9.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 633.329754][ T30] audit: type=1400 audit(1742687251.884:9052): avc: denied { map_create } for pid=17040 comm="syz.9.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 633.367520][ T30] audit: type=1400 audit(1742687251.884:9053): avc: denied { map_read map_write } for pid=17040 comm="syz.9.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 633.450636][ T30] audit: type=1400 audit(1742687251.894:9054): avc: denied { prog_load } for pid=17040 comm="syz.9.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 633.552693][ T30] audit: type=1400 audit(1742687251.894:9055): avc: denied { bpf } for pid=17040 comm="syz.9.1990" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 633.617134][ T30] audit: type=1400 audit(1742687251.904:9056): avc: denied { read write } for pid=17040 comm="syz.9.1990" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 633.693332][T17059] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.700184][T17059] audit: audit_lost=174 audit_rate_limit=0 audit_backlog_limit=64 [ 633.700570][T17067] audit: audit_backlog=65 > audit_backlog_limit=64 [ 633.799752][ T5823] Bluetooth: hci5: command 0x0405 tx timeout [ 634.566797][T17087] 9pnet_fd: Insufficient options for proto=fd [ 635.463163][ T5823] Bluetooth: hci4: unexpected event for opcode 0x200b [ 635.486300][T17082] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 635.515223][T17082] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1999'. [ 636.379838][ T5871] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 636.633078][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 636.760240][ T5871] usb 1-1: config 0 has no interface number 0 [ 636.791618][T17134] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 636.926847][ T5871] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 636.989671][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.025897][ T5871] usb 1-1: config 0 descriptor?? [ 637.071163][ T5871] usb 1-1: selecting invalid altsetting 1 [ 637.076984][ T5871] dvb_ttusb_budget: ttusb_init_controller: error [ 637.090733][ T5871] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 637.245142][ T5871] DVB: Unable to find symbol cx22700_attach() [ 637.433133][ T5871] DVB: Unable to find symbol tda10046_attach() [ 637.445086][ T5871] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 637.467453][ T5871] usb 1-1: USB disconnect, device number 76 [ 637.808652][ T30] kauditd_printk_skb: 471 callbacks suppressed [ 637.808669][ T30] audit: type=1400 audit(1742687257.014:9504): avc: denied { search } for pid=17142 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.888004][ T30] audit: type=1400 audit(1742687257.014:9505): avc: denied { search } for pid=17142 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.974475][T17160] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2011'. [ 637.995951][ T30] audit: type=1400 audit(1742687257.014:9506): avc: denied { getattr } for pid=17142 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.086784][ T30] audit: type=1400 audit(1742687257.014:9507): avc: denied { write } for pid=17142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.178896][ T30] audit: type=1400 audit(1742687257.014:9508): avc: denied { add_name } for pid=17142 comm="dhcpcd-run-hook" name="resolv.conf.eth13.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.239670][ T30] audit: type=1400 audit(1742687257.024:9510): avc: denied { read write } for pid=11939 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.240511][T17173] No control pipe specified [ 638.275064][T17169] lo speed is unknown, defaulting to 1000 [ 638.299681][ T30] audit: type=1400 audit(1742687257.024:9511): avc: denied { open } for pid=11939 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.356365][T17176] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.360310][T17166] audit: audit_backlog=65 > audit_backlog_limit=64 [ 638.369986][ T30] audit: type=1400 audit(1742687257.024:9512): avc: denied { ioctl } for pid=11939 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.419740][ T5871] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 638.475866][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 638.558406][T17169] lo speed is unknown, defaulting to 1000 [ 638.627912][ T5871] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 638.663711][ T5871] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.703059][ T5871] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 638.749689][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.780357][ T5871] usb 7-1: config 0 descriptor?? [ 639.038461][T17166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.047715][T17193] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (17179869180 ns) > initial count (144 ns). Using initial count to start timer. [ 639.088293][T17166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.140771][ T5871] usb 7-1: USB disconnect, device number 43 [ 639.640453][ T5871] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 639.883645][T17222] kernel profiling enabled (shift: 7) [ 640.094211][T17222] ptrace attach of "./syz-executor exec"[13661] was attempted by ""[17222] [ 640.382607][ T5871] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 640.405125][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.611104][T17233] netlink: 'syz.9.2023': attribute type 1 has an invalid length. [ 640.622686][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.635878][ T5871] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 640.649725][T17233] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2023'. [ 640.659470][ T5871] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 640.672104][ T5871] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 640.691706][ T5871] usb 9-1: Manufacturer: syz [ 640.698302][ T5871] usb 9-1: config 0 descriptor?? [ 640.797808][T17241] 9pnet_virtio: no channels available for device 127.0.0.1 [ 641.231304][ T5871] appleir 0003:05AC:8243.0020: item fetching failed at offset 0/1 [ 641.332392][ T5871] appleir 0003:05AC:8243.0020: parse failed [ 641.358822][ T5871] appleir 0003:05AC:8243.0020: probe with driver appleir failed with error -22 [ 641.393301][ T5874] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 641.573141][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 641.597404][ T5874] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 641.605947][ T3076] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 641.624453][ T5874] usb 1-1: config 0 has no interface number 1 [ 641.646155][ T5874] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 641.659981][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.679184][ T5874] usb 1-1: Product: syz [ 641.687890][ T5874] usb 1-1: Manufacturer: syz [ 641.690651][ T5871] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 641.700434][ T5874] usb 1-1: SerialNumber: syz [ 641.724665][ T5874] usb 1-1: config 0 descriptor?? [ 641.772317][ T3076] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 641.786466][ T5874] snd-usb-audio 1-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 641.797862][ T3076] usb 10-1: config 0 interface 0 has no altsetting 0 [ 641.813703][ T3076] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 641.825961][ T3076] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 641.840915][ T3076] usb 10-1: Product: syz [ 641.845328][ T3076] usb 10-1: Manufacturer: syz [ 641.854296][ T3076] usb 10-1: SerialNumber: syz [ 641.871251][ T3076] usb 10-1: config 0 descriptor?? [ 641.872055][ T5871] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 641.902470][ T3076] usb 10-1: selecting invalid altsetting 0 [ 641.904865][ T5871] usb 7-1: config 0 has no interface number 0 [ 641.918840][ T5871] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 641.924791][T11686] udevd[11686]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.954513][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.005254][ T5871] usb 7-1: config 0 descriptor?? [ 642.038630][ T5871] usb 7-1: selecting invalid altsetting 1 [ 642.063571][ T5871] dvb_ttusb_budget: ttusb_init_controller: error [ 642.073958][ T5871] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 642.273773][ T5871] DVB: Unable to find symbol cx22700_attach() [ 642.383731][T17279] 9pnet_virtio: no channels available for device 127.0.0.1 [ 642.903282][ T30] kauditd_printk_skb: 657 callbacks suppressed [ 642.903299][ T30] audit: type=1400 audit(1742687262.084:10150): avc: denied { read } for pid=5177 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 642.941264][ T30] audit: type=1400 audit(1742687262.084:10151): avc: denied { search } for pid=5177 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.963930][ T30] audit: type=1400 audit(1742687262.084:10152): avc: denied { append } for pid=5177 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 643.072087][ T30] audit: type=1400 audit(1742687262.084:10153): avc: denied { open } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 643.144603][ T10] usb 1-1: USB disconnect, device number 77 [ 643.156776][ T5874] usb 9-1: USB disconnect, device number 16 [ 643.166050][ T5929] usb 10-1: USB disconnect, device number 57 [ 643.238488][ T30] audit: type=1400 audit(1742687262.084:10154): avc: denied { getattr } for pid=5177 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 643.276584][ T5871] DVB: Unable to find symbol tda10046_attach() [ 643.292970][ T5871] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 643.348736][ T5871] usb 7-1: USB disconnect, device number 44 [ 643.389292][ T30] audit: type=1400 audit(1742687262.224:10155): avc: denied { read write } for pid=13661 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 643.440317][T13597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.447471][T13597] audit: audit_lost=190 audit_rate_limit=0 audit_backlog_limit=64 [ 643.467088][T17307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 643.488133][T13597] audit: backlog limit exceeded [ 644.322329][T17316] netlink: 'syz.6.2035': attribute type 1 has an invalid length. [ 644.344235][T17316] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2035'. [ 644.731967][T17343] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2043'. [ 644.755366][T17339] kvm: pic: non byte write [ 644.760820][T17343] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2043'. [ 644.776628][T17339] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (17179869180 ns) > initial count (144 ns). Using initial count to start timer. [ 644.804087][ T5871] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 644.939294][T17359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.969866][ T5871] usb 9-1: Using ep0 maxpacket: 32 [ 644.997168][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.017373][ T5871] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.043088][ T5871] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 645.062618][ T5871] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.103898][ T5871] usb 9-1: config 0 descriptor?? [ 645.229873][ T3076] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 645.329719][ T5871] usbhid 9-1:0.0: can't add hid device: -32 [ 645.338607][ T5871] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 645.359814][ T5871] usb 9-1: USB disconnect, device number 17 [ 645.389906][ T3076] usb 7-1: Using ep0 maxpacket: 8 [ 645.400346][ T3076] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 645.441940][ T3076] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 645.462965][ T3076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 645.477696][ T3076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 645.493237][ T3076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 48, changing to 9 [ 645.507477][ T3076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 8240, setting to 1024 [ 645.537840][T17384] vcan0: entered allmulticast mode [ 645.547008][ T3076] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.568197][ T3076] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 645.581277][T17384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17384 comm=syz.8.2049 [ 645.601136][ T3076] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.616009][ T3076] usb 7-1: Product: syz [ 645.622054][ T3076] usb 7-1: Manufacturer: syz [ 645.629312][ T3076] usb 7-1: SerialNumber: syz [ 645.655859][ T3076] usb 7-1: config 0 descriptor?? [ 645.686694][T17363] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 645.787598][T17392] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 645.969684][ T5923] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 646.114895][T17399] netlink: 'syz.8.2052': attribute type 1 has an invalid length. [ 646.131011][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 646.155340][ T5923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 646.159730][T17399] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2052'. [ 646.173799][ T5923] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 646.190446][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 646.206056][ T5923] usb 1-1: Product: syz [ 646.213150][ T5923] usb 1-1: Manufacturer: syz [ 646.217767][ T5923] usb 1-1: SerialNumber: syz [ 646.240804][ T5923] usb 1-1: config 0 descriptor?? [ 646.256841][T17389] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 646.581088][ T10] usb 1-1: USB disconnect, device number 78 [ 646.873347][ T5871] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 647.055316][ T5871] usb 9-1: device descriptor read/64, error -71 [ 647.452559][ T5871] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 647.609753][ T5871] usb 9-1: device descriptor read/64, error -71 [ 647.751480][ T5871] usb usb9-port1: attempt power cycle [ 647.924444][ T30] kauditd_printk_skb: 732 callbacks suppressed [ 647.924459][ T30] audit: type=1400 audit(1742687266.984:10871): avc: denied { execmem } for pid=17445 comm="syz.7.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 647.952616][ T30] audit: type=1400 audit(1742687266.984:10872): avc: denied { search } for pid=17449 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.999151][ T30] audit: type=1400 audit(1742687267.004:10873): avc: denied { mounton } for pid=17439 comm="syz.0.2057" path="/proc/600/task" dev="proc" ino=62685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 648.035326][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2059'. [ 648.054619][ T30] audit: type=1400 audit(1742687267.004:10874): avc: denied { mount } for pid=17439 comm="syz.0.2057" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 648.105761][ T30] audit: type=1400 audit(1742687267.004:10875): avc: denied { create } for pid=17439 comm="syz.0.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 648.133697][ T30] audit: type=1400 audit(1742687267.004:10876): avc: denied { read } for pid=17439 comm="syz.0.2057" dev="nsfs" ino=4026533044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 648.166184][ T30] audit: type=1400 audit(1742687267.004:10877): avc: denied { open } for pid=17439 comm="syz.0.2057" path="net:[4026533044]" dev="nsfs" ino=4026533044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 648.190077][ T5871] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 648.454130][ T30] audit: type=1400 audit(1742687267.004:10878): avc: denied { connect } for pid=17439 comm="syz.0.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 648.534840][ T3076] rc_core: IR keymap rc-snapstream-firefly not found [ 648.550170][ T5871] usb 9-1: device descriptor read/8, error -71 [ 648.566187][ T30] audit: type=1400 audit(1742687267.064:10879): avc: denied { read write } for pid=11939 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 648.631139][ T3076] Registered IR keymap rc-empty [ 648.639767][ T3076] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 648.652320][ T3076] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input29 [ 648.668247][ T30] audit: type=1400 audit(1742687267.064:10880): avc: denied { open } for pid=11939 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 648.716305][ T3076] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input30 [ 648.799886][ T5871] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 648.802643][ T3076] usb 7-1: USB disconnect, device number 45 [ 648.807545][ C1] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 648.845853][T17461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 648.869682][ T5871] usb 9-1: device descriptor read/8, error -71 [ 648.980746][ T5871] usb usb9-port1: unable to enumerate USB device [ 649.271019][ T3076] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 649.429818][ T3076] usb 7-1: Using ep0 maxpacket: 16 [ 649.442659][ T3076] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.502953][ T3076] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.603634][ T3076] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.829950][ T3076] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.969657][ T3076] usb 7-1: config 0 descriptor?? [ 650.130266][T17497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.535743][T17501] overlayfs: failed to resolve './file0': -2 [ 650.687467][T17443] delete_channel: no stack [ 650.749802][ T5871] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 650.773843][ T3076] usbhid 7-1:0.0: can't add hid device: -71 [ 650.780042][ T3076] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 650.794928][ T3076] usb 7-1: USB disconnect, device number 46 [ 650.970518][ T5871] usb 9-1: too many configurations: 247, using maximum allowed: 8 [ 650.990139][ T5871] usb 9-1: config index 0 descriptor too short (expected 35090, got 18) [ 651.006329][ T5871] usb 9-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 651.027102][ T5871] usb 9-1: config 0 has no interfaces? [ 651.038531][ T5871] usb 9-1: config index 1 descriptor too short (expected 35090, got 18) [ 651.050965][ T5871] usb 9-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 651.071786][ T5871] usb 9-1: config 0 has no interfaces? [ 651.084931][ T5871] usb 9-1: config index 2 descriptor too short (expected 35090, got 18) [ 651.099719][ T5871] usb 9-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 651.126142][ T5871] usb 9-1: config 0 has no interfaces? [ 651.146654][ T5871] usb 9-1: config index 3 descriptor too short (expected 35090, got 18) [ 651.156329][ T5871] usb 9-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 651.178911][ T5871] usb 9-1: config 0 has no interfaces? [ 651.192522][ T5871] usb 9-1: config index 4 descriptor too short (expected 35090, got 18) [ 651.208212][ T5871] usb 9-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 651.223319][ T5871] usb 9-1: config 0 has no interfaces? [ 651.252614][ T5871] usb 9-1: config index 5 descriptor too short (expected 35090, got 18) [ 651.264022][ T5871] usb 9-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 651.291260][ T5871] usb 9-1: config 0 has no interfaces? [ 651.309098][ T5871] usb 9-1: config index 6 descriptor too short (expected 35090, got 18) [ 651.338104][ T5871] usb 9-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 651.365707][ T5871] usb 9-1: config 0 has no interfaces? [ 651.376485][ T5871] usb 9-1: config index 7 descriptor too short (expected 35090, got 18) [ 651.387115][ T5871] usb 9-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 651.404458][ T5871] usb 9-1: config 0 has no interfaces? [ 651.414620][ T5871] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 651.426632][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.436642][ T5871] usb 9-1: Product: syz [ 651.443282][ T5871] usb 9-1: Manufacturer: syz [ 651.448076][ T5871] usb 9-1: SerialNumber: syz [ 651.630517][ T5871] usb 9-1: config 0 descriptor?? [ 652.228277][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2071'. [ 652.261274][ T5874] usb 9-1: USB disconnect, device number 22 [ 652.546900][T17555] netlink: 'syz.9.2073': attribute type 2 has an invalid length. [ 652.572796][T17555] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2073'. [ 652.729747][ T3076] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 652.903802][ T3076] usb 7-1: unable to get BOS descriptor or descriptor too short [ 652.913269][ T3076] usb 7-1: not running at top speed; connect to a high speed hub [ 652.923166][ T3076] usb 7-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 652.935797][ T3076] usb 7-1: config 11 has 0 interfaces, different from the descriptor's value: 1 [ 652.947060][ T30] kauditd_printk_skb: 594 callbacks suppressed [ 652.947074][ T30] audit: type=1400 audit(1742687272.154:11475): avc: denied { ioctl } for pid=17536 comm="syz.6.2070" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 653.006645][ T3076] usb 7-1: New USB device found, idVendor=19d2, idProduct=ffd3, bcdDevice=ef.ec [ 653.016226][ T3076] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.035636][ T3076] usb 7-1: Product: syz [ 653.041420][ T3076] usb 7-1: Manufacturer: syz [ 653.046094][ T30] audit: type=1400 audit(1742687272.204:11476): avc: denied { read write } for pid=15797 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.075083][ T3076] usb 7-1: SerialNumber: syz [ 653.109157][ T30] audit: type=1400 audit(1742687272.204:11477): avc: denied { open } for pid=15797 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.169677][ T30] audit: type=1400 audit(1742687272.204:11478): avc: denied { ioctl } for pid=15797 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.357773][ T30] audit: type=1400 audit(1742687272.204:11479): avc: denied { ioctl } for pid=17536 comm="syz.6.2070" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 653.489848][ T30] audit: type=1400 audit(1742687272.274:11480): avc: denied { read } for pid=17570 comm="syz.8.2076" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 653.543755][ T30] audit: type=1400 audit(1742687272.274:11481): avc: denied { open } for pid=17570 comm="syz.8.2076" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 653.573954][ T30] audit: type=1400 audit(1742687272.284:11482): avc: denied { read } for pid=17570 comm="syz.8.2076" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 653.597145][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.623513][ T30] audit: type=1400 audit(1742687272.284:11483): avc: denied { open } for pid=17570 comm="syz.8.2076" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 653.647155][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.671747][ T30] audit: type=1400 audit(1742687272.294:11484): avc: denied { search } for pid=17553 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.694003][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.190912][T17588] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 654.450172][ T3076] usb 7-1: USB disconnect, device number 47 [ 654.879967][ T5871] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 655.058408][ T5871] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 655.067233][ T5871] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.088199][ T5871] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 655.101029][ T5871] usb 7-1: config 1 has no interface number 1 [ 655.107684][ T5871] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 655.121172][ T5871] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 655.134058][ T5871] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 655.143315][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.151405][ T5871] usb 7-1: Product: syz [ 655.155581][ T5871] usb 7-1: Manufacturer: syz [ 655.160380][ T5871] usb 7-1: SerialNumber: syz [ 655.388855][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2080'. [ 655.497371][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.511887][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.548981][ T5871] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 655.589835][ T5871] usb 7-1: USB disconnect, device number 48 [ 655.997129][T17607] ptrace attach of "./syz-executor exec"[11939] was attempted by ""[17607] [ 656.407278][T11684] udevd[11684]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.573326][T17609] IPv6: tmpfs: Disabled Multicast RS [ 657.626782][T17621] sp0: Synchronizing with TNC [ 657.881971][T17635] netlink: 'syz.6.2088': attribute type 1 has an invalid length. [ 657.919810][T17635] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2088'. [ 657.951674][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 657.951691][ T30] audit: type=1400 audit(1742687277.164:11755): avc: denied { read } for pid=17641 comm="syz.9.2090" dev="nsfs" ino=4026533372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 658.001487][T17642] Bluetooth: MGMT ver 1.23 [ 658.043102][ T30] audit: type=1400 audit(1742687277.164:11756): avc: denied { open } for pid=17641 comm="syz.9.2090" path="net:[4026533372]" dev="nsfs" ino=4026533372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 658.116669][ T30] audit: type=1400 audit(1742687277.164:11757): avc: denied { create } for pid=17641 comm="syz.9.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 658.278908][ T30] audit: type=1400 audit(1742687277.184:11758): avc: denied { bind } for pid=17641 comm="syz.9.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 658.300863][ T30] audit: type=1400 audit(1742687277.194:11759): avc: denied { write } for pid=17634 comm="syz.6.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.321801][ T30] audit: type=1400 audit(1742687277.194:11760): avc: denied { read } for pid=17634 comm="syz.6.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.387524][ T30] audit: type=1400 audit(1742687277.194:11761): avc: denied { create } for pid=17634 comm="syz.6.2088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 659.395066][ T30] audit: type=1400 audit(1742687277.214:11762): avc: denied { write } for pid=17641 comm="syz.9.2090" path="socket:[62235]" dev="sockfs" ino=62235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 660.042944][T17627] audit: audit_backlog=65 > audit_backlog_limit=64 [ 660.062691][ T30] audit: type=1400 audit(1742687277.234:11763): avc: denied { prog_load } for pid=17641 comm="syz.9.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 660.373776][T17668] netlink: 'syz.7.2094': attribute type 1 has an invalid length. [ 660.434761][T17668] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2094'. [ 661.309490][ T9] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 661.631959][T17695] netlink: 'syz.6.2101': attribute type 1 has an invalid length. [ 661.672982][T17695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.765432][ T9] usb 10-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 661.780643][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.805948][ T9] usb 10-1: config 0 descriptor?? [ 661.836083][ T9] usb 10-1: selecting invalid altsetting 1 [ 661.862056][ T9] flexcop_usb: set interface failed. [ 661.870010][ T9] b2c2_flexcop_usb 10-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 661.947240][ T5195] udevd[5195]: worker [11686] terminated by signal 33 (Unknown signal 33) [ 662.070316][T17708] netlink: 'syz.6.2103': attribute type 1 has an invalid length. [ 662.078205][T17708] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2103'. [ 663.021049][ T30] kauditd_printk_skb: 467 callbacks suppressed [ 663.021083][ T30] audit: type=1400 audit(1742687282.224:12157): avc: denied { map } for pid=17727 comm="syz.7.2108" path="/dev/vcs4" dev="devtmpfs" ino=2762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 663.105513][ T30] audit: type=1400 audit(1742687282.304:12158): avc: denied { read } for pid=17727 comm="syz.7.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 663.142648][ T30] audit: type=1400 audit(1742687282.314:12159): avc: denied { ioctl } for pid=17720 comm="syz.0.2106" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 663.170532][ T5874] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 663.180523][ T30] audit: type=1400 audit(1742687282.334:12160): avc: denied { read write } for pid=13597 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.206541][ T30] audit: type=1400 audit(1742687282.334:12161): avc: denied { open } for pid=13597 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.231719][ T30] audit: type=1400 audit(1742687282.334:12162): avc: denied { ioctl } for pid=13597 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.257581][ T30] audit: type=1400 audit(1742687282.414:12163): avc: denied { ioctl } for pid=17720 comm="syz.0.2106" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 663.282742][ T30] audit: type=1400 audit(1742687282.444:12164): avc: denied { ioctl } for pid=17720 comm="syz.0.2106" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 663.332534][ T30] audit: type=1400 audit(1742687282.524:12165): avc: denied { ioctl } for pid=17720 comm="syz.0.2106" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 663.364201][T17743] program syz.6.2109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.388169][ T30] audit: type=1400 audit(1742687282.524:12166): avc: denied { search } for pid=17739 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 663.432251][ T5874] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.440830][ T5874] usb 1-1: config 0 has no interface number 0 [ 663.457548][ T5874] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 663.471933][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.508881][T17750] netlink: 'syz.7.2110': attribute type 1 has an invalid length. [ 663.516960][T17750] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2110'. [ 663.531454][ T5874] usb 1-1: Product: syz [ 663.536235][ T5874] usb 1-1: Manufacturer: syz [ 663.541669][ T5874] usb 1-1: SerialNumber: syz [ 663.549012][ T5874] usb 1-1: config 0 descriptor?? [ 663.558112][ T5874] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 663.659760][ T5871] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 663.830762][ T5871] usb 9-1: Using ep0 maxpacket: 16 [ 663.848865][ T5871] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 663.871518][ T5871] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.895318][ T5871] usb 9-1: config 0 has no interface number 0 [ 663.905933][ T5871] usb 9-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 663.915874][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.924070][ T5871] usb 9-1: Product: syz [ 663.928445][ T5871] usb 9-1: Manufacturer: syz [ 663.933972][ T5871] usb 9-1: SerialNumber: syz [ 663.944612][ T5871] usb 9-1: config 0 descriptor?? [ 664.132192][ T5923] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 664.262403][ T5871] usb 9-1: USB disconnect, device number 23 [ 664.520177][ T3076] usb 10-1: USB disconnect, device number 58 [ 664.549809][ T5923] usb 7-1: Using ep0 maxpacket: 8 [ 664.575697][ T5923] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 664.602333][ T5923] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 664.611744][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.650771][ T5923] usb 7-1: config 0 descriptor?? [ 664.866792][ T5923] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 665.133143][T17799] syz.9.2114: attempt to access beyond end of device [ 665.133143][T17799] loop9: rw=0, sector=64, nr_sectors = 2 limit=0 [ 665.149670][ T5929] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 665.152445][T17799] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 665.193806][ T5874] gspca_spca1528: reg_w err -71 [ 665.198914][ T5874] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 665.329771][ T5929] usb 9-1: Using ep0 maxpacket: 32 [ 665.343594][ T5929] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 665.372571][ T5874] usb 1-1: USB disconnect, device number 79 [ 665.374711][ T5929] usb 9-1: config 0 has no interface number 0 [ 665.395761][ T5929] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 665.416528][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.440138][ T5929] usb 9-1: Product: syz [ 665.458855][ T5929] usb 9-1: Manufacturer: syz [ 665.474375][ T5929] usb 9-1: SerialNumber: syz [ 665.492228][ T5929] usb 9-1: config 0 descriptor?? [ 665.731301][ T5929] radio-si470x 9-1:0.35: this is not a si470x device. [ 665.781170][ T5929] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 665.982872][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2116'. [ 666.007687][ T5929] radio-raremono 9-1:0.35: raremono_cmd_main failed (-71) [ 666.026141][ T5929] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 666.037444][ T5929] usb 9-1: USB disconnect, device number 24 [ 666.047647][ T5929] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 666.189660][T11661] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 666.362264][T11661] usb 1-1: config 46 has an invalid interface number: 228 but max is 1 [ 666.376104][T11661] usb 1-1: config 46 has an invalid interface number: 114 but max is 1 [ 666.385817][T11661] usb 1-1: config 46 contains an unexpected descriptor of type 0x2, skipping [ 666.394913][T11661] usb 1-1: config 46 has an invalid interface number: 194 but max is 1 [ 666.403644][T11661] usb 1-1: config 46 contains an unexpected descriptor of type 0x2, skipping [ 666.416482][T11661] usb 1-1: config 46 has 3 interfaces, different from the descriptor's value: 2 [ 666.425805][T11661] usb 1-1: config 46 has no interface number 0 [ 666.432094][T11661] usb 1-1: config 46 has no interface number 1 [ 666.438374][T11661] usb 1-1: config 46 has no interface number 2 [ 666.444834][T11661] usb 1-1: config 46 interface 228 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 64 [ 666.456473][T11661] usb 1-1: config 46 interface 228 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 666.470756][T11661] usb 1-1: too many endpoints for config 46 interface 114 altsetting 94: 121, using maximum allowed: 30 [ 666.483465][T11661] usb 1-1: config 46 interface 114 altsetting 94 has a duplicate endpoint with address 0xB, skipping [ 666.494620][T11661] usb 1-1: config 46 interface 114 altsetting 94 has an invalid descriptor for endpoint zero, skipping [ 666.506675][T11661] usb 1-1: config 46 interface 114 altsetting 94 has an invalid descriptor for endpoint zero, skipping [ 666.517913][T11661] usb 1-1: config 46 interface 114 altsetting 94 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 666.531408][T11661] usb 1-1: config 46 interface 114 altsetting 94 has a duplicate endpoint with address 0x8B, skipping [ 666.542523][T11661] usb 1-1: config 46 interface 114 altsetting 94 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 666.553782][T11661] usb 1-1: config 46 interface 114 altsetting 94 has a duplicate endpoint with address 0x5, skipping [ 666.574959][T11661] usb 1-1: config 46 interface 114 altsetting 94 has 10 endpoint descriptors, different from the interface descriptor's value: 121 [ 666.617311][T11661] usb 1-1: config 46 interface 194 altsetting 7 endpoint 0x9 has invalid maxpacket 2031, setting to 64 [ 666.650453][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 666.679841][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 666.692949][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 666.705539][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 666.711032][ T1200] usb 7-1: USB disconnect, device number 49 [ 666.718548][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 666.734328][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 666.777989][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 666.802676][T11661] usb 1-1: config 46 interface 194 altsetting 7 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 667.079307][T17873] 9pnet_virtio: no channels available for device 127.0.0.1 [ 667.257207][T17875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.921834][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x8D, skipping [ 667.959656][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 667.989670][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 668.029968][T11661] usb 1-1: config 46 interface 194 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023 [ 668.035021][ T30] kauditd_printk_skb: 587 callbacks suppressed [ 668.035035][ T30] audit: type=1400 audit(1742687291.240:12754): avc: denied { bind } for pid=17879 comm="syz.9.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 668.054645][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 668.167455][ T30] audit: type=1400 audit(1742687291.250:12755): avc: denied { getattr } for pid=17876 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.195766][T17880] trusted_key: encrypted_key: insufficient parameters specified [ 668.204273][ T30] audit: type=1400 audit(1742687291.250:12756): avc: denied { search } for pid=17876 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.456743][T17884] ptrace attach of "./syz-executor exec"[15797] was attempted by ""[17884] [ 668.475852][T11661] usb 1-1: config 46 interface 194 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 668.729983][ T30] audit: type=1400 audit(1742687291.250:12757): avc: denied { read } for pid=17876 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.753322][ T30] audit: type=1400 audit(1742687291.250:12758): avc: denied { open } for pid=17876 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.798860][T11661] usb 1-1: config 46 interface 228 has no altsetting 0 [ 668.811387][T11661] usb 1-1: config 46 interface 114 has no altsetting 0 [ 668.818492][T11661] usb 1-1: config 46 interface 194 has no altsetting 0 [ 668.864175][T11661] usb 1-1: New USB device found, idVendor=045e, idProduct=07ab, bcdDevice=da.ca [ 668.873673][T11661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.882069][T11661] usb 1-1: Product: syz [ 668.916497][T11661] usb 1-1: Manufacturer: 崲৮蒼聎∎綍ⶇ汬ເᶀ︘督쬼䉞믠篏ʢ⦶셱ꃬᏇ볎꺒넸遍稩鵄臏䭴ؘ罇럞ꅿ✺屋ྙ젆뱀⧈┱⹗쳤鏖 [ 668.934559][ T30] audit: type=1400 audit(1742687291.250:12759): avc: denied { getattr } for pid=17876 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 668.963900][ T30] audit: type=1400 audit(1742687291.250:12760): avc: denied { search } for pid=17881 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.056133][T17889] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 669.063986][T17889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2129'. [ 669.085183][ T30] audit: type=1400 audit(1742687291.280:12761): avc: denied { execmem } for pid=17877 comm="syz.8.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 669.153471][T11661] usb 1-1: SerialNumber: syz [ 669.173749][T11661] r8152-cfgselector 1-1: Unknown version 0x0000 [ 669.181992][T11661] r8152-cfgselector 1-1: can't set config #46, error -71 [ 669.183681][ T30] audit: type=1400 audit(1742687291.400:12762): avc: denied { setopt } for pid=17879 comm="syz.9.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 669.211223][T17893] audit: audit_backlog=65 > audit_backlog_limit=64 [ 669.237016][T11661] r8152-cfgselector 1-1: USB disconnect, device number 80 [ 669.418181][T17906] netlink: 'syz.9.2133': attribute type 1 has an invalid length. [ 669.430556][T17906] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2133'. [ 669.949727][T11661] usb 10-1: new low-speed USB device number 59 using dummy_hcd [ 670.089878][T11661] usb 10-1: device descriptor read/64, error -71 [ 670.403471][T17936] 9pnet_virtio: no channels available for device 127.0.0.1 [ 670.430408][T11661] usb 10-1: new low-speed USB device number 60 using dummy_hcd [ 670.718295][T11661] usb 10-1: device descriptor read/64, error -71 [ 670.931666][T11661] usb usb10-port1: attempt power cycle [ 671.319752][T11661] usb 10-1: new low-speed USB device number 61 using dummy_hcd [ 671.339949][T17961] netlink: 'syz.8.2142': attribute type 1 has an invalid length. [ 671.347900][T17961] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2142'. [ 671.362335][T11661] usb 10-1: device descriptor read/8, error -71 [ 671.639944][T11661] usb 10-1: new low-speed USB device number 62 using dummy_hcd [ 671.646210][T17981] netlink: 'syz.8.2145': attribute type 1 has an invalid length. [ 671.656627][T17981] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2145'. [ 671.670592][T11661] usb 10-1: device descriptor read/8, error -71 [ 671.740632][T17988] 9pnet_fd: Insufficient options for proto=fd [ 671.789902][T11661] usb usb10-port1: unable to enumerate USB device [ 671.824853][T17992] netlink: 'syz.8.2147': attribute type 2 has an invalid length. [ 671.859434][T17992] netlink: 'syz.8.2147': attribute type 2 has an invalid length. [ 671.879223][T17993] netlink: 'syz.8.2147': attribute type 2 has an invalid length. [ 671.889098][T17993] netlink: 'syz.8.2147': attribute type 2 has an invalid length. [ 672.256768][T18002] 9pnet_virtio: no channels available for device 127.0.0.1 [ 672.672435][T18024] netlink: 'syz.8.2153': attribute type 1 has an invalid length. [ 672.685496][T18024] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2153'. [ 673.053393][ T30] kauditd_printk_skb: 876 callbacks suppressed [ 673.053410][ T30] audit: type=1400 audit(1742687296.170:13583): avc: denied { execmem } for pid=18014 comm="syz.7.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 673.239867][T18036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.393265][T18035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.578101][ T30] audit: type=1400 audit(1742687296.430:13584): avc: denied { read } for pid=18014 comm="syz.7.2151" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 673.790311][T18031] trusted_key: encrypted_key: insufficient parameters specified [ 673.815206][ T30] audit: type=1400 audit(1742687296.430:13585): avc: denied { read open } for pid=18014 comm="syz.7.2151" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 673.839764][ T5871] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 673.900499][T18042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.907102][T18042] audit: audit_lost=241 audit_rate_limit=0 audit_backlog_limit=64 [ 673.910109][T18028] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.914955][T18042] audit: backlog limit exceeded [ 673.921875][T18028] audit: audit_lost=242 audit_rate_limit=0 audit_backlog_limit=64 [ 673.936415][T18045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 673.936721][ T5489] audit: audit_backlog=66 > audit_backlog_limit=64 [ 673.948622][T18042] netlink: 'syz.6.2156': attribute type 1 has an invalid length. [ 673.959878][T18045] 9pnet_fd: Insufficient options for proto=fd [ 673.973606][T18042] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2156'. [ 674.011053][ T5871] usb 10-1: config 0 has an invalid interface number: 95 but max is 0 [ 674.052817][ T5871] usb 10-1: config 0 has no interface number 0 [ 674.059051][ T5871] usb 10-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 674.109010][ T5871] usb 10-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 674.129642][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.158592][ T5871] usb 10-1: Product: syz [ 674.158615][ T5871] usb 10-1: Manufacturer: syz [ 674.158631][ T5871] usb 10-1: SerialNumber: syz [ 674.160060][ T5871] usb 10-1: config 0 descriptor?? [ 674.192776][T18028] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 674.399891][T11661] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 674.460764][ T5871] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 674.467857][ T5871] usb 10-1: MIDIStreaming interface descriptor not found [ 674.486473][ T5871] usb 10-1: USB disconnect, device number 63 [ 674.693683][T18073] ptrace attach of "./syz-executor exec"[13597] was attempted by ""[18073] [ 674.791686][T11661] usb 1-1: unable to get BOS descriptor or descriptor too short [ 675.022856][T11661] usb 1-1: config 107 has an invalid interface number: 11 but max is 0 [ 675.031731][T11661] usb 1-1: config 107 has no interface number 0 [ 675.038133][T11661] usb 1-1: config 107 interface 11 has no altsetting 0 [ 675.048201][T11661] usb 1-1: string descriptor 0 read error: -22 [ 675.057616][T11661] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=83.77 [ 675.099742][T11661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.125915][T11661] usb 1-1: Expected 3 endpoints, found: 0 [ 675.506740][T18088] 9pnet_virtio: no channels available for device 127.0.0.1 [ 676.427717][T18093] ptrace attach of "./syz-executor exec"[13597] was attempted by ""[18093] [ 676.679216][ T5901] IPVS: starting estimator thread 0... [ 676.690580][T18055] md2: using deprecated bitmap file support [ 676.710514][T18055] md2: error: bitmap file must be a regular file [ 676.717392][T18097] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2166'. [ 676.747703][ T5901] usb 1-1: USB disconnect, device number 81 [ 676.809696][T18098] IPVS: using max 31 ests per chain, 74400 per kthread [ 676.899362][T18096] netlink: 'syz.8.2165': attribute type 1 has an invalid length. [ 676.948301][T18096] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2165'. [ 677.206409][T18117] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2169'. [ 677.262248][T18120] 9pnet_fd: Insufficient options for proto=fd [ 677.407237][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'. [ 677.411629][T18124] netlink: 'syz.8.2171': attribute type 1 has an invalid length. [ 677.439680][T18124] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2171'. [ 677.501343][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2172'. [ 677.899090][T18147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.231174][T18148] 9pnet_virtio: no channels available for device 127.0.0.1 [ 678.248132][ T30] kauditd_printk_skb: 559 callbacks suppressed [ 678.248168][ T30] audit: type=1400 audit(1742687301.050:14110): avc: denied { read } for pid=18106 comm="syz.6.2167" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 678.926513][ T5871] hid-generic 0000:0003:0000.0021: unknown main item tag 0x0 [ 678.929868][T18133] netlink: 'syz.7.2174': attribute type 10 has an invalid length. [ 678.944283][ T5871] hid-generic 0000:0003:0000.0021: unknown main item tag 0x0 [ 678.959900][ T30] audit: type=1400 audit(1742687301.050:14111): avc: denied { read open } for pid=18106 comm="syz.6.2167" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 678.992341][ T30] audit: type=1400 audit(1742687301.050:14112): avc: denied { read } for pid=18106 comm="syz.6.2167" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 679.017119][ T5871] hid-generic 0000:0003:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 679.071635][T18133] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 679.096694][ T30] audit: type=1400 audit(1742687301.050:14113): avc: denied { open } for pid=18106 comm="syz.6.2167" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 679.132675][ T30] audit: type=1400 audit(1742687301.060:14114): avc: denied { ioctl } for pid=18106 comm="syz.6.2167" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 679.166758][T18156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.169795][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'. [ 679.200063][T18153] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.208321][T18153] audit: audit_lost=255 audit_rate_limit=0 audit_backlog_limit=64 [ 679.216294][ T30] audit: type=1400 audit(1742687301.060:14115): avc: denied { map } for pid=18106 comm="syz.6.2167" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 679.247327][T18159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 679.259778][ T5901] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 679.288089][T18156] netlink: 'syz.6.2178': attribute type 1 has an invalid length. [ 679.309225][T18156] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2178'. [ 679.433212][ T5901] usb 9-1: unable to get BOS descriptor or descriptor too short [ 679.473469][ T5901] usb 9-1: config 7 has an invalid interface number: 67 but max is 0 [ 679.525766][ T5901] usb 9-1: config 7 has no interface number 0 [ 679.579348][ T5901] usb 9-1: string descriptor 0 read error: -22 [ 679.599874][ T5901] usb 9-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 679.705916][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.861773][T18173] dccp_invalid_packet: P.Data Offset(10) too large [ 680.014054][T18175] lo speed is unknown, defaulting to 1000 [ 680.210694][T18153] tap0: tun_chr_ioctl cmd 1074025672 [ 680.228288][T18153] tap0: ignored: set checksum disabled [ 680.303884][T18190] 9pnet_fd: Insufficient options for proto=fd [ 680.313497][T18175] lo speed is unknown, defaulting to 1000 [ 680.333747][ T5901] usb 9-1: USB disconnect, device number 25 [ 680.888597][T18197] netlink: 'syz.7.2186': attribute type 1 has an invalid length. [ 680.974507][T18209] 9pnet_virtio: no channels available for device 127.0.0.1 [ 681.002311][T18197] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2186'. [ 681.712935][T18208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.979525][T18221] netlink: 'syz.6.2191': attribute type 1 has an invalid length. [ 681.991096][T18221] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2191'. [ 682.315333][T18238] 9pnet_fd: Insufficient options for proto=fd [ 682.479690][ T9] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 682.554406][T18243] overlayfs: failed to resolve './file1': -2 [ 682.556990][T18249] gre1: entered allmulticast mode [ 682.662135][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 682.679501][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 682.707730][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 682.726468][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.739632][ T9] usb 7-1: Product: syz [ 682.743935][ T9] usb 7-1: Manufacturer: syz [ 682.748775][ T9] usb 7-1: SerialNumber: syz [ 682.764259][ T9] usb 7-1: config 0 descriptor?? [ 682.912744][ T5870] IPVS: starting estimator thread 0... [ 683.040191][T18257] IPVS: using max 25 ests per chain, 60000 per kthread [ 683.256037][ T30] kauditd_printk_skb: 803 callbacks suppressed [ 683.256054][ T30] audit: type=1400 audit(1742687306.460:14830): avc: denied { setopt } for pid=18260 comm="syz.7.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 683.343158][T18267] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 683.343274][ T30] audit: type=1400 audit(1742687306.540:14831): avc: denied { search } for pid=18265 comm="sed" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.375406][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.386646][ T30] audit: type=1400 audit(1742687306.540:14832): avc: denied { read } for pid=18265 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 683.408824][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.417738][ T30] audit: type=1400 audit(1742687306.540:14833): avc: denied { open } for pid=18265 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 683.442885][ C0] vkms_vblank_simulate: vblank timer overrun [ 683.474601][T18272] 9pnet_virtio: no channels available for device 127.0.0.1 [ 683.955327][ T30] audit: type=1400 audit(1742687306.540:14834): avc: denied { getattr } for pid=18265 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 684.137584][ T5870] usb 7-1: USB disconnect, device number 50 [ 684.369302][T18280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.380937][T18283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.387753][T18251] audit: audit_backlog=65 > audit_backlog_limit=64 [ 684.412622][T18280] audit: audit_lost=286 audit_rate_limit=0 audit_backlog_limit=64 [ 684.421429][T18251] audit: audit_lost=287 audit_rate_limit=0 audit_backlog_limit=64 [ 684.561299][T18280] netlink: 'syz.0.2203': attribute type 1 has an invalid length. [ 684.593342][T18280] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2203'. [ 684.665391][T18283] netlink: 'syz.6.2204': attribute type 1 has an invalid length. [ 684.707029][T18283] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2204'. [ 685.079223][T18298] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.229688][ T5870] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 685.510426][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 685.521448][ T5870] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 685.543632][ T5870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.570966][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.691958][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.764865][ T1200] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 685.915002][ T5870] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.945596][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.969549][ T5870] usb 1-1: Product: syz [ 685.979742][ T5870] usb 1-1: Manufacturer: syz [ 685.984372][ T5870] usb 1-1: SerialNumber: syz [ 686.075792][T18316] 9pnet_fd: Insufficient options for proto=fd [ 686.082109][ T1200] usb 10-1: device descriptor read/64, error -71 [ 686.269669][ T3076] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 686.319792][ T1200] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 686.408640][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.415700][ T5870] usb 1-1: 0:2 : does not exist [ 686.420799][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.427737][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.434637][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.443290][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.450199][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.457163][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.464073][ T1200] usb 10-1: device descriptor read/64, error -71 [ 686.470607][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.480606][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.487470][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.494450][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.501389][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.508349][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.515310][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.522290][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.529154][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.536129][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.543034][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.549985][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.557694][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.558320][ T3076] usb 7-1: Using ep0 maxpacket: 32 [ 686.571403][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.578294][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.580835][ T3076] usb 7-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 686.585450][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.602721][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.609658][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.616574][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.623579][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.625806][ T3076] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.686901][T18334] 9pnet_virtio: no channels available for device 127.0.0.1 [ 686.788153][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.797209][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.804787][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.812918][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.830475][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.838302][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.847374][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.855158][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.862354][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.873171][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.880876][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.887962][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.898813][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.906443][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.913669][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.921234][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.928320][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.949324][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.957811][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.965021][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.972600][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.979647][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.986631][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.993570][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 686.999981][ T5870] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 687.002930][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.014891][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.021782][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.028710][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.035593][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.044680][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.051726][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.058659][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.065572][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.071411][ T1200] usb usb10-port1: attempt power cycle [ 687.072563][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.084848][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.091757][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.098673][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.105626][ T5823] Bluetooth: hci2: unexpected event for opcode 0x200f [ 687.114617][ T3076] usb 7-1: config 0 descriptor?? [ 687.132170][ T3076] usb 7-1: selecting invalid altsetting 3 [ 687.138603][ T3076] comedi comedi0: could not set alternate setting 3 in high speed [ 687.147447][ T3076] usbduxsigma 7-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 687.162463][ T3076] usbduxsigma 7-1:0.0: probe with driver usbduxsigma failed with error -22 [ 687.174028][T18331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.185051][T18331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.198671][T18331] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2206'. [ 687.304332][ T3076] usb 1-1: USB disconnect, device number 82 [ 687.421874][ T1200] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 687.434340][T18343] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 687.446635][T18343] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2216'. [ 687.460967][ T1200] usb 10-1: device descriptor read/8, error -71 [ 687.579793][ T5870] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 687.881312][ T1200] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 687.921160][ T1200] usb 10-1: device descriptor read/8, error -71 [ 687.921517][ T5870] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.944178][ T5870] usb 9-1: config 0 has no interfaces? [ 687.957761][ T5870] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 687.974925][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.987614][ T5870] usb 9-1: Product: syz [ 687.994127][ T5870] usb 9-1: Manufacturer: syz [ 687.998819][ T5870] usb 9-1: SerialNumber: syz [ 688.016999][ T5870] usb 9-1: config 0 descriptor?? [ 688.049933][ T1200] usb usb10-port1: unable to enumerate USB device [ 688.236576][ T5870] usb 9-1: USB disconnect, device number 26 [ 688.288772][ T30] kauditd_printk_skb: 615 callbacks suppressed [ 688.288788][ T30] audit: type=1400 audit(1742687311.490:15302): avc: denied { sys_chroot } for pid=18363 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 688.344544][ T30] audit: type=1400 audit(1742687311.490:15303): avc: denied { setgid } for pid=18363 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 688.388918][ T30] audit: type=1400 audit(1742687311.490:15304): avc: denied { setuid } for pid=18363 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 688.409889][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.448543][ T30] audit: type=1400 audit(1742687311.490:15305): avc: denied { setrlimit } for pid=18363 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 688.506764][ T30] audit: type=1400 audit(1742687311.580:15306): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.507068][ T5923] usb 7-1: USB disconnect, device number 51 [ 688.608773][ T30] audit: type=1400 audit(1742687311.580:15307): avc: denied { read } for pid=5489 comm="dhcpcd" name="n223" dev="tmpfs" ino=8809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 688.678649][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2220'. [ 688.687859][ T30] audit: type=1400 audit(1742687311.580:15308): avc: denied { open } for pid=5489 comm="dhcpcd" path="/run/udev/data/n223" dev="tmpfs" ino=8809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 688.710962][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.724725][T18368] team_slave_0: entered promiscuous mode [ 688.730483][T18368] team_slave_1: entered promiscuous mode [ 688.749732][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2220'. [ 688.769364][T18368] macvtap2: entered promiscuous mode [ 688.813093][T18368] team0: entered promiscuous mode [ 688.832832][T18368] macvtap2: entered allmulticast mode [ 688.833618][ T30] audit: type=1400 audit(1742687311.580:15309): avc: denied { getattr } for pid=5489 comm="dhcpcd" path="/run/udev/data/n223" dev="tmpfs" ino=8809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 688.838380][T18368] team0: entered allmulticast mode [ 688.861756][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.899657][T18368] team_slave_0: entered allmulticast mode [ 688.941972][T18368] team_slave_1: entered allmulticast mode [ 688.952507][T18379] usb usb8: usbfs: process 18379 (syz.8.2223) did not claim interface 0 before use [ 688.961916][ T30] audit: type=1400 audit(1742687311.650:15310): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.962807][T18368] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 689.090992][ T5923] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 689.125731][ T30] audit: type=1400 audit(1742687311.650:15311): avc: denied { read } for pid=5489 comm="dhcpcd" name="n224" dev="tmpfs" ino=8810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 689.131695][T18371] team0: left allmulticast mode [ 689.175331][T18386] 9pnet_fd: Insufficient options for proto=fd [ 689.264513][ T5923] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.274816][T18371] team_slave_0: left allmulticast mode [ 689.283518][T18371] team_slave_1: left allmulticast mode [ 689.299314][T18371] team0: left promiscuous mode [ 689.310549][ T5923] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=a2.2a [ 689.329310][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.344355][T18371] team_slave_0: left promiscuous mode [ 689.350308][T18371] team_slave_1: left promiscuous mode [ 689.355976][ T5923] usb 7-1: Product: syz [ 689.365174][ T5923] usb 7-1: Manufacturer: syz [ 689.377238][ T5923] usb 7-1: SerialNumber: syz [ 689.422414][ T5923] usb 7-1: config 0 descriptor?? [ 689.450618][ T5923] usbserial_generic 7-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 689.485959][ T5923] usbserial_generic 7-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 689.623501][ T5923] usbserial_generic 7-1:0.0: device has no bulk endpoints [ 689.679750][T18394] batadv_slave_1: entered promiscuous mode [ 689.696150][T18395] 9pnet_virtio: no channels available for device 127.0.0.1 [ 690.301024][T18393] batadv_slave_1: left promiscuous mode [ 690.666623][T18403] netlink: 'syz.9.2228': attribute type 1 has an invalid length. [ 690.698805][T18403] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2228'. [ 690.842901][T18408] 9pnet_fd: Insufficient options for proto=fd [ 691.051041][T18411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.080932][T18411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.404100][T18413] netlink: 'syz.9.2230': attribute type 25 has an invalid length. [ 692.750469][ T5871] usb 7-1: USB disconnect, device number 52 [ 692.864964][T18427] input: syz1 as /devices/virtual/input/input31 [ 693.295651][T18429] overlayfs: conflicting options: userxattr,verity=on [ 693.321873][ T30] kauditd_printk_skb: 277 callbacks suppressed [ 693.321889][ T30] audit: type=1400 audit(1742687316.530:15589): avc: denied { map } for pid=18423 comm="syz.9.2234" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 693.430748][ T30] audit: type=1400 audit(1742687316.530:15590): avc: denied { read write } for pid=18423 comm="syz.9.2234" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=65422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 693.558839][ T30] audit: type=1400 audit(1742687316.540:15591): avc: denied { execmem } for pid=18430 comm="syz.8.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 693.576156][T18437] 9pnet_fd: Insufficient options for proto=fd [ 693.775898][ T30] audit: type=1400 audit(1742687316.590:15592): avc: denied { read } for pid=18430 comm="syz.8.2235" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 693.808164][ T30] audit: type=1400 audit(1742687316.590:15593): avc: denied { read open } for pid=18430 comm="syz.8.2235" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 693.904767][T18448] 9pnet_virtio: no channels available for device 127.0.0.1 [ 694.002980][T18449] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.009699][T18449] audit: audit_lost=337 audit_rate_limit=0 audit_backlog_limit=64 [ 694.017622][T18449] audit: backlog limit exceeded [ 694.024086][T18449] audit: audit_backlog=65 > audit_backlog_limit=64 [ 694.030730][T18449] audit: audit_lost=338 audit_rate_limit=0 audit_backlog_limit=64 [ 694.990137][ T5923] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 695.005826][T18462] 9pnet_fd: Insufficient options for proto=fd [ 695.042393][T18458] netlink: 'syz.0.2240': attribute type 4 has an invalid length. [ 695.068368][T18460] netlink: 'syz.6.2241': attribute type 1 has an invalid length. [ 695.098466][T18460] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2241'. [ 695.105578][T18458] netlink: 'syz.0.2240': attribute type 4 has an invalid length. [ 695.182903][ T5923] usb 10-1: Using ep0 maxpacket: 16 [ 695.191001][ T5923] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.222747][ T5923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.250482][ T5923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 695.268874][ T5923] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 695.286821][ T5923] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.308498][T18474] mkiss: ax0: crc mode is auto. [ 695.316662][ T5923] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 695.326369][ T5923] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 695.344832][ T5923] usb 10-1: Manufacturer: syz [ 695.357906][ T5923] usb 10-1: config 0 descriptor?? [ 695.434144][T18485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.479660][ T5823] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 695.499130][ T5823] Bluetooth: hci2: unexpected event for opcode 0x2019 [ 695.641719][ T5923] rc_core: IR keymap rc-hauppauge not found [ 695.650389][ T5923] Registered IR keymap rc-empty [ 695.655410][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 695.679750][ T5872] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 695.711460][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 695.751017][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 695.772730][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input32 [ 695.793985][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 695.820206][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 695.849787][ T5872] usb 9-1: Using ep0 maxpacket: 8 [ 695.856945][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 695.867955][ T5872] usb 9-1: config 2 has an invalid interface number: 241 but max is 0 [ 695.879179][ T5872] usb 9-1: config 2 has no interface number 0 [ 695.887772][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 695.895226][ T5872] usb 9-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 695.905528][ T5872] usb 9-1: config 2 interface 241 has no altsetting 0 [ 695.914957][ T5872] usb 9-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 695.924273][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 695.929804][ T1200] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 695.931583][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.950533][ T5872] usb 9-1: Product: syz [ 695.954761][ T5872] usb 9-1: Manufacturer: syz [ 695.959396][ T5872] usb 9-1: SerialNumber: syz [ 695.964201][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 695.977705][ T5872] ti_usb_3410_5052 9-1:2.241: TI USB 3410 1 port adapter converter detected [ 695.986647][ T5872] ti_usb_3410_5052 9-1:2.241: missing endpoints [ 695.993094][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.029780][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.049815][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.083903][ T5923] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 696.115392][ T1200] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 696.133837][ T1200] usb 7-1: config 0 has no interface number 0 [ 696.135456][ T5923] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 696.143319][ T1200] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 696.163372][ T1200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.174367][ T1200] usb 7-1: config 0 descriptor?? [ 696.180346][ T5923] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 696.185895][ T1200] usb 7-1: selecting invalid altsetting 1 [ 696.190065][ T5872] usb 9-1: USB disconnect, device number 27 [ 696.208123][ T1200] dvb_ttusb_budget: ttusb_init_controller: error [ 696.223350][ T1200] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 696.320311][ T1200] DVB: Unable to find symbol cx22700_attach() [ 696.394453][ T1200] DVB: Unable to find symbol tda10046_attach() [ 696.413144][ T1200] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 696.542518][ T1200] usb 7-1: USB disconnect, device number 53 [ 696.867272][T18550] 9pnet_virtio: no channels available for device 127.0.0.1 [ 697.329955][T18454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.577314][T18558] 9pnet_fd: Insufficient options for proto=fd [ 698.403863][ T30] kauditd_printk_skb: 622 callbacks suppressed [ 698.403893][ T30] audit: type=1400 audit(1742687321.470:16215): avc: denied { execmem } for pid=18559 comm="syz.0.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 698.539793][T18589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.969739][ T30] audit: type=1400 audit(1742687321.500:16216): avc: denied { search } for pid=18585 comm="sed" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.012472][ T30] audit: type=1400 audit(1742687321.500:16217): avc: denied { read } for pid=18585 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 699.079765][ T30] audit: type=1400 audit(1742687321.500:16218): avc: denied { read open } for pid=18585 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 699.081912][ T1200] usb 10-1: USB disconnect, device number 68 [ 699.182084][ T30] audit: type=1400 audit(1742687321.500:16219): avc: denied { getattr } for pid=18585 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1746 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 699.270036][ T5177] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.278680][T11505] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.284891][ T30] audit: type=1400 audit(1742687321.710:16220): avc: denied { read } for pid=18559 comm="syz.0.2257" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 699.298452][T18601] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.318870][ T5177] audit: audit_lost=339 audit_rate_limit=0 audit_backlog_limit=64 [ 699.589964][ T5872] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 699.597682][ T5831] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 699.606532][ T5831] Bluetooth: hci2: Injecting HCI hardware error event [ 699.617653][ T5831] Bluetooth: hci2: hardware error 0x00 [ 699.915462][ T5872] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 699.949121][ T5872] usb 1-1: config 0 has no interface number 0 [ 699.970822][ T5872] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 699.989062][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.006167][T18619] netlink: 'syz.7.2266': attribute type 1 has an invalid length. [ 700.020241][ T5872] usb 1-1: config 0 descriptor?? [ 700.034616][ T5872] usb 1-1: selecting invalid altsetting 1 [ 700.043502][ T5872] dvb_ttusb_budget: ttusb_init_controller: error [ 700.049339][T18619] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2266'. [ 700.050464][ T5872] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 700.125051][ T5872] DVB: Unable to find symbol cx22700_attach() [ 700.131234][T18616] Bluetooth: hci5: command 0x0405 tx timeout [ 700.238302][T18606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2264'. [ 700.265857][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2264'. [ 700.270306][ T5872] DVB: Unable to find symbol tda10046_attach() [ 700.296693][ T5872] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 701.424464][T18641] 9pnet_virtio: no channels available for device 127.0.0.1 [ 701.749825][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 701.865577][T18648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.648850][ T1200] usb 1-1: USB disconnect, device number 83 [ 702.709164][T18653] input: syz0 as /devices/virtual/input/input33 [ 702.778205][T18653] block device autoloading is deprecated and will be removed. [ 702.819543][T18653] syz.8.2272: attempt to access beyond end of device [ 702.819543][T18653] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 703.237486][T18683] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2280'. [ 703.729866][ T30] kauditd_printk_skb: 446 callbacks suppressed [ 703.729902][ T30] audit: type=1400 audit(1742687326.470:16644): avc: denied { execmem } for pid=18677 comm="syz.9.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 703.960063][ T5872] usb 10-1: new full-speed USB device number 69 using dummy_hcd [ 704.084082][ T30] audit: type=1400 audit(1742687326.740:16645): avc: denied { mounton } for pid=18677 comm="syz.9.2278" path="/242/file0" dev="tmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 704.108969][ T30] audit: type=1400 audit(1742687326.750:16646): avc: denied { mount } for pid=18677 comm="syz.9.2278" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 704.134654][ T30] audit: type=1400 audit(1742687326.770:16647): avc: denied { create } for pid=18682 comm="syz.8.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 704.156474][ T30] audit: type=1400 audit(1742687326.780:16648): avc: denied { connect } for pid=18682 comm="syz.8.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 704.177894][ T30] audit: type=1400 audit(1742687326.780:16649): avc: denied { write } for pid=18682 comm="syz.8.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 704.198801][ T30] audit: type=1400 audit(1742687326.850:16650): avc: denied { mounton } for pid=18682 comm="syz.8.2281" path="/100/file0" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 704.222012][ T30] audit: type=1400 audit(1742687326.850:16651): avc: denied { read write } for pid=18682 comm="syz.8.2281" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 704.249354][ T5872] usb 10-1: not running at top speed; connect to a high speed hub [ 704.275034][ T5872] usb 10-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 704.324154][ T30] audit: type=1400 audit(1742687326.860:16652): avc: denied { open } for pid=18682 comm="syz.8.2281" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 704.360982][ T5872] usb 10-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 704.453376][ T5872] usb 10-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 704.543475][ T30] audit: type=1400 audit(1742687326.860:16653): avc: denied { ioctl } for pid=18682 comm="syz.8.2281" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 704.598969][ T5872] usb 10-1: config 1 interface 0 has no altsetting 0 [ 704.646462][ T5872] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.663113][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.672464][ T5872] usb 10-1: Product: syz [ 704.676803][ T5872] usb 10-1: Manufacturer: syz [ 704.719686][ T5872] usb 10-1: SerialNumber: syz [ 704.743848][T18689] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 704.751192][T18689] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 705.730016][T18736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.089685][ T1200] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 706.180417][ T5872] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 706.227321][ T5872] usb 10-1: USB disconnect, device number 69 [ 706.592404][ T1200] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.621639][ T1200] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.656396][ T1200] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 706.676063][ T1200] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 706.687573][ T1200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.705031][ T1200] usb 1-1: Product: syz [ 706.714938][ T1200] usb 1-1: Manufacturer: syz [ 706.723021][ T1200] usb 1-1: SerialNumber: syz [ 706.797163][T18756] 9pnet_fd: Insufficient options for proto=fd [ 706.879778][ T9] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 706.941806][T18727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.968467][T18727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.013036][T18727] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 707.022021][ T9] usb 9-1: device descriptor read/64, error -71 [ 707.259824][ T9] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 707.319960][ T31] INFO: task syz.5.1731:15363 blocked for more than 143 seconds. [ 707.327959][ T5872] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 707.335982][ T31] Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 707.356351][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.368125][ T31] task:syz.5.1731 state:D stack:26416 pid:15363 tgid:15328 ppid:13783 task_flags:0x400140 flags:0x00004004 [ 707.384716][ T31] Call Trace: [ 707.388251][ T31] [ 707.391450][ T31] __schedule+0xf43/0x5890 [ 707.396051][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 707.404637][ T31] ? __lock_acquire+0x15a9/0x3c40 [ 707.409672][ T9] usb 9-1: device descriptor read/64, error -71 [ 707.416827][ T31] ? __pfx___schedule+0x10/0x10 [ 707.427062][ T31] ? schedule+0x298/0x350 [ 707.431443][ T31] ? __pfx_lock_release+0x10/0x10 [ 707.436661][ T31] ? lock_acquire+0x2f/0xb0 [ 707.441305][ T31] ? schedule+0x1fd/0x350 [ 707.445657][ T31] schedule+0xe7/0x350 [ 707.450052][ T31] schedule_timeout+0x244/0x280 [ 707.455009][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 707.460687][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.465963][ T31] __wait_for_common+0x3e1/0x600 [ 707.471357][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 707.476805][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 707.482525][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.487810][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 707.494119][ T31] __flush_workqueue+0x3dc/0x1260 [ 707.502520][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 707.509543][ T5872] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 707.518763][ T5872] usb 7-1: config 0 has no interface number 0 [ 707.519918][ T9] usb usb9-port1: attempt power cycle [ 707.527205][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 707.539876][ T5872] usb 7-1: config 0 interface 4 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.554304][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 707.559996][ T31] ? blk_mq_unquiesce_queue+0xbf/0x100 [ 707.565669][ T5872] usb 7-1: config 0 interface 4 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.579433][ T31] nbd_ioctl+0x308/0xd60 [ 707.583775][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 707.588733][ T5872] usb 7-1: config 0 interface 4 has no altsetting 0 [ 707.598572][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 707.605909][ T5872] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 707.615122][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 707.621481][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.629633][ T31] ? __pfx_lock_release+0x10/0x10 [ 707.634885][ T31] ? __pfx_nbd_ioctl+0x10/0x10 [ 707.648439][ T5872] usb 7-1: config 0 descriptor?? [ 707.649069][T18727] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 707.653438][ T31] blkdev_ioctl+0x276/0x6d0 [ 707.671546][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 707.678950][ T31] ? selinux_file_ioctl+0x180/0x270 [ 707.684412][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 707.706535][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 707.715105][ T31] __x64_sys_ioctl+0x190/0x200 [ 707.720093][ T31] do_syscall_64+0xcd/0x250 [ 707.729690][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.737206][ T31] RIP: 0033:0x7fd23b78d169 [ 707.744673][ T31] RSP: 002b:00007fd23c5d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 707.754824][ T31] RAX: ffffffffffffffda RBX: 00007fd23b9a6160 RCX: 00007fd23b78d169 [ 707.763158][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 707.771242][ T31] RBP: 00007fd23b80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 707.854238][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.862319][ T31] R13: 0000000000000000 R14: 00007fd23b9a6160 R15: 00007fffba3fd518 [ 707.870380][ T31] [ 707.875558][ T31] [ 707.875558][ T31] Showing all locks held in the system: [ 707.880312][ T9] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 707.894311][ T1200] cdc_ncm 1-1:1.0: bind() failure [ 707.904201][ T31] 5 locks held by kworker/0:0/9: [ 707.909216][ T31] 1 lock held by khungtaskd/31: [ 707.914175][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 707.924119][ T31] 5 locks held by kworker/0:2/1200: [ 707.929381][ T31] 3 locks held by kworker/u8:8/3547: [ 707.934727][ T31] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 707.939849][ T1200] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 707.944938][ T31] #1: ffff8880b8628a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 707.966855][ T31] #2: ffff888031af56d8 (key#17){+...}-{3:3}, at: batadv_nc_purge_paths+0xca/0x390 [ 707.976709][ T31] 2 locks held by getty/5580: [ 707.979106][ T1200] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 707.985279][ T31] #0: [ 707.995966][ T9] usb 9-1: device descriptor read/8, error -71 [ 707.999832][ T31] ffff8880320210a0 [ 708.009047][ T1200] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 708.021124][ T31] (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 708.029069][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 708.046375][ T31] 2 locks held by kworker/u9:7/5836: [ 708.046989][ T1200] usb 1-1: USB disconnect, device number 84 [ 708.051820][ T31] #0: ffff888025cbe148 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 708.069484][ T31] #1: ffffc9000408fd18 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 708.081000][ T31] 5 locks held by kworker/1:4/5872: [ 708.086297][ T31] #0: ffff888144ac8948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 708.101219][ T31] #1: ffffc900040ffd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 708.112710][ T31] #2: ffff888029267190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 708.124830][ T31] #3: ffff88806583f190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 708.134592][ T31] #4: ffff88807ed22160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 708.144250][ T31] 3 locks held by syz.6.2289/18791: [ 708.149874][ T31] #0: ffff888031db0e08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 708.160931][ T31] #1: ffff88806bff0258 (sk_lock-AF_CAN){+.+.}-{0:0}, at: isotp_release+0x449/0xa50 [ 708.170514][ T31] #2: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 708.181086][ T31] 2 locks held by dhcpcd/18794: [ 708.186267][ T31] #0: ffff88805215e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 708.196447][ T31] #1: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 708.206814][ T31] 1 lock held by dhcpcd/18795: [ 708.211723][ T31] #0: ffff888052158258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 708.221840][ T31] 1 lock held by sed/18799: [ 708.226430][ T31] #0: ffff8880b863ec18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 708.236843][ T31] [ 708.239440][ T31] ============================================= [ 708.239440][ T31] [ 708.240365][ T9] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 708.254108][ T31] NMI backtrace for cpu 1 [ 708.254123][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 708.254140][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 708.254149][ T31] Call Trace: [ 708.254154][ T31] [ 708.254160][ T31] dump_stack_lvl+0x116/0x1f0 [ 708.254186][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 708.254203][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 708.254228][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 708.254246][ T31] watchdog+0xf62/0x12b0 [ 708.254272][ T31] ? __pfx_watchdog+0x10/0x10 [ 708.254292][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 708.254314][ T31] ? __kthread_parkme+0x148/0x220 [ 708.254337][ T31] ? __pfx_watchdog+0x10/0x10 [ 708.254360][ T31] kthread+0x3af/0x750 [ 708.254378][ T31] ? __pfx_kthread+0x10/0x10 [ 708.254398][ T31] ? __pfx_kthread+0x10/0x10 [ 708.254417][ T31] ret_from_fork+0x45/0x80 [ 708.254436][ T31] ? __pfx_kthread+0x10/0x10 [ 708.254453][ T31] ret_from_fork_asm+0x1a/0x30 [ 708.254479][ T31] [ 708.254508][ T31] Sending NMI from CPU 1 to CPUs 0: [ 708.329245][ T9] usb 9-1: device descriptor read/8, error -71 [ 708.333349][ C0] NMI backtrace for cpu 0 [ 708.333363][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 708.333381][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 708.333390][ C0] Workqueue: usb_hub_wq hub_event [ 708.333411][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 708.333434][ C0] Code: 82 08 16 00 00 83 f8 02 75 20 48 8b 8a 10 16 00 00 8b 92 0c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 708.333447][ C0] RSP: 0018:ffffc90000007da8 EFLAGS: 00000246 [ 708.333458][ C0] RAX: 0000000000000000 RBX: 000000002377c770 RCX: ffffffff816ad368 [ 708.333468][ C0] RDX: ffff88801c2f4880 RSI: ffffffff816ad377 RDI: 0000000000000001 [ 708.333478][ C0] RBP: 000000000000002e R08: 0000000000000001 R09: 000000000000003f [ 708.333487][ C0] R10: 000000000000002e R11: 0000000000000005 R12: 0000000000000000 [ 708.333496][ C0] R13: ffff88805b8c7300 R14: 0000000000000000 R15: 0000000000000003 [ 708.333505][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 708.333520][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 708.333529][ C0] CR2: 0000557ac3d91ca8 CR3: 000000004faac000 CR4: 00000000003526f0 [ 708.333538][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 708.333547][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 708.333556][ C0] Call Trace: [ 708.333561][ C0] [ 708.333567][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 708.333589][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 708.333608][ C0] ? nmi_handle+0x1ac/0x5d0 [ 708.333629][ C0] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 708.333648][ C0] ? default_do_nmi+0x6a/0x160 [ 708.333662][ C0] ? exc_nmi+0x170/0x1e0 [ 708.333675][ C0] ? end_repeat_nmi+0xf/0x53 [ 708.333698][ C0] ? __phys_addr+0x98/0x150 [ 708.333711][ C0] ? __phys_addr+0xa7/0x150 [ 708.333724][ C0] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 708.333744][ C0] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 708.333764][ C0] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 708.333785][ C0] [ 708.333790][ C0] [ 708.333794][ C0] __phys_addr+0xa7/0x150 [ 708.333809][ C0] slab_free_after_rcu_debug+0x28/0x340 [ 708.333825][ C0] ? rcu_core+0x79b/0x14d0 [ 708.333838][ C0] rcu_core+0x79d/0x14d0 [ 708.333852][ C0] ? __pfx_rcu_core+0x10/0x10 [ 708.333867][ C0] ? run_timer_base+0x121/0x190 [ 708.333885][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 708.333904][ C0] handle_softirqs+0x213/0x8f0 [ 708.333924][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 708.333945][ C0] __irq_exit_rcu+0x109/0x170 [ 708.333962][ C0] irq_exit_rcu+0x9/0x30 [ 708.333980][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 708.333997][ C0] [ 708.334001][ C0] [ 708.334006][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.334025][ C0] RIP: 0010:vprintk_emit+0x621/0x6f0 [ 708.334039][ C0] Code: 85 ed 0f 85 81 00 00 00 e8 ec 34 20 00 9c 41 5c 41 81 e4 00 02 00 00 31 ff 4c 89 e6 e8 08 30 20 00 4d 85 e4 0f 85 8d 00 00 00 ca 34 20 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 708.334051][ C0] RSP: 0018:ffffc900000e7648 EFLAGS: 00000283 [ 708.334062][ C0] RAX: 00000000000ea56d RBX: 000000000000002c RCX: ffffc9001ddd6000 [ 708.334070][ C0] RDX: 0000000000100000 RSI: ffffffff8199bc28 RDI: 0000000000000007 [ 708.334079][ C0] RBP: 1ffff9200001cecb R08: 0000000000000007 R09: 0000000000000000 [ 708.334088][ C0] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000000 [ 708.334096][ C0] R13: 0000000000000200 R14: ffff888020a88000 R15: ffffc900000e7710 [ 708.334108][ C0] ? vprintk_emit+0x6a8/0x6f0 [ 708.334122][ C0] ? vprintk_emit+0x6a8/0x6f0 [ 708.334136][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 708.334150][ C0] ? __pfx_mark_lock+0x10/0x10 [ 708.334170][ C0] dev_printk_emit+0xfb/0x140 [ 708.334185][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 708.334202][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 708.334217][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 708.334238][ C0] __dev_printk+0xf5/0x270 [ 708.334252][ C0] _dev_err+0xe5/0x120 [ 708.334266][ C0] ? __pfx__dev_err+0x10/0x10 [ 708.334281][ C0] ? usb_hcd_flush_endpoint+0x15d/0x3e0 [ 708.334302][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.334324][ C0] hub_port_init+0xd06/0x3a40 [ 708.334341][ C0] hub_event+0x2b4f/0x4e10 [ 708.334366][ C0] ? __pfx_hub_event+0x10/0x10 [ 708.334383][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 708.334403][ C0] ? rcu_is_watching+0x12/0xc0 [ 708.334417][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 708.334433][ C0] ? process_one_work+0x921/0x1ba0 [ 708.334451][ C0] ? lock_acquire+0x2f/0xb0 [ 708.334468][ C0] ? process_one_work+0x921/0x1ba0 [ 708.334486][ C0] process_one_work+0x9c5/0x1ba0 [ 708.334507][ C0] ? __pfx_delayed_vfree_work+0x10/0x10 [ 708.334527][ C0] ? __pfx_process_one_work+0x10/0x10 [ 708.334547][ C0] ? assign_work+0x1a0/0x250 [ 708.334564][ C0] worker_thread+0x6c8/0xf00 [ 708.334589][ C0] ? __pfx_worker_thread+0x10/0x10 [ 708.334606][ C0] kthread+0x3af/0x750 [ 708.334623][ C0] ? __pfx_kthread+0x10/0x10 [ 708.334638][ C0] ? lock_acquire+0x2f/0xb0 [ 708.334656][ C0] ? __pfx_kthread+0x10/0x10 [ 708.334672][ C0] ret_from_fork+0x45/0x80 [ 708.334690][ C0] ? __pfx_kthread+0x10/0x10 [ 708.334706][ C0] ret_from_fork_asm+0x1a/0x30 [ 708.334726][ C0] [ 708.338804][ T5872] usbhid 7-1:0.4: can't add hid device: -71 [ 708.354718][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 708.354733][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00196-g88d324e69ea9 #0 [ 708.354751][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 708.354761][ T31] Call Trace: [ 708.354767][ T31] [ 708.354773][ T31] dump_stack_lvl+0x3d/0x1f0 [ 708.354800][ T31] panic+0x71d/0x800 [ 708.354818][ T31] ? __pfx_panic+0x10/0x10 [ 708.354835][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 708.354859][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 708.354879][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 708.354900][ T31] ? watchdog+0xdcc/0x12b0 [ 708.354926][ T31] ? watchdog+0xdbf/0x12b0 [ 708.354950][ T31] watchdog+0xddd/0x12b0 [ 708.354976][ T31] ? __pfx_watchdog+0x10/0x10 [ 708.354997][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 708.355018][ T31] ? __kthread_parkme+0x148/0x220 [ 708.355036][ T31] ? __pfx_watchdog+0x10/0x10 [ 708.355058][ T31] kthread+0x3af/0x750 [ 708.355077][ T31] ? __pfx_kthread+0x10/0x10 [ 708.355098][ T31] ? __pfx_kthread+0x10/0x10 [ 708.355117][ T31] ret_from_fork+0x45/0x80 [ 708.355137][ T31] ? __pfx_kthread+0x10/0x10 [ 708.355156][ T31] ret_from_fork_asm+0x1a/0x30 [ 708.355181][ T31] [ 708.357719][ T31] Kernel Offset: disabled