last executing test programs: 16.810800279s ago: executing program 0 (id=301): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffff8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000380)="58000000140019234017908a840da2560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffee09000000fff5f20000000800030006010000418e01400004fce3", 0x58}], 0x1) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x820, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x14}], {0x14}}, 0xa4}}, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292000301"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b2c, &(0x7f0000000040)) 11.526543372s ago: executing program 0 (id=314): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x33, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_dev$usbmon(&(0x7f0000000d80), 0xfffffffffffffffc, 0x8000) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = add_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000011c0)="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", 0xe6c, 0xfffffffffffffff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', ':%'}, 0x1a, r2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x540f, 0x1000000000000) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x281000, &(0x7f0000000040)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x9, 0x8}) syz_io_uring_setup(0x49a, 0x0, &(0x7f00000010c0), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200), 0xa022, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000001140)={{0x6, @rose, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 8.291442392s ago: executing program 1 (id=328): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@newtfilter={0x1524, 0x28, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xf, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14f4, 0x2, [@TCA_CGROUP_ACT={0x13a4, 0x1, [@m_ctinfo={0xcc, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffff46}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0xe7c0, 0x0, 0x0, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3e}, @TCA_CTINFO_ACT={0x18, 0x3, {0x81, 0x9, 0x0, 0x0, 0x7}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xfffeffff, 0x3, 0xffffffff, 0xffffffff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x40}]}, {0x3e, 0x6, "54e4b923b9fad06e09878c56750d69177a2c1419a90f7c365bd962e8b70dc6ea45cff4f9b7d5295cd192425a47865cb50015304725f66b86aad4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x130, 0x14, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x1}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x2, 0xffffffffffffffff, 0x0, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x6, 0x6, 0x1, 0x1}, 0xb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x8, 0x4, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x3, 0x8, 0x5}, 0x6}}]}, {0x74, 0x6, "a694430e357d62f79afb33c55fbfd41fb2ea40345feaa5c655d47a19a568f3e74ec854956ee4be67a9a7df91195c5078a15af1ea48a487540345c4b4e8a15ca6bf37e645d2dd179f3ea6f29e54e7780deb488cad47b87a7d395cdae8dc4ee4cda98a07e6828cb907217b5750feee4f93"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xf94, 0x20, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x4, 0x5, 0x6, 0x3629, 0x3ff}, 0x75, 0x10, [{0xfffffff9, 0x2, 0x1, 0x2e, 0x1cac, 0x1}, {0x4, 0xa0a7, 0x964, 0x7fff, 0x8d3, 0x3}, {0x5, 0x8113, 0xa, 0x93d, 0x5, 0xff27}, {0x1, 0x4, 0x0, 0x6, 0x1, 0x7f}, {0x3ff, 0x0, 0xf, 0x1000, 0xbc}, {0x4, 0x5cb, 0xffff, 0x1, 0x5, 0xffffffff}]}, [{0x2, 0x62c8, 0x6, 0x4a5, 0x2f2, 0x800}, {0x5, 0x6, 0x14000, 0x0, 0x4, 0x3}, {0x6, 0x613, 0x7, 0x9, 0x400, 0x6}, {0x9e, 0x7, 0x1, 0x9, 0x7fff, 0x7}, {0x10, 0x4, 0x5, 0x8, 0x8, 0x6a3}, {0x3, 0x7, 0x81, 0x3ff, 0x267, 0x4}, {0x7, 0x0, 0x7b, 0xffff}, {0x3, 0x7, 0x5, 0x0, 0x1c9c, 0x9}, {0x4, 0x17bd1853, 0x0, 0x1, 0xeb37, 0x9}, {0x4, 0x80000000, 0xb, 0xa, 0x1}, {0x6, 0xada4, 0x3d4a, 0x5, 0xff, 0x761e}, {0x0, 0x83ba, 0x100, 0x94, 0x4, 0x3ff}, {0x9, 0x8, 0x3, 0x1000, 0x6, 0x5}, {0xa, 0xa8d4, 0x0, 0x2, 0x8, 0x7}, {0x2, 0x40, 0x6, 0x2, 0x6, 0x9}, {0x401, 0x0, 0x4, 0x6, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x3, 0x1}, {0xd08, 0x168d, 0x1, 0x200, 0x3, 0x3e4d}, {0xe89f, 0x2, 0x8, 0x3, 0x1ff, 0x8}, {0xbb35, 0x7, 0x0, 0x4, 0x9, 0x1}, {0x3, 0x2, 0xeba, 0x1984, 0x7}, {0x9, 0xffff, 0x8, 0x6, 0x7fff, 0x1}, {0x7, 0x7, 0x3, 0x6, 0xffffffff, 0xe7ad}, {0x401, 0x2, 0xc, 0x8, 0x1, 0x2}, {0x7fffffff, 0x7, 0x4, 0x80000000, 0x2, 0x1}, {0x3, 0x6144, 0x2, 0x4, 0xd, 0x9}, {0x9, 0x1, 0x9, 0xe, 0x401, 0x800}, {0xabbb, 0x2, 0xd88, 0x6, 0x765, 0x1}, {0x6, 0x7f, 0x80, 0x42a, 0x2, 0x401}, {0x571, 0x9, 0x8, 0x7, 0x9, 0x5}, {0x0, 0x2, 0x7, 0x7fff, 0x1c}, {0x7e5, 0x6, 0x2, 0x0, 0x9, 0x3}, {0x9, 0x1, 0x4, 0x2, 0x8}, {0x4, 0x2, 0x1, 0x6, 0x6, 0x69}, {0x4, 0x8, 0x78, 0x6, 0x4, 0x6}, {0x40, 0xc, 0xf, 0x3, 0x6, 0x80}, {0x0, 0x8, 0x2, 0x3, 0x10000, 0x380}, {0xfffffffc, 0x6efe, 0x200, 0xffff8001, 0x7, 0x8404}, {0xffffffff, 0xb, 0x1000, 0x4e4d, 0xd, 0xffff}, {0x101, 0x9, 0xe10, 0x2, 0x8, 0x1000}, {0x1, 0x7fff, 0x956, 0x2, 0x7d62, 0x7fff}, {0x9, 0x7, 0x7, 0x8, 0x3, 0xf}, {0x1ff, 0x8001, 0xc, 0x10000, 0x2, 0x6}, {0xd, 0x6, 0x401, 0x6, 0x5, 0x2}, {0x3, 0x5, 0x2, 0x1, 0x100, 0xffffffff}, {0x0, 0x3, 0x9, 0xe6, 0x800, 0x8}, {0x1ff, 0x0, 0xe, 0x8000, 0x33}, {0xaf78, 0x4, 0x1c0000, 0x1, 0x6de0, 0x8}, {0x7ff, 0x8, 0x48c7, 0x400, 0x3, 0x3}, {0x2, 0x4, 0x8, 0x6, 0x3ff, 0x2}, {0x40, 0x4, 0x9, 0x42ad, 0x8, 0x8}, {0x8, 0x744bf8de, 0xb, 0x0, 0x8000, 0x9}, {0x34c, 0x1, 0x7, 0x2, 0x8000}, {0xe3a3, 0xd, 0x9, 0x1ff, 0x40}, {0x5, 0x4, 0x1, 0xc2, 0x6, 0x6}, {0x2, 0x5, 0x7fff, 0x0, 0x14, 0x14}, {0x6, 0xc4, 0xc, 0x8, 0x38}, {0x6, 0x7, 0x4, 0x8, 0x0, 0xd}, {0xfffffffd, 0x6, 0x6c62, 0xe, 0x1, 0xce}, {0x6, 0x1000, 0x2b, 0x2e7a61e7, 0x1, 0x3}, {0x101, 0x8, 0x1, 0x8, 0x4}, {0x7, 0x2ce2, 0x3, 0x6, 0x5, 0x7}, {0x6, 0x8, 0xc, 0x10001, 0x3, 0x80000001}, {0x6, 0x4, 0x8, 0x8, 0x400, 0x1ff00}, {0x9, 0x1d, 0x7, 0x80000000, 0x3, 0x5}, {0x4, 0x5, 0xfffffffb, 0x7, 0x8001, 0xaa}, {0x1, 0x400, 0x3, 0x8, 0x4, 0xffffffff}, {0x30, 0x9, 0x2, 0x1, 0x1, 0x4}, {0xb, 0x6, 0x3, 0x50, 0x2, 0xb}, {0x3, 0x400, 0x80000001, 0x1, 0x60, 0x6}, {0x0, 0x8001, 0x7, 0x1, 0x2b, 0xae0}, {0x1, 0x7, 0xff, 0x3, 0x323, 0xa}, {0x401, 0x975, 0x400, 0x8000, 0x7, 0x10001}, {0x3, 0x6, 0x8, 0x7, 0x6, 0x8001}, {0x8258, 0x3, 0xfffffffd, 0x1ab, 0x4, 0x3}, {0x3ff, 0x5, 0xffffffff, 0x4, 0x3, 0x9}, {0x3, 0xffff, 0xa771, 0x5, 0x9, 0xffffc8f2}, {0x2, 0x2b4, 0x7fffffff, 0x1000, 0x2d3, 0x6}, {0x80000, 0x4, 0x0, 0x4, 0x7e, 0x4}, {0xfffffffa, 0xe, 0x4, 0x3, 0x6, 0xc532}, {0x8, 0x1, 0x2, 0x8, 0x7, 0x3}, {0x47, 0xa, 0x1ff, 0x401, 0x6, 0x5}, {0x8, 0x7, 0x1ff, 0x0, 0x7, 0x4}, {0x1, 0x2, 0x7, 0x5, 0x7}, {0x0, 0xff, 0x420d, 0x80b, 0x10001, 0x6}, {0xc9, 0x7b7c1318, 0x1ba5d75e, 0x1, 0x8, 0x2}, {0x4847af2d, 0x2, 0x6, 0x4, 0xfffffff7, 0x1000}, {0x8, 0xfffffff9, 0x1, 0x7, 0x101, 0x2000000}, {0x40, 0x8, 0x2, 0x20, 0x153, 0x6}, {0x7, 0x7, 0x139, 0x3, 0x7, 0x8}, {0xffff9b37, 0x8, 0x0, 0xc37, 0x3, 0xfffffffe}, {0x1, 0x98, 0x10000, 0x6, 0x6, 0x50c}, {0x445, 0x8, 0x8, 0x0, 0x2, 0xbc9}, {0xfff, 0x80000001, 0x4, 0x0, 0x1a30, 0x8}, {0xfffffffc, 0x4, 0x9, 0x4, 0x7fff, 0xf0000000}, {0x9, 0x5, 0xaa, 0x4, 0x5, 0x7}, {0x5b, 0x7, 0x7, 0x9, 0x7, 0x9}, {0x2, 0x766f, 0x0, 0x40, 0x1, 0x2}, {0x5b52, 0x3, 0x8000, 0x40, 0x7, 0xa}, {0x5, 0x3a000000, 0x3, 0x0, 0x54b000, 0x10}, {0x7, 0x8001, 0x9, 0x6, 0x3fa, 0x4}, {0x8, 0x800, 0x3ff, 0x10001, 0x8, 0x1}, {0x101, 0x110, 0x200, 0x9f72, 0x5, 0x6}, {0x3, 0x7f, 0x0, 0x8001, 0x8, 0x9}, {0x10, 0x5, 0x9, 0x2, 0x3, 0x7fffffff}, {0x6, 0x8, 0x7fff, 0xa, 0x100, 0x1}, {0x2, 0x280000, 0x4ac, 0x7, 0x4, 0x4}, {0x9, 0x5, 0x10001, 0xfff, 0x8, 0xffff}, {0x0, 0x6, 0x0, 0xffff0001, 0x401, 0x5}, {0x7, 0x7, 0xa36, 0x4000000, 0x7, 0x7}, {0xca8, 0x7fffffff, 0x8000, 0x2, 0x7, 0x5}, {0x1, 0x2, 0x8000, 0x4, 0x2, 0xe14e}, {0x4, 0x4, 0x6, 0x1, 0xc, 0xf}, {0x8, 0x3ff, 0x2, 0x1, 0xddc, 0x2f}, {0x16, 0x3, 0x5761bbf, 0x8, 0x2, 0x5}, {0x8, 0x7f, 0x1, 0x2, 0x7, 0x1}, {0xfff, 0x4, 0x4, 0xc, 0x3, 0x1}, {0x200, 0xd51, 0x800, 0x1, 0x400, 0xff}, {0x7fffffff, 0xec01, 0x3, 0x3, 0xf, 0x8000}, {0x10, 0x6, 0x400, 0x6, 0x80, 0x8}, {0x6, 0x10, 0xe, 0x1, 0x2}, {0x3f, 0x200, 0x400, 0x53b2, 0x6, 0xb5}, {0x1, 0x0, 0x6, 0x7f, 0x1, 0x4}, {0x2, 0xcd2, 0x1a17, 0xb, 0x1, 0x5}, {0x3, 0x401, 0x0, 0x3ff, 0x8, 0x5}, {0x5, 0xffffffff, 0x1f37003d, 0x10001, 0x3, 0x2}, {0x4, 0x5, 0x9, 0xfffffff7, 0x9, 0x6}, {0x3, 0x45dd, 0x8, 0xfff, 0x9b, 0xa9}], [{0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x2a82df79110bef38}, {0x3}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1783c870ffd2becc, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x7b439bb7a7a46e85}, {}, {0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x31354b60a5432330}, {0x5}, {0x3, 0x8c20e0e7759a6acd}]}}]}, {0xb5, 0x6, "c9ccfe2b77ee349266b27a8f340558570f3789e29e0b71cdebb23fd576c99489ffb25bff3133dc4f03081e8058e0afcb9245e22eea51828a37301393315866b6f6339ec88c7dd79ed2401721dbb3e28994995934187e5411f5acdc665bd6269fe1bae09a788acaae9513c96847ce0b930694eb6cc842bff44cd0be552c2c4284758fd0c007058e872d943af105ff90f3fd093d2a0039b97a9e93ba897dfac3f9f4eb589d8cb936c140e2595003cfebe607"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x164, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xcaa, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x93b, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2321, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xa3, 0x3, 0x62, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c89, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x9a7, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c33, 0x10000000}}]}, {0xd5, 0x6, "cb4158348fc77735d8c3fde939098cb94a863694232af7df4d7f73b3a40dd131f07378650a0a6614213fb70ef2626f76e29b9eaa222bc9a4af3401acdc0fc9266bd036564690c9d2d64ba453a8b0d171904cd0ca6524317158050e053e97abe0418be43cf17c727e81d354befb174c96124839130ccc227d0aea023fea679a252e6ef12095a45eb95db735a46aa9aa0904a7962d8df9d77bfca789cb382c71a16564d253872fb63d2db2b0f46e804876e655171d502e337d1714e794dabc7a598d2bb558146e25802672d923ea73474146"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xac, 0xd, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0x65, 0x6, "a7114706b38c79a7b38c32f81fc7ddcdd9d33c30aa47ce01da3099bc100489ac04e6782dbfd0399aa1c9ef9b0316f72925638389143e61a70bac583638ff06cb3ed6caf6182f7b95300e3ef7124973fb146136b576666ad970e17732d98c796b99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x148, 0x1, [@m_vlan={0x144, 0x14, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x10001, 0x10000000, 0x1a, 0x40000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x3, 0xffffffffffffffff, 0x8, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0xc7, 0x6, "ed8f1ac92f16794552559399ad1726cbc9f14b1613c774817b3c61ae4d9b5fc7746530661336c76dcf57505db42bfabfed015f9044b5e5f082853d5f6200c2d566aeef49d41c0f2802bceb611f6c9dca97a522e86243e7a8bb281715bb68ac9d625e11a6dede94f48727a87ec17471f41a06669e4f6fb4f99750eb1b73bf3b9863159df7bafe7478dd39207e8853df92a643f26ef0ce83d7629e1fcec7a508deb3dfc520d45c946d92764e65b1681e61a08b6c5ad0d82bbe0934fdc14061d31b43c2f5"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x1524}, 0x1, 0x0, 0x0, 0x4810}, 0x814) 7.873347035s ago: executing program 4 (id=329): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3504, 0x1, 0x0, 0x21}, {{@in6=@remote, 0xbffffffd, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xc3}, 0x3501, 0x3, 0x0, 0x7, 0x7}]}]}, 0x13c}}, 0x4040000) r1 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x23, 0x5, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000540)='bfs\x00', 0x8000, 0x0) syz_emit_ethernet(0x46, &(0x7f00000020c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 7.843934257s ago: executing program 1 (id=330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000001c0)={@none, 0xb, 0x81, 0x3, 0xffff, 0x5, "7ce9242672cb2fb704b879d5ff2618304e34c557d9ac0594847362a28ade706fe4322cff85c416241abd2942d107f5119f3b701673e88379f0c7e22fba498b5c0bf649b25d2f731663c1699ceada6711d10c64793f292624eb83c4bb17c8b2a931f9af5a8867488e2b21b9b450d4be8b7239ee0f8816234694f03ca892a468ad"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) syncfs(r2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000380)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r4, 0x1) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 7.809812341s ago: executing program 0 (id=331): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e24ffff0a00017100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xc4}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 6.586026273s ago: executing program 4 (id=333): mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x25, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e6, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0xffff7fff, 0x2, 0x13, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x59, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x2, 0x2, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1e, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4c20, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709000000000000000001000000050007000200000808000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x3c}}, 0x0) 6.552583822s ago: executing program 0 (id=334): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x200, 0x8, 0xd, "7e12105588e633bbb1df022dace17a32d211ee"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb0e3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000300)='GPL\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"}) r6 = syz_open_pts(r5, 0x121500) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c0002800500160001000000f4ca5f75b43a7b22417bf3d315534503f060839642441c7ec71c316b93f0f5b2a49aad7ca8179d90843b1228a4fd613b1998d5da46c4d0990f4f4c4e058e1b0280c0810dc5f3f050b708123681ec418cb81338ea5c7da8"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r7 = eventfd(0x800a6) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$eventfd(r7, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) 6.48342615s ago: executing program 1 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000300), {[{{@arp={@rand_addr=0x64010102, @empty, 0x0, 0xff, 0x1, 0x0, {@mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x7f, 0x0, 0xff]}}, 0xff11, 0x17, 0xa5, 0x79ae, 0x5, 0x53f6, 'batadv0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x140}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x4, 0xffffffff}}}, {{@arp={@remote, @broadcast, 0x0, 0xff000000, 0x9, 0x6, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x5, 0x4, 0x0, 0x1, 0x5, 'dvmrp1\x00', 'veth0_to_team\x00', {0xcbeecb438468845c}, {0xff}, 0x0, 0x2d9}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xb}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0xffffffff, 0xff, 0x8, 0x9, {@empty, {[0xff, 0xff, 0x0, 0x101, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x960, 0x73, 0x1, 0xc, 0xff, 0x0, 'tunl0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$xdp(0x2c, 0x3, 0x0) 6.401359289s ago: executing program 3 (id=337): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4009, 0x2, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000040)={0xe763, r1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f001, 0x6}) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040), 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x5) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000001c0)=0x3, 0x4) faccessat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x297, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed39", 0x10}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) 5.502811648s ago: executing program 1 (id=339): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x1, 0x0) (async) r1 = socket$kcm(0x29, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d40)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getpgrp(0xffffffffffffffff) (async) r5 = getpgrp(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r6, r6, 0x0) stat(&(0x7f0000002d80)='./file0\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000002e40)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syz_open_dev$audion(&(0x7f00000032c0), 0x8, 0x84e02) (async) r9 = syz_open_dev$audion(&(0x7f00000032c0), 0x8, 0x84e02) r10 = accept4$rose(r4, &(0x7f0000003300)=@full={0xb, @dev, @rose, 0x0, [@default, @default, @default, @rose, @netrom, @netrom]}, &(0x7f0000003340)=0x40, 0x81000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000003380)={0x6, 0x95, {0xffffffffffffffff}, {}, 0x81, 0x800}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000033c0)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000033c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000003400)='./file0\x00', &(0x7f0000003440), 0x4000) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000003400)='./file0\x00', &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r14 = fcntl$getown(r1, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r15, 0x0) r16 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000034c0)='devices.deny\x00', 0x2, 0x0) getpid() (async) r17 = getpid() sched_setscheduler(r17, 0x2, &(0x7f0000000200)=0x7) lstat(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="b77405384802db3c0bd5671545aaf5605d9758f8a370bdc83dbb9673eb2ec6597ea10fca109fb79bf1bc02368bc54885c047bbe47a602332a8b7e22ffb9ebdaa469808c2d5576fd1053ab310150b17e22c25a4c900e08a7ff5f28fcd9d73b0dc4367bc956a16dc626455ceb5c70427559e5788cd3d30c9f1de59691eacd84c0d33d2c0f1c7b0a8055a277f7242fbd255e6c3a823d03269c857ff8c415b74f504361695136c15ee141139b74742506c7ef082e1a5e9348890897c3760b7b430f500171e9acef0781b502c08c5b39980d1b5bec31ae795f49f97942fe794c79aa07dcd83ea8e6fa34aed", 0xe9}], 0x1, &(0x7f0000000480)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, r1, r1, r9]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1]}}], 0xe0, 0x20000800}}, {{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000600)="f0799ccbf1057faa8fd5fd3db090d23867d41238241da82d4d497e01bb0ca3a979d16708f454055ff3aefe44bf73e9ddc69ce266b9fb2bf26b19a561f3bb2ddd5e1a50fc8432f257bb010c419690cc3d9c86c61ec1df77a1fd74b21cbaf7c04a63845aef0b8e4f7174c15d95126503d22ae6ecb68496d5d536a66d0d2346774e747f89f6785c16bc74e97d34d54697079257a836c8a86bc59870003d7e0c52a9306f8ea1a11a0f0e0bddff33e354e19e4305ebf3a7c2e90caaf866d943bd8128c4af310c63504850a231e5f2c4700ea6e815ebd9b5e8f496293b149eb1762b1a5324cc027d2c4cd7581d386fad6d94cc6cfb322fed33090c", 0xf8}, {&(0x7f0000000840)="60d52eb35b57abecdd597c5d97db83bdfbfc6709a5e31232c421a75e69cf6ae3d085fe05191db186f5e66973fa3d5c6cd4b01ccb668a40e05196f516abb6a5048f5f61aa05b978d2b806e21182360c3223e06b4d6eda75b4d6b5c4a2d57d8d422b62973223f4bbaaff2e1b0dc77c9693c9d24b20e2549782e8b2c49456a179e9f818f38039bb138f6f64921c4eed8a2134ef1c", 0x93}, {&(0x7f0000000700)="48ebc8ce416bd31ff47fb2d23f8ee4367c1191b1ca4900593736f432295eef3539e884ca0c814fec47c07f05034a6872ad42447353d8a9f1fd0b91faa53685c6", 0x40}, {&(0x7f0000000900)="a199b0538c7eb2b73b02702f3b7b3416ee91db45ec84715ebaad6b561b9bea396ba0a250c4352b4d00554d174c34153e812ca7b4aa9c5e944e88371340993b73b5e68ea1db7960c3e3ecd2ad54bf226ecae17a8fa08db5b36b07f1f6f6dcca66b9ec5fe0cfc5eae89ea23661ad0989c6faa082790bcc6c49d892de", 0x7b}, {&(0x7f0000000980)="7c442385ed5988b1bf8ccf9e643de77740a5dc356e31aa7bcaf2bc35cf9af806f4cf1cd7495b11fa974fd675f599b3bca0773cb7238805a0bea86b01d146d59e7a486a8f85876893eb15f01cf9f95291446ffac19827d42b3515439f7c2b6afc9bd270286c46740b53f0ecf374c1739028f313197df5", 0x76}], 0x5, 0x0, 0x0, 0x10}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000740)="4ff5b0d7b8", 0x5}], 0x1, &(0x7f0000002e80)=[@rights={{0x28, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r9, r1, r8, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x3c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r8, r1, r1, r1, r1, r1, r4]}}], 0x160, 0xc001}}, {{&(0x7f0000003000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000000b40)="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", 0xfb}, {&(0x7f0000003180)="f0f88a72a4ac6ad18cc52ac7dfe99452e5a7aec83da71bf37ab7af8942c6b55575dc960930c139549301382c66b59f7015e90b1044e1aaebf9bf8e7dd4d3c0ab601893fdc93ac69c0994db97d0334ac81b49bfde25aa65", 0x57}, {&(0x7f0000003200)="1347ad33fda9be4da274d3d5e0ae9b0f3608553bc45b4b83f05cc818c00dbe3bc95af5241946dd261a000caad17e89b662846d62368b83900e939d15bd4fc564d833ac4e261eeb0f90a40f4162b8a05bb9564dbb459b5f6b9c2fc7a59afdfd6aaba3bd2f", 0x64}], 0x3, &(0x7f00000035c0)=[@rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r9, r10, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r16, r1, r1, r9, r1, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee01, r18}}}], 0xf0, 0x10}}], 0x4, 0x400c801) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x86}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000003940)={0x1e8, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0x1d4, 0x13, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [{0x110, 0x1, '\t\xcc/\x10\xb9\xcb^*/T\xa6\"p\x9e\x9ek\x99t\xa2\x1a\x90\x8cQ,\xca(*\xbc\xb5U\'\xbeTx\x11\x99\x9b\x84\x118dO\xbe\xc3lPX\x9c\xd9u\x83f\xf3\xc58\xc3\xb4\a.\xd0\x90,>\xfb\'z\xc5\x03\xc9{7\xce1\x0frz\bA\x0e\xe8\x15\xe5?\xe6e\x00\xf3\xb78\xb3\x8fQ\x12\x88\x99\xf9\xc4~\xbc\xfb\xf1\x9d\xb3%\xc6\xe8H\xae\xe4\x03B\xe44c\x16\xa73\xa6]i\x1b;\xacH\xa0\x17\x9aVf\xdd8\xab\x0e|\xff\xff\xff\xff\x00\x00\xee\xff\xb8\xeef\x1f\x90b\x89\xdf-Z\x88M\xf1\x17u\xc7\xc1\xa6\xbd\xe0\xd7\x8c\xf6X%c\x9b\xba\xff\x82\f\x9c\x1c\x1c\x92&\x15\xb5\xddm\xf9~\x03\xa9%W\r\xd9\'!V\xae@}\x88\xf7\xd8\xef\xdf\x96>\x86\xf1z0\xd4#\xd2\tM\xa1\xd16\xcc=\xd6\x11a\x13AZ;\x05\xd6J9\xc1ejW\x11l\x1b\xd4\aG`_y\xaag\xae\xf4\xfd\xcaM\xab\xf9\x99\xbaB$\xca\xc4\xcb\xec\xe8\xb6\xc9\xbc\xae\xef\x828a\xd6'}, {0x5, 0x1, '\\'}, {0x5, 0x1, '^'}, {0x5, 0x1, '-'}]}, {0xc, 0x0, 0x0, 0x1, [{0x7, 0x1, '^#$'}]}, {0x14, 0x0, 0x0, 0x1, [{0xb, 0x1, '.$[\'\\{,'}, {0x4}]}, {0x84, 0x0, 0x0, 0x1, [{0x4}, {0x71, 0x1, '$(@#K\xbcrf\x83\x96\xf9\xccK\xcc\xe4>\xf8/\x02\x12\x91=_\x1cI/\xad\x12\xa0=\'I[\xe7\xce\xe7\xd7\xb2\xc5\x97\x12\x8a\"c\xc6}\xdc\xfe\xc9\xaa\rZ\xfax\xf9k\xc2\x8f\x02\xdf\xe7\xcb\nSd\xc8\xb2\x13\x89w\xcb\x96\xc6\x80\xf2\x02\x13\xdey\tC#\xe0\xa9\x9fd|%\x9a\r)\x82<\x16\xd6C=\x95d\x02%\xd1\xf2#\x13\xde\xdb|+'}, {0x6, 0x1, '\x02%'}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x1}, 0x8090) (async) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000003940)={0x1e8, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_SDP={0x1d4, 0x13, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [{0x110, 0x1, '\t\xcc/\x10\xb9\xcb^*/T\xa6\"p\x9e\x9ek\x99t\xa2\x1a\x90\x8cQ,\xca(*\xbc\xb5U\'\xbeTx\x11\x99\x9b\x84\x118dO\xbe\xc3lPX\x9c\xd9u\x83f\xf3\xc58\xc3\xb4\a.\xd0\x90,>\xfb\'z\xc5\x03\xc9{7\xce1\x0frz\bA\x0e\xe8\x15\xe5?\xe6e\x00\xf3\xb78\xb3\x8fQ\x12\x88\x99\xf9\xc4~\xbc\xfb\xf1\x9d\xb3%\xc6\xe8H\xae\xe4\x03B\xe44c\x16\xa73\xa6]i\x1b;\xacH\xa0\x17\x9aVf\xdd8\xab\x0e|\xff\xff\xff\xff\x00\x00\xee\xff\xb8\xeef\x1f\x90b\x89\xdf-Z\x88M\xf1\x17u\xc7\xc1\xa6\xbd\xe0\xd7\x8c\xf6X%c\x9b\xba\xff\x82\f\x9c\x1c\x1c\x92&\x15\xb5\xddm\xf9~\x03\xa9%W\r\xd9\'!V\xae@}\x88\xf7\xd8\xef\xdf\x96>\x86\xf1z0\xd4#\xd2\tM\xa1\xd16\xcc=\xd6\x11a\x13AZ;\x05\xd6J9\xc1ejW\x11l\x1b\xd4\aG`_y\xaag\xae\xf4\xfd\xcaM\xab\xf9\x99\xbaB$\xca\xc4\xcb\xec\xe8\xb6\xc9\xbc\xae\xef\x828a\xd6'}, {0x5, 0x1, '\\'}, {0x5, 0x1, '^'}, {0x5, 0x1, '-'}]}, {0xc, 0x0, 0x0, 0x1, [{0x7, 0x1, '^#$'}]}, {0x14, 0x0, 0x0, 0x1, [{0xb, 0x1, '.$[\'\\{,'}, {0x4}]}, {0x84, 0x0, 0x0, 0x1, [{0x4}, {0x71, 0x1, '$(@#K\xbcrf\x83\x96\xf9\xccK\xcc\xe4>\xf8/\x02\x12\x91=_\x1cI/\xad\x12\xa0=\'I[\xe7\xce\xe7\xd7\xb2\xc5\x97\x12\x8a\"c\xc6}\xdc\xfe\xc9\xaa\rZ\xfax\xf9k\xc2\x8f\x02\xdf\xe7\xcb\nSd\xc8\xb2\x13\x89w\xcb\x96\xc6\x80\xf2\x02\x13\xdey\tC#\xe0\xa9\x9fd|%\x9a\r)\x82<\x16\xd6C=\x95d\x02%\xd1\xf2#\x13\xde\xdb|+'}, {0x6, 0x1, '\x02%'}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x1}, 0x8090) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8800) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8800) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.00430366s ago: executing program 3 (id=340): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0430cb5cc900"], 0x6) 4.809827828s ago: executing program 3 (id=341): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@newtfilter={0x1524, 0x28, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xf, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14f4, 0x2, [@TCA_CGROUP_ACT={0x13a4, 0x1, [@m_ctinfo={0xcc, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffffff46}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0xe7c0, 0x0, 0x0, 0x4}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3e}, @TCA_CTINFO_ACT={0x18, 0x3, {0x81, 0x9, 0x0, 0x0, 0x7}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xfffeffff, 0x3, 0xffffffff, 0xffffffff}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x40}]}, {0x3e, 0x6, "54e4b923b9fad06e09878c56750d69177a2c1419a90f7c365bd962e8b70dc6ea45cff4f9b7d5295cd192425a47865cb50015304725f66b86aad4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x130, 0x14, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x1}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x2, 0xffffffffffffffff, 0x0, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x6, 0x6, 0x1, 0x1}, 0xb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x8, 0x4, 0x4}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x3, 0x8, 0x5}, 0x6}}]}, {0x74, 0x6, "a694430e357d62f79afb33c55fbfd41fb2ea40345feaa5c655d47a19a568f3e74ec854956ee4be67a9a7df91195c5078a15af1ea48a487540345c4b4e8a15ca6bf37e645d2dd179f3ea6f29e54e7780deb488cad47b87a7d395cdae8dc4ee4cda98a07e6828cb907217b5750feee4f93"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xf94, 0x20, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x4, 0x5, 0x6, 0x3629, 0x3ff}, 0x75, 0x10, [{0xfffffff9, 0x2, 0x1, 0x2e, 0x1cac, 0x1}, {0x4, 0xa0a7, 0x964, 0x7fff, 0x8d3, 0x3}, {0x5, 0x8113, 0xa, 0x93d, 0x5, 0xff27}, {0x1, 0x4, 0x0, 0x6, 0x1, 0x7f}, {0x3ff, 0x0, 0xf, 0x1000, 0xbc}, {0x4, 0x5cb, 0xffff, 0x1, 0x5, 0xffffffff}]}, [{0x2, 0x62c8, 0x6, 0x4a5, 0x2f2, 0x800}, {0x5, 0x6, 0x14000, 0x0, 0x4, 0x3}, {0x6, 0x613, 0x7, 0x9, 0x400, 0x6}, {0x9e, 0x7, 0x1, 0x9, 0x7fff, 0x7}, {0x10, 0x4, 0x5, 0x8, 0x8, 0x6a3}, {0x3, 0x7, 0x81, 0x3ff, 0x267, 0x4}, {0x7, 0x0, 0x7b, 0xffff}, {0x3, 0x7, 0x5, 0x0, 0x1c9c, 0x9}, {0x4, 0x17bd1853, 0x0, 0x1, 0xeb37, 0x9}, {0x4, 0x80000000, 0xb, 0xa, 0x1}, {0x6, 0xada4, 0x3d4a, 0x5, 0xff, 0x761e}, {0x0, 0x83ba, 0x100, 0x94, 0x4, 0x3ff}, {0x9, 0x8, 0x3, 0x1000, 0x6, 0x5}, {0xa, 0xa8d4, 0x0, 0x2, 0x8, 0x7}, {0x2, 0x40, 0x6, 0x2, 0x6, 0x9}, {0x401, 0x0, 0x4, 0x6, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x3, 0x1}, {0xd08, 0x168d, 0x1, 0x200, 0x3, 0x3e4d}, {0xe89f, 0x2, 0x8, 0x3, 0x1ff, 0x8}, {0xbb35, 0x7, 0x0, 0x4, 0x9, 0x1}, {0x3, 0x2, 0xeba, 0x1984, 0x7}, {0x9, 0xffff, 0x8, 0x6, 0x7fff, 0x1}, {0x7, 0x7, 0x3, 0x6, 0xffffffff, 0xe7ad}, {0x401, 0x2, 0xc, 0x8, 0x1, 0x2}, {0x7fffffff, 0x7, 0x4, 0x80000000, 0x2, 0x1}, {0x3, 0x6144, 0x2, 0x4, 0xd, 0x9}, {0x9, 0x1, 0x9, 0xe, 0x401, 0x800}, {0xabbb, 0x2, 0xd88, 0x6, 0x765, 0x1}, {0x6, 0x7f, 0x80, 0x42a, 0x2, 0x401}, {0x571, 0x9, 0x8, 0x7, 0x9, 0x5}, {0x0, 0x2, 0x7, 0x7fff, 0x1c}, {0x7e5, 0x6, 0x2, 0x0, 0x9, 0x3}, {0x9, 0x1, 0x4, 0x2, 0x8}, {0x4, 0x2, 0x1, 0x6, 0x6, 0x69}, {0x4, 0x8, 0x78, 0x6, 0x4, 0x6}, {0x40, 0xc, 0xf, 0x3, 0x6, 0x80}, {0x0, 0x8, 0x2, 0x3, 0x10000, 0x380}, {0xfffffffc, 0x6efe, 0x200, 0xffff8001, 0x7, 0x8404}, {0xffffffff, 0xb, 0x1000, 0x4e4d, 0xd, 0xffff}, {0x101, 0x9, 0xe10, 0x2, 0x8, 0x1000}, {0x1, 0x7fff, 0x956, 0x2, 0x7d62, 0x7fff}, {0x9, 0x7, 0x7, 0x8, 0x3, 0xf}, {0x1ff, 0x8001, 0xc, 0x10000, 0x2, 0x6}, {0xd, 0x6, 0x401, 0x6, 0x5, 0x2}, {0x3, 0x5, 0x2, 0x1, 0x100, 0xffffffff}, {0x0, 0x3, 0x9, 0xe6, 0x800, 0x8}, {0x1ff, 0x0, 0xe, 0x8000, 0x33}, {0xaf78, 0x4, 0x1c0000, 0x1, 0x6de0, 0x8}, {0x7ff, 0x8, 0x48c7, 0x400, 0x3, 0x3}, {0x2, 0x4, 0x8, 0x6, 0x3ff, 0x2}, {0x40, 0x4, 0x9, 0x42ad, 0x8, 0x8}, {0x8, 0x744bf8de, 0xb, 0x0, 0x8000, 0x9}, {0x34c, 0x1, 0x7, 0x2, 0x8000}, {0xe3a3, 0xd, 0x9, 0x1ff, 0x40}, {0x5, 0x4, 0x1, 0xc2, 0x6, 0x6}, {0x2, 0x5, 0x7fff, 0x0, 0x14, 0x14}, {0x6, 0xc4, 0xc, 0x8, 0x38}, {0x6, 0x7, 0x4, 0x8, 0x0, 0xd}, {0xfffffffd, 0x6, 0x6c62, 0xe, 0x1, 0xce}, {0x6, 0x1000, 0x2b, 0x2e7a61e7, 0x1, 0x3}, {0x101, 0x8, 0x1, 0x8, 0x4}, {0x7, 0x2ce2, 0x3, 0x6, 0x5, 0x7}, {0x6, 0x8, 0xc, 0x10001, 0x3, 0x80000001}, {0x6, 0x4, 0x8, 0x8, 0x400, 0x1ff00}, {0x9, 0x1d, 0x7, 0x80000000, 0x3, 0x5}, {0x4, 0x5, 0xfffffffb, 0x7, 0x8001, 0xaa}, {0x1, 0x400, 0x3, 0x8, 0x4, 0xffffffff}, {0x30, 0x9, 0x2, 0x1, 0x1, 0x4}, {0xb, 0x6, 0x3, 0x50, 0x2, 0xb}, {0x3, 0x400, 0x80000001, 0x1, 0x60, 0x6}, {0x0, 0x8001, 0x7, 0x1, 0x2b, 0xae0}, {0x1, 0x7, 0xff, 0x3, 0x323, 0xa}, {0x401, 0x975, 0x400, 0x8000, 0x7, 0x10001}, {0x3, 0x6, 0x8, 0x7, 0x6, 0x8001}, {0x8258, 0x3, 0xfffffffd, 0x1ab, 0x4, 0x3}, {0x3ff, 0x5, 0xffffffff, 0x4, 0x3, 0x9}, {0x3, 0xffff, 0xa771, 0x5, 0x9, 0xffffc8f2}, {0x2, 0x2b4, 0x7fffffff, 0x1000, 0x2d3, 0x6}, {0x80000, 0x4, 0x0, 0x4, 0x7e, 0x4}, {0xfffffffa, 0xe, 0x4, 0x3, 0x6, 0xc532}, {0x8, 0x1, 0x2, 0x8, 0x7, 0x3}, {0x47, 0xa, 0x1ff, 0x401, 0x6, 0x5}, {0x8, 0x7, 0x1ff, 0x0, 0x7, 0x4}, {0x1, 0x2, 0x7, 0x5, 0x7}, {0x0, 0xff, 0x420d, 0x80b, 0x10001, 0x6}, {0xc9, 0x7b7c1318, 0x1ba5d75e, 0x1, 0x8, 0x2}, {0x4847af2d, 0x2, 0x6, 0x4, 0xfffffff7, 0x1000}, {0x8, 0xfffffff9, 0x1, 0x7, 0x101, 0x2000000}, {0x40, 0x8, 0x2, 0x20, 0x153, 0x6}, {0x7, 0x7, 0x139, 0x3, 0x7, 0x8}, {0xffff9b37, 0x8, 0x0, 0xc37, 0x3, 0xfffffffe}, {0x1, 0x98, 0x10000, 0x6, 0x6, 0x50c}, {0x445, 0x8, 0x8, 0x0, 0x2, 0xbc9}, {0xfff, 0x80000001, 0x4, 0x0, 0x1a30, 0x8}, {0xfffffffc, 0x4, 0x9, 0x4, 0x7fff, 0xf0000000}, {0x9, 0x5, 0xaa, 0x4, 0x5, 0x7}, {0x5b, 0x7, 0x7, 0x9, 0x7, 0x9}, {0x2, 0x766f, 0x0, 0x40, 0x1, 0x2}, {0x5b52, 0x3, 0x8000, 0x40, 0x7, 0xa}, {0x5, 0x3a000000, 0x3, 0x0, 0x54b000, 0x10}, {0x7, 0x8001, 0x9, 0x6, 0x3fa, 0x4}, {0x8, 0x800, 0x3ff, 0x10001, 0x8, 0x1}, {0x101, 0x110, 0x200, 0x9f72, 0x5, 0x6}, {0x3, 0x7f, 0x0, 0x8001, 0x8, 0x9}, {0x10, 0x5, 0x9, 0x2, 0x3, 0x7fffffff}, {0x6, 0x8, 0x7fff, 0xa, 0x100, 0x1}, {0x2, 0x280000, 0x4ac, 0x7, 0x4, 0x4}, {0x9, 0x5, 0x10001, 0xfff, 0x8, 0xffff}, {0x0, 0x6, 0x0, 0xffff0001, 0x401, 0x5}, {0x7, 0x7, 0xa36, 0x4000000, 0x7, 0x7}, {0xca8, 0x7fffffff, 0x8000, 0x2, 0x7, 0x5}, {0x1, 0x2, 0x8000, 0x4, 0x2, 0xe14e}, {0x4, 0x4, 0x6, 0x1, 0xc, 0xf}, {0x8, 0x3ff, 0x2, 0x1, 0xddc, 0x2f}, {0x16, 0x3, 0x5761bbf, 0x8, 0x2, 0x5}, {0x8, 0x7f, 0x1, 0x2, 0x7, 0x1}, {0xfff, 0x4, 0x4, 0xc, 0x3, 0x1}, {0x200, 0xd51, 0x800, 0x1, 0x400, 0xff}, {0x7fffffff, 0xec01, 0x3, 0x3, 0xf, 0x8000}, {0x10, 0x6, 0x400, 0x6, 0x80, 0x8}, {0x6, 0x10, 0xe, 0x1, 0x2}, {0x3f, 0x200, 0x400, 0x53b2, 0x6, 0xb5}, {0x1, 0x0, 0x6, 0x7f, 0x1, 0x4}, {0x2, 0xcd2, 0x1a17, 0xb, 0x1, 0x5}, {0x3, 0x401, 0x0, 0x3ff, 0x8, 0x5}, {0x5, 0xffffffff, 0x1f37003d, 0x10001, 0x3, 0x2}, {0x4, 0x5, 0x9, 0xfffffff7, 0x9, 0x6}, {0x3, 0x45dd, 0x8, 0xfff, 0x9b, 0xa9}], [{0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x2a82df79110bef38}, {0x3}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1783c870ffd2becc, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x7b439bb7a7a46e85}, {}, {0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x31354b60a5432330}, {0x5}, {0x3, 0x8c20e0e7759a6acd}]}}]}, {0xb5, 0x6, "c9ccfe2b77ee349266b27a8f340558570f3789e29e0b71cdebb23fd576c99489ffb25bff3133dc4f03081e8058e0afcb9245e22eea51828a37301393315866b6f6339ec88c7dd79ed2401721dbb3e28994995934187e5411f5acdc665bd6269fe1bae09a788acaae9513c96847ce0b930694eb6cc842bff44cd0be552c2c4284758fd0c007058e872d943af105ff90f3fd093d2a0039b97a9e93ba897dfac3f9f4eb589d8cb936c140e2595003cfebe607"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x164, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xcaa, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x93b, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2321, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0xa3, 0x3, 0x62, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c89, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x9a7, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1c33, 0x10000000}}]}, {0xd5, 0x6, "cb4158348fc77735d8c3fde939098cb94a863694232af7df4d7f73b3a40dd131f07378650a0a6614213fb70ef2626f76e29b9eaa222bc9a4af3401acdc0fc9266bd036564690c9d2d64ba453a8b0d171904cd0ca6524317158050e053e97abe0418be43cf17c727e81d354befb174c96124839130ccc227d0aea023fea679a252e6ef12095a45eb95db735a46aa9aa0904a7962d8df9d77bfca789cb382c71a16564d253872fb63d2db2b0f46e804876e655171d502e337d1714e794dabc7a598d2bb558146e25802672d923ea73474146"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xac, 0xd, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0x65, 0x6, "a7114706b38c79a7b38c32f81fc7ddcdd9d33c30aa47ce01da3099bc100489ac04e6782dbfd0399aa1c9ef9b0316f72925638389143e61a70bac583638ff06cb3ed6caf6182f7b95300e3ef7124973fb146136b576666ad970e17732d98c796b99"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_ACT={0x148, 0x1, [@m_vlan={0x144, 0x14, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x10001, 0x10000000, 0x1a, 0x40000000}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x3, 0xffffffffffffffff, 0x8, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0xc7, 0x6, "ed8f1ac92f16794552559399ad1726cbc9f14b1613c774817b3c61ae4d9b5fc7746530661336c76dcf57505db42bfabfed015f9044b5e5f082853d5f6200c2d566aeef49d41c0f2802bceb611f6c9dca97a522e86243e7a8bb281715bb68ac9d625e11a6dede94f48727a87ec17471f41a06669e4f6fb4f99750eb1b73bf3b9863159df7bafe7478dd39207e8853df92a643f26ef0ce83d7629e1fcec7a508deb3dfc520d45c946d92764e65b1681e61a08b6c5ad0d82bbe0934fdc14061d31b43c2f5"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x1524}, 0x1, 0x0, 0x0, 0x4810}, 0x814) 4.590291547s ago: executing program 3 (id=342): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file6\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c000000090002"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x200000005c831, r0, 0x0) 4.554717662s ago: executing program 2 (id=343): socket$kcm(0x10, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket(0x2c, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x95, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x918s\x89X', 0x20, 0xffd}, 0x2f, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, 0x0, 0x32, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.505950663s ago: executing program 4 (id=344): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000033b, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x25, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) signalfd4(r2, &(0x7f0000000140), 0x8, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) 3.548206119s ago: executing program 3 (id=345): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e24ffff0a00017100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffff"], 0xc4}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 3.451433792s ago: executing program 2 (id=346): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0xfffffffffffffe9b) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)="8f8fbea9571bba402f689272cfeb16bc", 0x10}], 0x1}}, {{&(0x7f0000000240)=@l2={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xa3a, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="b8b23b1c6926026d71c5935689c387a15f151c8fd7312712516e61b69a89160c850a3ce63377a93fe068c02a6eea9c4e22c07eee8710cad188559cbe5d3aca61198296dafd957f20195968197c9190f00a863646302eba9bb57f78f06d2492bbfd00bf0a0ac8cabcc7cc9af13fd33581926203d845ba5fbaaec7bc843167037b87b45c0cf3975d0556e74efdcd480868b3e9fb762434b54e6d59be4bd3b66ab8ca71e64a02bede6c099b8c3d363dc6e31f77e5ee515d6cdb34596a8870e71d31fe85", 0xc2}, {&(0x7f0000000340)="62b4b08a00956116cecab5d9e31315cfe45d08fd0329bb65", 0x18}, {&(0x7f0000000400)="f7d6ed077bb6ceae5f63e59aaa24f5710b152d120438c1234fd15643d90efa738946e0e797355adb0b042c6346a80f8c18706f91", 0x34}], 0x3}}], 0x2, 0x8810) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4048001}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @remote, 0x0, 0x0, 'rr\x00', 0x35, 0x6, 0x62}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}, {&(0x7f0000000000)="5cfe0a7c5b944e399ca19263822b530fa86b89e6e58e84cdc0519e42b18d803869b24463f9098ff76256acfbb1611fc64b613b9566066506663fcc10b8757a2460c19c6708691bb7a01bed1cf2f50abd232d1a68d85a1144fab5ac59ab5599aa6e55ffa0a7d4852d74c983c8fb0fd0bae3eccbb9ee931f7376baba5a8bf4dd699c5804c509c38a28040b7f51d1b24971f2bc582055edc54dc74fa8929b726d94ddcf1ad3867fc0b7fae6910d279eadfbbabb62eaacbb8a3ca7ef14fc9b7c5c86", 0xc0}, {&(0x7f00000000c0)="0e5a99e80d8eb4ae211f2c7644496c68aa3ffee46589b1bc1df68bfe648dbfc64731bc49c91cb26474d817bbd7bf0348dead6da22a77e6a3ba6225407488caad5b89bb725be0928121bef025d7455d7edb2c39bf8c169648f81e16704408a2d496ee0988d3c5ba2b208fd762c7a75857f281974154edda878cbfabc655b4957a5e4b53a956b8bd568310fd703d7fe28ddf1d86ba1ef0343511c74a9a5a", 0x9d}], 0x3}, 0x0) 3.357363231s ago: executing program 4 (id=347): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000002c0)="84f462b0699ea97af839b14d72d9", 0xe) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0xfffffee4) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000380)={0x74, r5, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x39}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) (async, rerun: 64) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) (async) sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0) 3.356337501s ago: executing program 3 (id=348): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000200)=[{0x3, 0x1000, 0x0, 0x0}, {0x8000, 0xa00, 0x0, 0x0}], 0x2}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) recvmmsg(r3, &(0x7f0000005e40)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000140)=""/23, 0x17}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/214, 0xd6}, {&(0x7f0000001500)=""/144, 0x90}, {&(0x7f00000015c0)=""/214, 0xd6}, {&(0x7f00000016c0)=""/137, 0x89}], 0x8, &(0x7f0000001800)=""/69, 0x45}}, {{&(0x7f0000001880)=@isdn, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/91, 0x5b}, {&(0x7f00000019c0)=""/203, 0xcb}], 0x4}, 0x101}, {{&(0x7f0000001b00)=@caif, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b80)=""/66, 0x42}], 0x1, &(0x7f0000001c40)=""/4096, 0x1000}, 0x5270}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002c40)=""/253, 0xfd}, {&(0x7f0000002d40)=""/117, 0x75}, {&(0x7f0000002dc0)=""/225, 0xe1}, {&(0x7f0000002ec0)=""/188, 0xbc}, {&(0x7f0000002f80)=""/11, 0xb}], 0x5, &(0x7f0000003040)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004040)=""/248, 0xf8}, {&(0x7f0000004140)=""/125, 0x7d}], 0x2}, 0x101}, {{&(0x7f0000004200)=@un=@abs, 0x80, &(0x7f0000004440)=[{&(0x7f0000004280)=""/249, 0xf9}, {&(0x7f0000004380)=""/148, 0x94}], 0x2, &(0x7f0000004480)=""/53, 0x35}}, {{0x0, 0x0, &(0x7f0000004740)=[{&(0x7f00000044c0)=""/203, 0xcb}, {&(0x7f00000045c0)=""/167, 0xa7}, {&(0x7f0000004680)=""/149, 0x95}], 0x3, &(0x7f0000004780)=""/18, 0x12}, 0x3}, {{&(0x7f00000047c0)=@x25, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004840)=""/233, 0xe9}, {&(0x7f0000004940)=""/60, 0x3c}, {&(0x7f0000004980)=""/36, 0x24}, {&(0x7f00000049c0)=""/230, 0xe6}, {&(0x7f0000004ac0)=""/12, 0xc}], 0x5, &(0x7f0000004b80)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000005b80)=@qipcrtr, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005c00)=""/73, 0x49}, {&(0x7f0000005c80)=""/134, 0x86}, {&(0x7f0000005d40)=""/186, 0xba}], 0x3}, 0x6}], 0x9, 0x12060, &(0x7f0000006080)={0x0, 0x989680}) 2.57725098s ago: executing program 1 (id=349): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="25032abd7000fcdbdf251300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r6 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000280)=0x10) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000300), {[{{@arp={@rand_addr=0x64010102, @empty, 0x0, 0xff, 0x1, 0x0, {@mac=@remote, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0x7f, 0x0, 0xff]}}, 0xff11, 0x17, 0xa5, 0x79ae, 0x5, 0x53f6, 'batadv0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x140}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr=0x64010100, 0x4, 0xffffffff}}}, {{@arp={@remote, @broadcast, 0x0, 0xff000000, 0x9, 0x6, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x5, 0x4, 0x0, 0x1, 0x5, 'dvmrp1\x00', 'veth0_to_team\x00', {0xcbeecb438468845c}, {0xff}, 0x0, 0x2d9}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xb}}}, {{@arp={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0xffffffff, 0xff, 0x8, 0x9, {@empty, {[0xff, 0xff, 0x0, 0x101, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x960, 0x73, 0x1, 0xc, 0xff, 0x0, 'tunl0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$xdp(0x2c, 0x3, 0x0) 2.424310284s ago: executing program 2 (id=350): mount(0x0, 0x0, 0x0, 0x800000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0xf6}, {0xa, 0x4e23, 0x6, @empty, 0x100}, r1, 0x2}}, 0x48) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x248241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.555397055s ago: executing program 1 (id=351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000f80)="66b9030000400f320f0f598eb6660f1af9baf80c66b8ba3f2a8766efbafc0ced0f18c5baf80c66b8447d018066efbafc0c66b80048000066ef0f001e0000f0801314670f005505b8a4048ed8", 0x4c}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x1, 0x0, &(0x7f00000007c0)=0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f0000000840)={{r6, r7+10000000}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x3f, &(0x7f0000000940)={0x0, 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) r8 = timerfd_create(0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x76, 0x40, 0x81, 0xaf, 0x6}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x2, [{0xa0, &(0x7f00000002c0)=@string={0xa0, 0x3, "11999d4015c277c6cc93aecba1355b4414d3fd14a7d535890fd84d13171218237403e58d8cff7861c87d6b586bcbebe80c63edc996f9259e1fe09e9726bf6d8208c2c9c968ed5e92921dd8d215a910d44b58e9bf449d11c6714ed8d575cfcfba05e97470aab8e15450980bd536a4a5a8e0a35c1d5825bdbb78b051e76e406d58ecfb43f0ee477cf3c2acee431ae29dce503e7cbcd56b43523d056852050c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1001}}]}) timerfd_settime(r8, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000080)={0x20, 0x82eaad5bf02415a2, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x6, 0xcf7, &(0x7f0000001d00)={{0x12, 0x1, 0x200, 0xa1, 0x92, 0x2, 0x10, 0x187f, 0x310, 0xa3d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce5, 0x4, 0x2, 0x6, 0xf0, 0x0, [{{0x9, 0x4, 0x34, 0x0, 0x1, 0x8b, 0x4, 0x1e, 0x9, [@generic={0x7, 0x24, "d0d78cd23f"}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x7f, 0x4, 0x0, [@generic={0xc0, 0x1, "6f470a3720c7d946898821be3da7fc66348b78d81a65e317190b46e5a4701ddc5d8ef98192bcaedeb498bb510dc30d3a30856cbebf82911378b625d6ba2b2cb162d4f59f9d628d4e054e500ae6e8101b6affd643c6ac676589d57f004b805662f00f0f3dc67039291bbfdf8c83ce671192047e841d50234085c0c630dc181404adbf435076acabcefc6c5843af4e1b54fedf6bc0d8fbdbfde92afea34ef8793f2f5d9d44cf975daa0d0d2657f839c1c91ff937cba569e8f53e9db0c793ae"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1000}]}}]}}, {{0x9, 0x4, 0x97, 0x4, 0xe, 0xec, 0x9d, 0x54, 0xb5, [@hid_hid={0x9, 0x21, 0x7fff, 0xf, 0x1, {0x22, 0x231}}, @hid_hid={0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x243}}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x3, 0x7, 0x9}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x3, 0x1, 0x7, [@generic={0x1a, 0x0, "4e479784e2348677a005b59e3883a8980acda0e087a9c67b"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0xa, 0xa, 0x9}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x3, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x8, 0x10, 0xc, 0xb, 0xff, [@generic={0xe1, 0xf, "3e4b990e09823ad508d6d7924e22f6daff55db1d581f8ec998699f61b63141d07fdde817c5b39fe3eed1ee0403c43b4a553f82cdddd2a8de0ec5f6ee12cc45dfecc7dcfca6243ad2d33302d18b241353fcd60e2a6f7ab94cea8195b31f2c9a74de0adff8fb99ac732c47081b4af8d3ba0bb4eabc17be96fdc217df1404c0a760ef4f04395a851ea56cfd392b6ad9a9a8e6893c75d6674eb1bafbbc2e874bdcc1f07dbba5b16ab4602f4dc553c594d0d036b24ed60633d3b2df13f4ce83004b86a555563c5f78fe0f436a6d13b0e585802b7ff46ed8bdfbed739678928706ac"}, @generic={0xf7, 0x22, "1147d02e9aa9240634ff88af4d655e02c6eff6a9ee9b2b12cded3d14dfcf69b0b0537b0f8151a553d8d9277598b2577ab414373375d71eba53850d62027551595092b862d72d5c9a29c6bd7b99df5962c6cce078056161386dc3b623bcc76f1bb75631e1b0ef89ca6b1a96ed4a67093ece2b7a572c1479f8f8f18b63837cdd14d081071c5f780a289de358c9100120d4a0990d0a37f9606d8ec671cb130e6eceb01dadac19fcee1cb8b4c050ea2e31789c83adff0051ae05a8293eb80a3382d8537d62fb81834df26b6de3d92a978b8650bc7d955dd8a8c85747d7b804753fb67c4ae9e094af0aaa1102bdf19eb2087ec7bdf6fb2c"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x40, 0xe, 0x4, 0x6, [@generic={0xde, 0xd, "b728f5eb8cb2e6c9db0dd7948162d5d992a6f5ce91af1d8fe82f5a6a6a49f8c700e71349691f1c978173b1ea3e902decf0da6d1f87977aaedd698d3f1b9d184ef2fc839244abb1762b2d6c828078154a42de1e5c6d97e76bc2ae08ec6508b7b4a4f7cca2de46a4030da64f0b54f84dcda9bba20ba7ad392169d390badba77bcc708fc4a003c27288110dfb35aac3ce483fa8e6b64cdc75139bbee542ce088090bdf70e69034bcf857e8b246501027f37682785eccec3d512161bad1dc1d0754ddcd5c443ffb397c499df55ab62d40c3293cfc20b3d799329fee55457"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x12, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x2, 0xc, 0x6d, [@generic={0x6b, 0x8, "b629291247ce0cc113f7ed14535cc43e302c4c574f4756f27ed879e4c4095fd905afcf1e0cfc5c3a659cf8972f2be3a264f66550e82667d0a2ea8e736f34a26d7af1050617016ea20e57c48b48afade89f6eda25004d372fc527b293051d5df28de2bae5059abd50cb"}]}}, {{0x9, 0x5, 0x2, 0x16, 0x200, 0x2, 0x7}}, {{0x9, 0x5, 0x17, 0x10, 0x40, 0x1, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x40, 0x7, 0xac}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x9, 0x0, 0x8}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x8, 0x97, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfc, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3a, 0x248}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0x1, 0x7, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xc}, @generic={0xfe, 0x23, "c7ea860872857f2d588b6d316ec2fe283ca27a90af18a9008e81e73db617501cd8170f2980415e7fef99bac4adcfaa087833416f15c9a219b28e9bd4a43618c805a9341c33e77ce0073a8cd911528cc49ed4529625daf5ee99a7888093ec7cbefb2d63558cbf82c31e62983b2e5c76436bfd9ac7d193d91e5847e7a1977fe044ea2950c85a519c4d5ae152fe1a95dc755f76029a505c3aee14beae97b6f3953b286b536faa3c09b96ed9951d07b509c488068c1d53f95660e46f64fc7f31ca931a4a65efc48cb04e6f3b617474ab95717a455d63e1e1cf18f26f46ad4dfbe558283cebe891e99bb4ee1ed113b4acb7910bfd331b5a9055aa594de7ac"}]}}]}}, {{0x9, 0x4, 0x32, 0x73, 0xb, 0x58, 0x3e, 0x8a, 0x6, [@uac_as], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0x13, 0xd, [@generic={0xa2, 0xa, "266419ace985b6205ed0de33d86baf73a797b297275b77a1c9588b3fd37af37a89ba71c395b219544d6136aef3ac4816ff728a07d821458b6091cba5753c8c86c14cbb0dfd51ca89b6e7b465c5869427036806962784da0ad827a4fb2aa474794c9a609fc8a7a48adc452d9394e6431b24348bd05a79ad6eeea405fe0943aa4ebf4efa152d1a6fcd92ac565cac47f311657927e2f0613e2c623967ee8a30cdb6"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x2, 0x0, 0xd, [@generic={0x1f, 0x23, "915c13ffd78695a58af911e4cd933fed23cfef99f0a13ff729933920c0"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x68, 0x34b}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xf, 0x0, 0x10, [@generic={0xdf, 0x10, "279990421148450073a7e145dff40374177c8a03b03ea2c5f2178df372458f3895a739a8dacef57deb06b0e576d1ab2175912e1bf5d5db4f3740b6f7a16accbbf2d2ddd1d8175d8cf15a53d5ec78d9fa314f7b197f2ab9c03809bedb1450ed66292de9d1695396022c12deb193505c77e611fda9f0247edbcc30bec10e8388e11e704d62b8b7e581690378d588a596f3ce5246674ef6bb01e59f156e9f08508b3eb06bd16a3ea42e2160b815027399121dc45f8c21c2def36745b202a4eaa301b92c0aeca5e6ee1fea6e2f09468f73bb61cb25816c3c04f18ce28d5f63"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xf, 0x0, 0xc, [@generic={0x17, 0x7, "52d5733e9720f036de0b5a0b2ffa7446c5fb9a1242"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xe2, 0x7, 0x7}}, {{0x9, 0x5, 0xe, 0xc, 0x1ff, 0x0, 0xf, 0x40, [@generic={0x62, 0x24, "0d2c72d0c0aa94c6b4369578c6bbf88f47a5df1dc479cdebafe41be52ecec5636f77b9a5de353654e9935d92b94514488d5d2b5ece0364189e304a21d0137fdafb3539d6261a2be6c919b5be79e3b56adbaee9f2ee705acd431de367a4c91bbc"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x454, 0x8, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x81}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x4, 0xed, 0xcb, [@generic={0x2a, 0x8, "a0dc642c9a32507c4c83c9bb617f002ab602ef2816cbcc3c6503e31c60003b682b0906158e7066ea"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x5, 0x44}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x5, 0x66, 0x2}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x3, 0x1c, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x14}, @generic={0xa, 0x30, "40b1564db05c571d"}]}}]}}, {{0x9, 0x4, 0x73, 0x6, 0x10, 0xff, 0xb9, 0xe1, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x5, 0x1}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6, 0x2}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5c, 0xff, "ca30c1db219b"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x2}, @as_header={0x7, 0x24, 0x1, 0x9, 0x9}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0xc}]}], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0x28, 0x50, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x1, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x7}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf0, 0xdca}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x8, 0x59}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xb, 0x5, 0x7}}, {{0x9, 0x5, 0x53a780541cf23bde, 0x2, 0x8, 0x55, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0xd, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3b, 0x800}, @generic={0x66, 0x21, "b035bf9397bc37827cc2d259f64716b0edb18c1981c07dda1fda1db401ab2ae92a341ba694eb42f6ba3043b104cd4f44a32cddeb1ddb6d03ba7bb6ede5f85045fdb85139e768b2eaef16752cd9cbfb2081f93f2d4a8a42b7e42f2a415fc77438a3425ace"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xf, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x1}, @generic={0xf8, 0x8, "01dd69e88103391cf6f863669f5b6fb244d3c2c3e6902d974438ea220d93a04cdd588a2a059f143ca1c8d730026cbe47e174d4f5270211d9f4a467d6eb4102657974bdeab9e4424dd9b845b14b1d47d2806745506eafa6e73a400a98ff888635ec8e3eb1a94affb427a7cfe4e29f327bf22dd54b6a0d94f3a3d54f094933ba59ae78bbf076d6fa3f02dae68717a2fbf6fa52b7c44e757797971f36cc54dbd64c8bc92e82c711dcb9a5fda26c2a370e53b414038aa6af83f5bc1e56ba5360a2e2df5e14fcc608491b993005cb64336339ee5f82c69193c1f97f3e4d856ff950a328cb4d40f0473ed1ca8837f25a5333db54f228ad453c"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x1, 0x85, 0x1}}, {{0x9, 0x5, 0xe, 0x8, 0x200, 0x8, 0x4}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x4, 0x1d, 0xc, [@generic={0xf9, 0xa, "1e250d3424bf507f13a8b41d9d3a0828fd486acc11c73faa65fb768975932aded0a03ea308df158762362c723886f2f76840008f4df7da0fef98dae5ab0a3d0db3ea50fb3500cb7a1ff2a06128250a7b50d22b8cfe36e4602d3b322e97a757c8000d034d3cc769fecbb6bf8974a79b46dd32ffb78f774c026a1090946c7796bd44e369f5b6e407768f1d8d6d090517b2d3897c29c2ef5253be3ef4d005b66a1c5e4bf94d81751ceaaa993093a62b1016f826b483ea41dd07b01eaf6857731089da03b247d335bfc6b4fe69d532b31c3e18ee1fa24e13dc6d50bb50b2406501959e405770ace3d23f226eca49aed836de58b10688205fa9"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x3, 0x8, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x16, 0x4}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x5, 0x78, 0x1}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0x8, 0x7, 0x9}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0xd, 0x6, 0x2}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0x1, 0xcb, [@generic={0xc2, 0xe, "887e7cf917f0f7efeea054f9fd4e449730d2bf9aede3d2d9a5943daa92fe0d7d543a19d3f69de24d9e99f229edecc857f845af00116d5df0d383d6bef3e31cff815649d46f0bdfa79f3d2672fdc3bd725c1e72a3c5251b8b5c14a867879c05fd2f38cb4c6f352694cf17cd5aa3cfd2f8cc91c6cafa28645bc22d676b803de8f853a14213051c44685c60e1a73051fb3dbd5f8e8b4b2b72751f2154dd3b757df8b0c4fcbeee8add8751f7fc07a47316ed4711e2465d35e7c891665f91760f1042"}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x28, 0xa, 0x7, 0x8, 0xf7}, 0x3f, &(0x7f0000000440)={0x5, 0xf, 0x3f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xfe, "3a616555507f8afc652dbe59ec6b0bb9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x9, 0x6907}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xd, 0xfff8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xad, 0x8f, 0x2770}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xfd, 0x7f, 0x1, 0x7}]}, 0x2, [{0x100, &(0x7f0000000740)=@string={0x100, 0x3, "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"}}, {0xc1, &(0x7f00000004c0)=@string={0xc1, 0x3, "ffd3749bb73f92d34cd21f5839d79d73a51d782e1b88f0225bb58ee508f3f514fb040cedc61e6264cd72273d55257fffef71644af7278e2ebb5209aa8c4d412d003ded611a2d840dd4776cb4f0b658fd010f2145c0bc1e815847b1fdb90629e74d00d6aebaa11a11bf0290907a0d0e1a8fb99aea6add6bc18fb708b1d6d4911da7a9b6f71733bfa7824f68631db2b4a6e482fedb5381c76fac0c0ca664c10e4376c87180c902e181c992c3fe87ae279880c523fad4845a189cbe9170504dde"}}]}) ioctl$TIOCSBRK(r9, 0x5427) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f00000001c0)={0x1, 0x3, 0x1, &(0x7f0000000140)={0x8, "b1c512abbe574890fc865ae9b48a50e65900"}}) 1.487299621s ago: executing program 0 (id=352): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_create_resource$binfmt(0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x9, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3, 0xfff6, 0x64, 0x15, 0x1, 0x0, 0x3, @local, @loopback}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x10000085}, 0x3c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, &(0x7f0000000240), 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000500), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xff7fffff}, 0x1c) 1.465865625s ago: executing program 2 (id=353): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getpgrp(0x0) 1.152840901s ago: executing program 4 (id=354): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_create_resource$binfmt(0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x9, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3, 0xfff6, 0x64, 0x15, 0x1, 0x0, 0x3, @local, @loopback}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x10000085}, 0x3c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, &(0x7f0000000240), 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000500), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xff7fffff}, 0x1c) 282.036319ms ago: executing program 2 (id=355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000001000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 128.407163ms ago: executing program 2 (id=356): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file6\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c000000090002"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x200000005c831, r0, 0x0) 72.834551ms ago: executing program 0 (id=357): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1b010000000000407e050e2000000000000109022400010000100309040000010300000009210000080122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, 'Hic~'}]}}, &(0x7f0000001040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x80, 0x1, {0x22, 0x36b}}}}, &(0x7f00000012c0)={0x2c, &(0x7f00000010c0)={0x0, 0x15, 0x2f, "adfe5d61f2223e1edfd188954caa8bd0c60696f59a2ea933bf2bea8781bc74780203006faec4fabbf7395ef3b34b34"}, 0x0, &(0x7f0000001140)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001180)={0x20, 0x1, 0xce, "79ae14db5c3d1adab54a2248b2b2234fe2d589e9e6eb7573fc4bc739bb5e7a3432b71844e3da0aaaa09ee78f02877a621d4db563f79f80bce75582616b9cb9656fd5c2cd7a80a440f0d1a21060bf7317cccf1c52e663bf96702ad85274a9115583fad854de4550372abc7cdee41b20955286205974801f09e1f807059197029a9b677096a69c78b051b196ff90bad84ace2987352cbdfcece0e1c6156ae76e0a1ce4d52b59d6bbc0018a2850f363b03e4748aef0c3955f22a0f8412dd699bf686da55a64cedd8ce3528f675054bf"}, &(0x7f0000001280)={0x20, 0x3, 0x1, 0x5}}) 0s ago: executing program 4 (id=358): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0)}, {&(0x7f0000000900), 0xffffffffffffff05}], 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f000000c940)={'ip6tnl0\x00', {0x2, 0x4e22, @empty}}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x6, 0x0, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="1400a90000000000000000000000000000000001583a617ab50bab13a80c8a41475c0892d2093a159beef325bcf5a3bec0c4468df6de7f021972ea0735ded688d3513c4b153cbd91cefa0a3d746dd3132113043032a09c4f68e400e88235d786d2f345989767f2a5563dd5c63a56a4aba8f8b6aa558271efb307c70c4cdfd2c85f6dcafd75c437f46b165f4bddee4ab7db1c955822e50e2a66681e7d57b494381a29dde3704d86553dfa07e7bde6d9208d4508d2f899b880b21b955d8f37fe542432a82760a9ddc8d06a6e6dea2968707a1c7f952c9e103680d2da00"], 0x390}, 0x1, 0x0, 0x0, 0x24008801}, 0x24040005) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000000), &(0x7f00000000c0)=""/241}, 0x20) setresuid(0x0, r4, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa0009050c7f"], 0x0) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered disabled state [ 63.162144][ T5821] bridge_slave_1: entered allmulticast mode [ 63.168766][ T5821] bridge_slave_1: entered promiscuous mode [ 63.228734][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.236002][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.243494][ T5815] bridge_slave_0: entered allmulticast mode [ 63.250123][ T5815] bridge_slave_0: entered promiscuous mode [ 63.277480][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.297440][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.304578][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.312120][ T5815] bridge_slave_1: entered allmulticast mode [ 63.318721][ T5815] bridge_slave_1: entered promiscuous mode [ 63.333512][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.398138][ T5821] team0: Port device team_slave_0 added [ 63.404331][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.411716][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.418782][ T5814] bridge_slave_0: entered allmulticast mode [ 63.425742][ T5814] bridge_slave_0: entered promiscuous mode [ 63.435725][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.453248][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.460325][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.467491][ T5816] bridge_slave_0: entered allmulticast mode [ 63.474983][ T5816] bridge_slave_0: entered promiscuous mode [ 63.490546][ T5821] team0: Port device team_slave_1 added [ 63.496465][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.503770][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.510845][ T5814] bridge_slave_1: entered allmulticast mode [ 63.517712][ T5814] bridge_slave_1: entered promiscuous mode [ 63.525574][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.543592][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.550657][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.558171][ T5816] bridge_slave_1: entered allmulticast mode [ 63.564797][ T5816] bridge_slave_1: entered promiscuous mode [ 63.580279][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.587749][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.594867][ T5817] bridge_slave_0: entered allmulticast mode [ 63.601519][ T5817] bridge_slave_0: entered promiscuous mode [ 63.637825][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.646214][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.653672][ T5817] bridge_slave_1: entered allmulticast mode [ 63.660260][ T5817] bridge_slave_1: entered promiscuous mode [ 63.693252][ T5815] team0: Port device team_slave_0 added [ 63.700815][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.718567][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.725740][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.751684][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.764873][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.776570][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.786804][ T5815] team0: Port device team_slave_1 added [ 63.794483][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.805581][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.815664][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.822612][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.848700][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.894489][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.917356][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.924639][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.950948][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.987068][ T5817] team0: Port device team_slave_0 added [ 63.995339][ T5814] team0: Port device team_slave_0 added [ 64.002780][ T5814] team0: Port device team_slave_1 added [ 64.019126][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.026181][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.052587][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.065566][ T5816] team0: Port device team_slave_0 added [ 64.081994][ T5817] team0: Port device team_slave_1 added [ 64.101821][ T5816] team0: Port device team_slave_1 added [ 64.131779][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.138721][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.164906][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.177512][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.184537][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.211259][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.233839][ T5821] hsr_slave_0: entered promiscuous mode [ 64.239863][ T5821] hsr_slave_1: entered promiscuous mode [ 64.247279][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.254328][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.280477][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.306323][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.313339][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.340222][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.352867][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.359794][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.385795][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.411723][ T50] Bluetooth: hci1: command tx timeout [ 64.411796][ T5823] Bluetooth: hci0: command tx timeout [ 64.417270][ T50] Bluetooth: hci4: command tx timeout [ 64.435283][ T5815] hsr_slave_0: entered promiscuous mode [ 64.441577][ T5815] hsr_slave_1: entered promiscuous mode [ 64.447709][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.455400][ T5815] Cannot create hsr debugfs directory [ 64.461971][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.468901][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.494996][ T50] Bluetooth: hci3: command tx timeout [ 64.495033][ T5823] Bluetooth: hci2: command tx timeout [ 64.500923][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.561880][ T5814] hsr_slave_0: entered promiscuous mode [ 64.567852][ T5814] hsr_slave_1: entered promiscuous mode [ 64.574329][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.582097][ T5814] Cannot create hsr debugfs directory [ 64.614448][ T5817] hsr_slave_0: entered promiscuous mode [ 64.620427][ T5817] hsr_slave_1: entered promiscuous mode [ 64.626427][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.634368][ T5817] Cannot create hsr debugfs directory [ 64.657405][ T5816] hsr_slave_0: entered promiscuous mode [ 64.664232][ T5816] hsr_slave_1: entered promiscuous mode [ 64.670050][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.677743][ T5816] Cannot create hsr debugfs directory [ 65.029336][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.041483][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.060556][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.075992][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.124867][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.134948][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.144347][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.154126][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.223414][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.233851][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.245566][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.262819][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.346150][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.356125][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.369893][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.380990][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.393101][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.469140][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.480755][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.489557][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.498751][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.529839][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.538730][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.553570][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.560724][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.572168][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.579219][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.615367][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.628238][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.656048][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.663185][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.672639][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.679681][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.716702][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.751042][ T3463] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.758149][ T3463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.793427][ T30] audit: type=1400 audit(1749441472.326:86): avc: denied { sys_module } for pid=5817 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.858391][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.865876][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.918469][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.996839][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.048253][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.066934][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.078559][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.085726][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.109198][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.116324][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.180605][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.196281][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.242166][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.249267][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.269608][ T5817] veth0_vlan: entered promiscuous mode [ 66.279683][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.286764][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.319541][ T5817] veth1_vlan: entered promiscuous mode [ 66.390859][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.403063][ T5821] veth0_vlan: entered promiscuous mode [ 66.427307][ T5817] veth0_macvtap: entered promiscuous mode [ 66.469325][ T5821] veth1_vlan: entered promiscuous mode [ 66.477645][ T5817] veth1_macvtap: entered promiscuous mode [ 66.492815][ T5823] Bluetooth: hci0: command tx timeout [ 66.494080][ T50] Bluetooth: hci1: command tx timeout [ 66.498196][ T5830] Bluetooth: hci4: command tx timeout [ 66.534453][ T5815] veth0_vlan: entered promiscuous mode [ 66.569587][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.571501][ T5823] Bluetooth: hci2: command tx timeout [ 66.582822][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.585434][ T5830] Bluetooth: hci3: command tx timeout [ 66.595753][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.604768][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.613637][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.622337][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.640038][ T5815] veth1_vlan: entered promiscuous mode [ 66.689851][ T5821] veth0_macvtap: entered promiscuous mode [ 66.707676][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.750831][ T5821] veth1_macvtap: entered promiscuous mode [ 66.762122][ T5815] veth0_macvtap: entered promiscuous mode [ 66.788746][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.809645][ T5815] veth1_macvtap: entered promiscuous mode [ 66.854552][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.866020][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.877206][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.917696][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.949995][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.972729][ T5814] veth0_vlan: entered promiscuous mode [ 66.986704][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.997017][ T5821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.006849][ T5821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.019321][ T5821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.028704][ T5821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.054291][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.057188][ T5814] veth1_vlan: entered promiscuous mode [ 67.067643][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.077729][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.086616][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.100185][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.108933][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.150527][ T30] audit: type=1400 audit(1749441473.676:87): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.bvZ08G/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.175350][ T30] audit: type=1400 audit(1749441473.696:88): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.198661][ T30] audit: type=1400 audit(1749441473.696:89): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.bvZ08G/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.218412][ T5814] veth0_macvtap: entered promiscuous mode [ 67.240869][ T30] audit: type=1400 audit(1749441473.696:90): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.244327][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.267765][ T30] audit: type=1400 audit(1749441473.696:91): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.bvZ08G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.309954][ T30] audit: type=1400 audit(1749441473.706:92): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/root/syzkaller.bvZ08G/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.318257][ T5816] veth0_vlan: entered promiscuous mode [ 67.343719][ T30] audit: type=1400 audit(1749441473.706:93): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.366087][ T30] audit: type=1400 audit(1749441473.736:94): avc: denied { mounton } for pid=5817 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.397437][ T5814] veth1_macvtap: entered promiscuous mode [ 67.403803][ T30] audit: type=1400 audit(1749441473.736:95): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="gadgetfs" ino=6028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.426794][ T30] audit: type=1400 audit(1749441473.736:96): avc: denied { mount } for pid=5817 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.463373][ T5816] veth1_vlan: entered promiscuous mode [ 67.525577][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.539509][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.566144][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.580804][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.589304][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.604727][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.759041][ T5816] veth0_macvtap: entered promiscuous mode [ 67.810799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.931831][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.940766][ T5814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971127][ T5814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.980120][ T5814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.000732][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.008916][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.195510][ T5816] veth1_macvtap: entered promiscuous mode [ 68.288332][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.291245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.299240][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.304666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.418952][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.474381][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.510478][ T5816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.520631][ T5816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.533861][ T5816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.543462][ T5816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.572617][ T5940] Zero length message leads to an empty skb [ 68.575007][ T5830] Bluetooth: hci1: command tx timeout [ 68.584960][ T5823] Bluetooth: hci0: command tx timeout [ 68.590356][ T5823] Bluetooth: hci4: command tx timeout [ 68.651515][ T5823] Bluetooth: hci3: command tx timeout [ 68.656938][ T5823] Bluetooth: hci2: command tx timeout [ 68.693165][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.712373][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.811296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.835028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.088596][ T5948] xt_recent: hitcount (2147483647) is larger than allowed maximum (65535) [ 69.173009][ T5948] afs: Unknown parameter 'dynolicy' [ 69.213650][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.222910][ T5948] overlayfs: overlapping lowerdir path [ 69.240872][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.365855][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.387713][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.416837][ T3463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.496776][ T3463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.667219][ T5823] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 70.141776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.321937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.657534][ T5823] Bluetooth: hci0: command tx timeout [ 70.663338][ T5830] Bluetooth: hci4: command tx timeout [ 70.663355][ T50] Bluetooth: hci1: command tx timeout [ 70.731605][ T50] Bluetooth: hci2: command tx timeout [ 70.731624][ T5823] Bluetooth: hci3: command tx timeout [ 71.035343][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.045272][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.211945][ T115] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 71.593756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.603473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 71.612765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.468860][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 72.468877][ T30] audit: type=1400 audit(1749441478.596:166): avc: denied { ioctl } for pid=5997 comm="syz.1.20" path="socket:[8298]" dev="sockfs" ino=8298 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.504502][ T115] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 72.586238][ T115] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 72.588054][ T30] audit: type=1400 audit(1749441479.116:167): avc: denied { setopt } for pid=6002 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.751514][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.759534][ T115] usb 4-1: Product: syz [ 72.761077][ T30] audit: type=1400 audit(1749441479.276:168): avc: denied { unlink } for pid=6002 comm="syz.4.21" name="#1" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.785470][ T115] usb 4-1: Manufacturer: syz [ 72.785501][ T115] usb 4-1: SerialNumber: syz [ 72.856275][ T30] audit: type=1400 audit(1749441479.276:169): avc: denied { mount } for pid=6002 comm="syz.4.21" name="/" dev="overlay" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.129894][ T5956] Process accounting resumed [ 74.186963][ T115] usb 4-1: can't set config #2, error -71 [ 74.206745][ T30] audit: type=1400 audit(1749441479.476:170): avc: denied { create } for pid=6002 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.246967][ T115] usb 4-1: USB disconnect, device number 2 [ 74.690240][ T30] audit: type=1400 audit(1749441479.476:171): avc: denied { connect } for pid=6002 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.776938][ T30] audit: type=1400 audit(1749441479.476:172): avc: denied { write } for pid=6002 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.491630][ T30] audit: type=1400 audit(1749441479.476:173): avc: denied { create } for pid=6002 comm="syz.4.21" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.576378][ T30] audit: type=1400 audit(1749441479.486:174): avc: denied { link } for pid=6002 comm="syz.4.21" name="#3" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.608215][ T30] audit: type=1400 audit(1749441479.486:175): avc: denied { rename } for pid=6002 comm="syz.4.21" name="#4" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.297583][ T6025] batadv_slave_0: entered promiscuous mode [ 76.341801][ T6025] FAULT_INJECTION: forcing a failure. [ 76.341801][ T6025] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.373229][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: syz.4.26 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 76.373245][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.373252][ T6025] Call Trace: [ 76.373256][ T6025] [ 76.373260][ T6025] dump_stack_lvl+0x16c/0x1f0 [ 76.373285][ T6025] should_fail_ex+0x512/0x640 [ 76.373303][ T6025] _copy_from_iter+0x29f/0x16f0 [ 76.373320][ T6025] ? __alloc_skb+0x200/0x380 [ 76.373337][ T6025] ? __pfx__copy_from_iter+0x10/0x10 [ 76.373353][ T6025] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 76.373370][ T6025] netlink_sendmsg+0x829/0xdd0 [ 76.373384][ T6025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.373401][ T6025] sock_write_iter+0x4fc/0x5b0 [ 76.373414][ T6025] ? __pfx_sock_write_iter+0x10/0x10 [ 76.373430][ T6025] ? bpf_lsm_file_permission+0x9/0x10 [ 76.373448][ T6025] ? security_file_permission+0x71/0x210 [ 76.373465][ T6025] ? rw_verify_area+0xcf/0x680 [ 76.373478][ T6025] vfs_write+0x6c7/0x1150 [ 76.373492][ T6025] ? __pfx_sock_write_iter+0x10/0x10 [ 76.373505][ T6025] ? __pfx_vfs_write+0x10/0x10 [ 76.373517][ T6025] ? find_held_lock+0x2b/0x80 [ 76.373539][ T6025] ksys_write+0x1f8/0x250 [ 76.373552][ T6025] ? __pfx_ksys_write+0x10/0x10 [ 76.373569][ T6025] do_syscall_64+0xcd/0x4c0 [ 76.373587][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.373598][ T6025] RIP: 0033:0x7f4278b8e929 [ 76.373607][ T6025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.373617][ T6025] RSP: 002b:00007f42799d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.373627][ T6025] RAX: ffffffffffffffda RBX: 00007f4278db5fa0 RCX: 00007f4278b8e929 [ 76.373634][ T6025] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000004 [ 76.373640][ T6025] RBP: 00007f42799d1090 R08: 0000000000000000 R09: 0000000000000000 [ 76.373646][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.373652][ T6025] R13: 0000000000000000 R14: 00007f4278db5fa0 R15: 00007ffc351ccc78 [ 76.373665][ T6025] [ 76.373856][ T6024] batadv_slave_0: left promiscuous mode [ 78.712222][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 78.712238][ T30] audit: type=1400 audit(1749441485.236:201): avc: denied { create } for pid=6047 comm="syz.3.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.989843][ T30] audit: type=1400 audit(1749441485.506:202): avc: denied { create } for pid=6052 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.259132][ T30] audit: type=1400 audit(1749441485.526:203): avc: denied { listen } for pid=6052 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 79.322698][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 80.605583][ T30] audit: type=1400 audit(1749441486.406:204): avc: denied { append } for pid=6057 comm="syz.1.36" name="video9" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.672261][ T30] audit: type=1400 audit(1749441486.416:205): avc: denied { read } for pid=6057 comm="syz.1.36" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.278081][ T976] cfg80211: failed to load regulatory.db [ 81.292125][ T30] audit: type=1400 audit(1749441486.416:206): avc: denied { open } for pid=6057 comm="syz.1.36" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 81.430895][ T30] audit: type=1400 audit(1749441487.706:207): avc: denied { name_bind } for pid=6071 comm="syz.2.38" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 81.641129][ T30] audit: type=1400 audit(1749441487.716:208): avc: denied { create } for pid=6071 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.847409][ T30] audit: type=1400 audit(1749441487.726:209): avc: denied { ioctl } for pid=6071 comm="syz.2.38" path="socket:[7973]" dev="sockfs" ino=7973 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.269759][ T5880] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.292010][ T30] audit: type=1400 audit(1749441488.676:210): avc: denied { name_bind } for pid=6081 comm="syz.3.41" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.506328][ T6089] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET) [ 82.860112][ T6083] xt_TPROXY: Can be used only with -p tcp or -p udp [ 82.961409][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 83.031863][ T6093] Bluetooth: MGMT ver 1.23 [ 83.042604][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.075436][ T5880] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 83.152046][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.197356][ T5880] usb 2-1: config 0 descriptor?? [ 83.371205][ T5941] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.447966][ T6093] netlink: 56 bytes leftover after parsing attributes in process `syz.0.44'. [ 83.666219][ T5941] usb 4-1: device descriptor read/64, error -71 [ 84.038435][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 84.038450][ T30] audit: type=1400 audit(1749441490.566:225): avc: denied { load_policy } for pid=6079 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.071928][ T5941] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.132522][ T6080] SELinux: failed to load policy [ 84.332854][ T30] audit: type=1400 audit(1749441490.856:226): avc: denied { read } for pid=6122 comm="syz.4.49" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.333277][ T5941] usb 4-1: device descriptor read/64, error -71 [ 84.389534][ T30] audit: type=1400 audit(1749441490.856:227): avc: denied { open } for pid=6122 comm="syz.4.49" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.454167][ T30] audit: type=1400 audit(1749441490.856:228): avc: denied { ioctl } for pid=6122 comm="syz.4.49" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.490834][ T5880] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 84.501234][ T5880] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 84.546702][ T5941] usb usb4-port1: attempt power cycle [ 84.602041][ T6130] syz_tun: entered allmulticast mode [ 84.626328][ T30] audit: type=1400 audit(1749441491.156:229): avc: denied { write } for pid=6128 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.903582][ T30] audit: type=1400 audit(1749441491.156:230): avc: denied { name_connect } for pid=6128 comm="syz.0.50" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 84.905712][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.951625][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.965730][ T6128] syz_tun: left allmulticast mode [ 85.025300][ T30] audit: type=1400 audit(1749441491.556:231): avc: denied { connect } for pid=6131 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.050775][ T30] audit: type=1400 audit(1749441491.556:232): avc: denied { write } for pid=6131 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.102181][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.124997][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.152538][ T5936] usb 2-1: USB disconnect, device number 2 [ 85.160343][ T30] audit: type=1400 audit(1749441491.686:233): avc: denied { read } for pid=6133 comm="syz.4.52" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.213487][ T5941] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.220041][ T30] audit: type=1400 audit(1749441491.686:234): avc: denied { open } for pid=6133 comm="syz.4.52" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 85.257541][ T5941] usb 4-1: device descriptor read/8, error -71 [ 85.651207][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 85.682838][ T5941] usb 4-1: device descriptor read/8, error -71 [ 85.805718][ T6146] netlink: 44 bytes leftover after parsing attributes in process `syz.4.55'. [ 85.873121][ T6149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.891183][ T5880] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.909514][ T5941] usb usb4-port1: unable to enumerate USB device [ 86.072636][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.095795][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.125347][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 103, setting to 64 [ 86.156682][ T5880] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 86.182013][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.215118][ T5880] usb 1-1: config 0 descriptor?? [ 86.242382][ T6144] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.303142][ T5880] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 86.374998][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.382918][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.390190][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.397527][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.404814][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.412561][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.419872][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.427369][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.434694][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.442043][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.449880][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.457686][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.465048][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.472406][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.479734][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.487076][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.494458][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.501775][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.509122][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.516441][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.523773][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.531083][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.538410][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.545756][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.553923][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.561340][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.568670][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.576058][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.581102][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.583329][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.598128][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.605401][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.613254][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.620582][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.627898][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.635229][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.642817][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.650112][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.658446][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.666335][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.674916][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.683238][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.690680][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.698106][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.705559][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.712830][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.720095][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.727444][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.735543][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.742881][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.750191][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.757999][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.765774][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.773073][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.780366][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.787691][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.794996][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.802317][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.809782][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.817103][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.824416][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.831717][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.839036][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.846853][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.854295][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.864059][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.871387][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.875489][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 86.879234][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.890897][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.899294][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.906779][ T5176] usb 1-1: control msg error: -71 [ 86.912021][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.919407][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.927541][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.929873][ T5936] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 86.934821][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.951084][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.954587][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.958383][ C0] usb 1-1: pegasus_irq - urb shutting down with status: -2 [ 86.984988][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.992307][ C0] usb 1-1: pegasus_irq - nonzero urb status received: -71 [ 86.997227][ T5880] usb 1-1: USB disconnect, device number 2 [ 86.999412][ C0] usb 1-1: pegasus_irq - usb_submit_urb failed with result -19 [ 87.012858][ T5176] usb 1-1: control msg error: -71 [ 87.028192][ T5936] usb 5-1: config 0 descriptor?? [ 87.114483][ T5936] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 87.364369][ T5176] bcm5974 5-1:0.0: could not read from device [ 87.365615][ T5880] usb 5-1: USB disconnect, device number 2 [ 87.397914][ T5176] bcm5974 5-1:0.0: could not read from device [ 87.407859][ T6159] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 87.438747][ T5827] bcm5974 5-1:0.0: could not read from device [ 87.470625][ T5176] bcm5974 5-1:0.0: could not read from device [ 87.691123][ T1208] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 87.871090][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 87.877828][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.921873][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.110393][ T6172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.074136][ T1208] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 89.084185][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.106555][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 89.106592][ T30] audit: type=1400 audit(1749441494.636:249): avc: denied { ioctl } for pid=6168 comm="syz.2.63" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8580 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.182985][ T1208] usb 4-1: config 0 descriptor?? [ 89.479442][ T30] audit: type=1400 audit(1749441495.686:250): avc: denied { connect } for pid=6169 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 89.517628][ T1208] usb 4-1: can't set config #0, error -71 [ 89.528084][ T1208] usb 4-1: USB disconnect, device number 7 [ 89.705093][ T6179] syz_tun: entered allmulticast mode [ 92.510582][ T6175] syz_tun: left allmulticast mode [ 92.512466][ T30] audit: type=1400 audit(1749441496.586:251): avc: denied { shutdown } for pid=6176 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.745623][ T30] audit: type=1400 audit(1749441496.586:252): avc: denied { ioctl } for pid=6176 comm="syz.2.67" path="socket:[8596]" dev="sockfs" ino=8596 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.801542][ T30] audit: type=1400 audit(1749441496.586:253): avc: denied { read } for pid=6176 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.867513][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.68'. [ 92.969228][ T30] audit: type=1400 audit(1749441498.986:254): avc: denied { connect } for pid=6174 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.042132][ T30] audit: type=1400 audit(1749441498.986:255): avc: denied { setopt } for pid=6174 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.081287][ T30] audit: type=1400 audit(1749441499.546:256): avc: denied { ioctl } for pid=6182 comm="syz.4.68" path="socket:[8607]" dev="sockfs" ino=8607 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.114108][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 93.236023][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 93.265609][ T30] audit: type=1400 audit(1749441499.796:257): avc: denied { create } for pid=6199 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.352274][ T30] audit: type=1400 audit(1749441499.796:258): avc: denied { write } for pid=6199 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.421290][ T6203] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 93.447971][ T6203] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 93.741133][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 93.782601][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 93.951059][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.990691][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 94.127143][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.211143][ T10] usb 4-1: Product: syz [ 94.215362][ T10] usb 4-1: Manufacturer: syz [ 94.219958][ T10] usb 4-1: SerialNumber: syz [ 94.232653][ T10] usb 4-1: config 0 descriptor?? [ 94.241203][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 94.250432][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 94.274729][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 94.274744][ T30] audit: type=1400 audit(1749441500.806:260): avc: denied { write } for pid=6207 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.739835][ T30] audit: type=1400 audit(1749441501.266:261): avc: denied { execute } for pid=6215 comm="syz.4.77" path="/16/file1" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.766650][ T30] audit: type=1400 audit(1749441501.296:262): avc: denied { append } for pid=6217 comm="syz.1.79" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.793188][ T30] audit: type=1400 audit(1749441501.296:263): avc: denied { create } for pid=6216 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.820022][ T30] audit: type=1400 audit(1749441501.296:264): avc: denied { bind } for pid=6216 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 94.848548][ T30] audit: type=1400 audit(1749441501.326:265): avc: denied { write } for pid=6216 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.025915][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 95.046447][ T10] em28xx 4-1:0.0: Config register raw data: 0x41 [ 95.471229][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.481088][ T5936] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.632585][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.707979][ T5936] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 95.803898][ T5936] usb 3-1: config 0 has no interface number 0 [ 95.894744][ T5936] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 95.918017][ T6230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.70'. [ 96.026280][ T5936] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 96.814886][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.836066][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.847135][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 96.856445][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.866800][ T9] usb 5-1: config 0 descriptor?? [ 97.064316][ T5936] usb 3-1: config 0 descriptor?? [ 97.197100][ T5936] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input7 [ 97.768432][ T30] audit: type=1400 audit(1749441504.296:266): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2814 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.912740][ T6240] syz_tun: entered allmulticast mode [ 98.138845][ T6236] syz_tun: left allmulticast mode [ 98.147401][ T9] usbhid 5-1:0.0: can't add hid device: -32 [ 98.164403][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 98.208293][ T9] usb 4-1: USB disconnect, device number 8 [ 98.312343][ C1] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 98.786664][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 98.835595][ T10] usb 3-1: USB disconnect, device number 2 [ 98.850932][ T30] audit: type=1400 audit(1749441504.926:267): avc: denied { mount } for pid=6224 comm="syz.4.80" name="/" dev="ramfs" ino=9381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 98.914976][ T9] em28xx 4-1:0.0: Freeing device [ 98.954738][ T30] audit: type=1400 audit(1749441505.306:268): avc: denied { create } for pid=6239 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.833255][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.027165][ T976] usb 5-1: USB disconnect, device number 3 [ 100.404230][ T6269] FAULT_INJECTION: forcing a failure. [ 100.404230][ T6269] name failslab, interval 1, probability 0, space 0, times 0 [ 100.417882][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.3.92 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 100.417905][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.417915][ T6269] Call Trace: [ 100.417921][ T6269] [ 100.417927][ T6269] dump_stack_lvl+0x16c/0x1f0 [ 100.417957][ T6269] should_fail_ex+0x512/0x640 [ 100.417980][ T6269] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 100.418012][ T6269] should_failslab+0xc2/0x120 [ 100.418037][ T6269] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 100.418059][ T6269] ? _copy_from_iter+0x15d/0x16f0 [ 100.418082][ T6269] ? __alloc_skb+0x2b2/0x380 [ 100.418111][ T6269] __alloc_skb+0x2b2/0x380 [ 100.418135][ T6269] ? __pfx___alloc_skb+0x10/0x10 [ 100.418162][ T6269] ? __lock_acquire+0xb8a/0x1c90 [ 100.418189][ T6269] ? __asan_memset+0x23/0x50 [ 100.418211][ T6269] tipc_buf_acquire+0x26/0xe0 [ 100.418233][ T6269] tipc_msg_build+0x853/0x1150 [ 100.418261][ T6269] ? __pfx_tipc_msg_build+0x10/0x10 [ 100.418289][ T6269] ? mark_held_locks+0x49/0x80 [ 100.418312][ T6269] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 100.418339][ T6269] tipc_send_group_bcast+0x7cc/0xa50 [ 100.418377][ T6269] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 100.418407][ T6269] ? __pfx_woken_wake_function+0x10/0x10 [ 100.418427][ T6269] ? down_write+0x14d/0x200 [ 100.418450][ T6269] ? find_held_lock+0x2b/0x80 [ 100.418471][ T6269] ? avc_has_perm_noaudit+0x117/0x3b0 [ 100.418493][ T6269] __tipc_sendmsg+0x4ab/0x19a0 [ 100.418514][ T6269] ? securityfs_create_dentry+0x474/0x510 [ 100.418543][ T6269] ? __pfx___tipc_sendmsg+0x10/0x10 [ 100.418586][ T6269] ? __local_bh_enable_ip+0xa4/0x120 [ 100.418611][ T6269] tipc_sendmsg+0x4f/0x70 [ 100.418630][ T6269] ____sys_sendmsg+0xa98/0xc70 [ 100.418651][ T6269] ? copy_msghdr_from_user+0x10a/0x160 [ 100.418676][ T6269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.418698][ T6269] ? __pfx__kstrtoull+0x10/0x10 [ 100.418738][ T6269] ___sys_sendmsg+0x134/0x1d0 [ 100.418763][ T6269] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.418801][ T6269] ? find_held_lock+0x2b/0x80 [ 100.418836][ T6269] __sys_sendmmsg+0x200/0x420 [ 100.418867][ T6269] ? __pfx___sys_sendmmsg+0x10/0x10 [ 100.418902][ T6269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.418937][ T6269] ? fput+0x70/0xf0 [ 100.418951][ T6269] ? ksys_write+0x1ac/0x250 [ 100.418971][ T6269] ? __pfx_ksys_write+0x10/0x10 [ 100.418997][ T6269] __x64_sys_sendmmsg+0x9c/0x100 [ 100.419025][ T6269] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.419047][ T6269] do_syscall_64+0xcd/0x4c0 [ 100.419072][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.419088][ T6269] RIP: 0033:0x7f8ee1b8e929 [ 100.419103][ T6269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.419119][ T6269] RSP: 002b:00007f8ee2997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 100.419135][ T6269] RAX: ffffffffffffffda RBX: 00007f8ee1db5fa0 RCX: 00007f8ee1b8e929 [ 100.419145][ T6269] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000004 [ 100.419155][ T6269] RBP: 00007f8ee2997090 R08: 0000000000000000 R09: 0000000000000000 [ 100.419164][ T6269] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.419174][ T6269] R13: 0000000000000000 R14: 00007f8ee1db5fa0 R15: 00007ffdb9c33058 [ 100.419197][ T6269] [ 100.421984][ T30] audit: type=1400 audit(1749441506.956:269): avc: denied { read } for pid=6268 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.602063][ T6274] netlink: 72 bytes leftover after parsing attributes in process `syz.0.94'. [ 100.637196][ T30] audit: type=1400 audit(1749441507.176:270): avc: denied { create } for pid=6272 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.705100][ T976] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.823913][ T10] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 100.835616][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.843923][ T10] usb 3-1: Product: syz [ 100.854948][ T10] usb 3-1: Manufacturer: syz [ 100.868703][ T10] usb 3-1: SerialNumber: syz [ 100.881934][ T10] usb 3-1: config 0 descriptor?? [ 100.991144][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 100.998325][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 101.009819][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 101.026038][ T976] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 101.037747][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 101.053700][ T976] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 101.066770][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.085929][ T30] audit: type=1400 audit(1749441507.606:271): avc: denied { bind } for pid=6272 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.100831][ T976] usb 5-1: Product: syz [ 101.246101][ T976] usb 5-1: Manufacturer: syz [ 101.250562][ T10] int51x1 3-1:0.0: probe with driver int51x1 failed with error -71 [ 101.272339][ T976] usb 5-1: SerialNumber: syz [ 101.362716][ T976] usb 5-1: config 0 descriptor?? [ 101.465271][ T10] usb 3-1: USB disconnect, device number 3 [ 101.482166][ T976] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 101.553990][ T5176] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 101.751621][ T6267] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 101.854363][ T6286] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.021883][ T30] audit: type=1400 audit(1749441508.376:272): avc: denied { setopt } for pid=6281 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 102.246817][ T5176] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 102.262044][ T30] audit: type=1400 audit(1749441508.406:273): avc: denied { ioctl } for pid=6281 comm="syz.1.96" path="socket:[8766]" dev="sockfs" ino=8766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.322157][ T5901] usb 5-1: USB disconnect, device number 4 [ 102.328039][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 102.368768][ T30] audit: type=1400 audit(1749441508.896:274): avc: denied { mounton } for pid=6288 comm="syz.2.98" path="/22/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.144804][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 103.157845][ T30] audit: type=1400 audit(1749441509.676:275): avc: denied { bind } for pid=6290 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.235663][ T6278] syz.3.95 (6278): drop_caches: 2 [ 103.324733][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 103.335585][ T30] audit: type=1400 audit(1749441509.676:276): avc: denied { setopt } for pid=6290 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.461153][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 103.519257][ T30] audit: type=1400 audit(1749441510.026:277): avc: denied { setopt } for pid=6302 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.647405][ T6309] bridge0: port 3(netdevsim2) entered blocking state [ 103.656011][ T6309] bridge0: port 3(netdevsim2) entered disabled state [ 103.666395][ T6309] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 103.714340][ T6309] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 103.731182][ T6309] bridge0: port 3(netdevsim2) entered blocking state [ 103.738393][ T6309] bridge0: port 3(netdevsim2) entered forwarding state [ 103.947645][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 104.646880][ T6322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.900626][ T30] audit: type=1400 audit(1749441511.426:278): avc: denied { ioctl } for pid=6325 comm="syz.1.107" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 105.000858][ T6333] 9pnet_fd: Insufficient options for proto=fd [ 105.958778][ T6334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.576064][ T30] audit: type=1400 audit(1749441513.106:279): avc: denied { search } for pid=6352 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.665847][ T5936] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.671050][ T30] audit: type=1400 audit(1749441513.106:280): avc: denied { search } for pid=6352 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1833 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.881190][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 106.912320][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 106.931224][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 106.933940][ T30] audit: type=1400 audit(1749441513.106:281): avc: denied { search } for pid=6352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.053447][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 107.113506][ T30] audit: type=1400 audit(1749441513.106:282): avc: denied { search } for pid=6352 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.138237][ T30] audit: type=1400 audit(1749441513.116:283): avc: denied { read open } for pid=6355 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.236905][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 107.250058][ T5936] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 107.259215][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.317656][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.329116][ T30] audit: type=1400 audit(1749441513.116:284): avc: denied { getattr } for pid=6355 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.355029][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 107.367181][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 107.370091][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.384932][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.394099][ T5936] usb 2-1: config 0 descriptor?? [ 107.463393][ T30] audit: type=1400 audit(1749441513.116:285): avc: denied { getattr } for pid=6355 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.489569][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.530219][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.547175][ T6350] bridge0: entered allmulticast mode [ 107.568000][ T30] audit: type=1400 audit(1749441513.346:286): avc: denied { read } for pid=6357 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.590150][ T30] audit: type=1400 audit(1749441513.346:287): avc: denied { open } for pid=6357 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.614995][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.631712][ T6353] bridge_slave_1: left allmulticast mode [ 107.646051][ T6353] bridge_slave_1: left promiscuous mode [ 107.656249][ T10] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 107.671602][ T5936] usb 2-1: string descriptor 0 read error: -71 [ 107.686053][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.711117][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.715442][ T5936] usbhid 2-1:0.0: can't add hid device: -71 [ 107.838292][ T6353] bridge_slave_0: left allmulticast mode [ 107.838972][ T10] usb 3-1: config 0 descriptor?? [ 107.845697][ T5936] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 107.871398][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 108.850273][ T10] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 108.859897][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.868592][ T6353] bridge_slave_0: left promiscuous mode [ 108.891151][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 108.907507][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.920898][ T5936] usb 2-1: USB disconnect, device number 3 [ 108.986284][ T30] audit: type=1400 audit(1749441515.516:288): avc: denied { add_name } for pid=6352 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.300894][ T976] usb 3-1: USB disconnect, device number 4 [ 110.498849][ T6418] FAULT_INJECTION: forcing a failure. [ 110.498849][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 110.512150][ T6418] CPU: 1 UID: 0 PID: 6418 Comm: syz.0.125 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 110.512174][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.512184][ T6418] Call Trace: [ 110.512190][ T6418] [ 110.512197][ T6418] dump_stack_lvl+0x16c/0x1f0 [ 110.512227][ T6418] should_fail_ex+0x512/0x640 [ 110.512256][ T6418] should_failslab+0xc2/0x120 [ 110.512281][ T6418] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 110.512305][ T6418] ? skb_clone+0x190/0x3f0 [ 110.512335][ T6418] skb_clone+0x190/0x3f0 [ 110.512361][ T6418] netlink_deliver_tap+0xabd/0xd30 [ 110.512385][ T6418] netlink_unicast+0x5df/0x7f0 [ 110.512407][ T6418] ? __pfx_netlink_unicast+0x10/0x10 [ 110.512433][ T6418] netlink_sendmsg+0x8d1/0xdd0 [ 110.512456][ T6418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.512478][ T6418] ? security_socket_sendmsg+0x18/0x240 [ 110.512505][ T6418] ____sys_sendmsg+0xa98/0xc70 [ 110.512526][ T6418] ? copy_msghdr_from_user+0x10a/0x160 [ 110.512551][ T6418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.512574][ T6418] ? __lock_acquire+0xb8a/0x1c90 [ 110.512606][ T6418] ___sys_sendmsg+0x134/0x1d0 [ 110.512633][ T6418] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.512656][ T6418] ? __lock_acquire+0x622/0x1c90 [ 110.512715][ T6418] __sys_sendmsg+0x16d/0x220 [ 110.512740][ T6418] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.512783][ T6418] do_syscall_64+0xcd/0x4c0 [ 110.512811][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.512828][ T6418] RIP: 0033:0x7f91c7d8e929 [ 110.512847][ T6418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.512864][ T6418] RSP: 002b:00007f91c8b61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.512881][ T6418] RAX: ffffffffffffffda RBX: 00007f91c7fb6160 RCX: 00007f91c7d8e929 [ 110.512893][ T6418] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 110.512903][ T6418] RBP: 00007f91c8b61090 R08: 0000000000000000 R09: 0000000000000000 [ 110.512913][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.512923][ T6418] R13: 0000000000000000 R14: 00007f91c7fb6160 R15: 00007ffcef953af8 [ 110.512948][ T6418] [ 110.737560][ C1] vkms_vblank_simulate: vblank timer overrun [ 110.991092][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 111.292440][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.311323][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.421149][ T10] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 111.445798][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.475078][ T10] usb 3-1: config 0 descriptor?? [ 111.953683][ T976] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 112.080915][ T10] nintendo 0003:057E:200E.0002: item fetching failed at offset 3/7 [ 112.163980][ T976] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.172558][ T976] usb 1-1: not running at top speed; connect to a high speed hub [ 112.181783][ T976] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 112.189975][ T976] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 112.200451][ T976] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 112.200793][ T10] nintendo 0003:057E:200E.0002: HID parse failed [ 112.209810][ T976] usb 1-1: config 17 has no interface number 0 [ 112.239581][ T976] usb 1-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.272534][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 112.272549][ T30] audit: type=1400 audit(1749441518.806:311): avc: denied { setattr } for pid=6447 comm="syz.1.131" name="SCTPv6" dev="sockfs" ino=9158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 112.316468][ T10] nintendo 0003:057E:200E.0002: probe - fail = -22 [ 112.330749][ T10] nintendo 0003:057E:200E.0002: probe with driver nintendo failed with error -22 [ 112.347912][ T976] usb 1-1: config 17 interface 8 has no altsetting 0 [ 112.373618][ T976] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 112.392896][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.400914][ T976] usb 1-1: Product: syz [ 112.423407][ T10] usb 3-1: USB disconnect, device number 5 [ 112.639413][ T976] usb 1-1: Manufacturer: syz [ 112.689178][ T976] usb 1-1: SerialNumber: syz [ 114.174448][ T6465] sch_tbf: peakrate 5120 is lower than or equals to rate 8197 ! [ 114.217116][ T6467] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.236730][ T30] audit: type=1400 audit(1749441520.766:312): avc: denied { accept } for pid=6466 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.307847][ T6467] Bluetooth: MGMT ver 1.23 [ 114.404343][ T976] usb 1-1: selecting invalid altsetting 0 [ 114.447062][ T976] usb 1-1: USB disconnect, device number 3 [ 115.002126][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.018605][ T30] audit: type=1400 audit(1749441521.536:313): avc: denied { sys_module } for pid=6470 comm="syz.3.137" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.555857][ T6482] overlayfs: failed to resolve './file0': -2 [ 116.086593][ T6493] xt_TPROXY: Can be used only with -p tcp or -p udp [ 117.309106][ T30] audit: type=1400 audit(1749441523.406:314): avc: denied { getopt } for pid=6492 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 117.329039][ T30] audit: type=1400 audit(1749441523.476:315): avc: denied { mounton } for pid=6494 comm="syz.1.143" path="/proc/127/cgroup" dev="proc" ino=9214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 117.351984][ T30] audit: type=1400 audit(1749441523.576:316): avc: denied { write } for pid=6494 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 117.371841][ T30] audit: type=1400 audit(1749441523.586:317): avc: denied { read write } for pid=6494 comm="syz.1.143" name="sg0" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.431087][ T30] audit: type=1400 audit(1749441523.586:318): avc: denied { open } for pid=6494 comm="syz.1.143" path="/dev/sg0" dev="devtmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 117.441458][ T6512] cgroup: No subsys list or none specified [ 118.281602][ T30] audit: type=1400 audit(1749441523.586:319): avc: denied { ioctl } for pid=6494 comm="syz.1.143" path="/dev/sg0" dev="devtmpfs" ino=772 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.310425][ T6512] cgroup: No subsys list or none specified [ 118.401255][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'. [ 119.322632][ T30] audit: type=1400 audit(1749441525.826:320): avc: denied { bind } for pid=6516 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.371401][ T1208] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.792230][ T30] audit: type=1400 audit(1749441526.166:321): avc: denied { create } for pid=6519 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.837674][ T1208] usb 4-1: device descriptor read/64, error -71 [ 119.951099][ T5880] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 120.121625][ T1208] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.154891][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.634731][ T1208] usb 4-1: device descriptor read/64, error -71 [ 120.943836][ T1208] usb usb4-port1: attempt power cycle [ 120.986378][ T5880] usb 1-1: not running at top speed; connect to a high speed hub [ 121.005995][ T5880] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 121.014229][ T5880] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 121.024773][ T5880] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 121.033792][ T5880] usb 1-1: config 17 has no interface number 0 [ 121.040065][ T5880] usb 1-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.061103][ T5880] usb 1-1: config 17 interface 8 has no altsetting 0 [ 121.070702][ T5880] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 121.098666][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.117552][ T5880] usb 1-1: Product: syz [ 121.132564][ T5880] usb 1-1: Manufacturer: syz [ 121.137181][ T5880] usb 1-1: SerialNumber: syz [ 121.387011][ T30] audit: type=1400 audit(1749441527.916:322): avc: denied { block_suspend } for pid=6522 comm="syz.0.149" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.413246][ T5880] usb 1-1: selecting invalid altsetting 0 [ 121.423886][ T5880] usb 1-1: USB disconnect, device number 4 [ 121.654116][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.184900][ T30] audit: type=1400 audit(1749441528.706:323): avc: denied { read } for pid=6582 comm="syz.2.157" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.306627][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.158'. [ 122.313155][ T30] audit: type=1400 audit(1749441528.706:324): avc: denied { open } for pid=6582 comm="syz.2.157" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.406373][ T30] audit: type=1400 audit(1749441528.756:325): avc: denied { ioctl } for pid=6582 comm="syz.2.157" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0xae65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 123.144892][ T6613] batadv_slave_0: entered promiscuous mode [ 123.321162][ T30] audit: type=1400 audit(1749441529.676:326): avc: denied { create } for pid=6606 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.515970][ T30] audit: type=1400 audit(1749441529.676:327): avc: denied { write } for pid=6606 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 124.262528][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 124.681130][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 124.883944][ T30] audit: type=1400 audit(1749441531.396:328): avc: denied { getopt } for pid=6620 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.511181][ T1208] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.611670][ T30] audit: type=1400 audit(1749441532.126:329): avc: denied { write } for pid=6647 comm="syz.2.174" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.643616][ T6652] netlink: 'syz.1.175': attribute type 10 has an invalid length. [ 125.762745][ T1208] usb 5-1: config 0 has no interfaces? [ 125.766835][ T6652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.777341][ T1208] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 125.787443][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.797948][ T1208] usb 5-1: Product: syz [ 125.803541][ T1208] usb 5-1: Manufacturer: syz [ 125.808489][ T1208] usb 5-1: SerialNumber: syz [ 125.816003][ T6652] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 125.845879][ T1208] usb 5-1: config 0 descriptor?? [ 125.899531][ T6613] batadv_slave_0: left promiscuous mode [ 126.173787][ T30] audit: type=1400 audit(1749441532.706:330): avc: denied { mount } for pid=6641 comm="syz.4.173" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 126.390763][ T6667] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 127.707489][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.764958][ T5880] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 127.789455][ T5880] usb 4-1: can't read configurations, error -71 [ 128.649315][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 128.918669][ T30] audit: type=1400 audit(1749441535.446:331): avc: denied { name_bind } for pid=6680 comm="syz.3.180" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 129.285829][ T30] audit: type=1400 audit(1749441535.696:332): avc: denied { write } for pid=6687 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.359954][ T6692] netlink: 256 bytes leftover after parsing attributes in process `syz.1.184'. [ 130.126802][ T5880] usb 5-1: USB disconnect, device number 5 [ 130.231560][ T1208] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.511957][ T1208] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 130.645243][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.767336][ T1208] usb 2-1: Product: syz [ 130.860941][ T1208] usb 2-1: Manufacturer: syz [ 130.964194][ T1208] usb 2-1: SerialNumber: syz [ 131.272318][ T1208] usb 2-1: config 0 descriptor?? [ 131.333135][ T1208] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 131.378809][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 131.831154][ T5901] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 131.995078][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.005759][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.018670][ T5901] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 132.028066][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 132.036190][ T5901] usb 5-1: SerialNumber: syz [ 132.318052][ T5901] usb 5-1: 0:2 : does not exist [ 132.564023][ T1208] gspca_sn9c2028: read1 error -71 [ 132.580849][ T1208] gspca_sn9c2028: read1 error -71 [ 132.587031][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.593344][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.605715][ T1208] gspca_sn9c2028: read1 error -71 [ 132.611397][ T1208] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 132.751624][ T1208] usb 2-1: USB disconnect, device number 4 [ 133.022978][ T30] audit: type=1400 audit(1749441539.556:333): avc: denied { create } for pid=6731 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 133.298469][ T5901] usb 5-1: USB disconnect, device number 6 [ 133.353966][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 133.510648][ T30] audit: type=1400 audit(1749441540.036:334): avc: denied { write } for pid=6740 comm="syz.3.197" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 133.671230][ T30] audit: type=1400 audit(1749441540.036:335): avc: denied { open } for pid=6740 comm="syz.3.197" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 133.708917][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.720149][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.751310][ T9] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 133.761637][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.779621][ T30] audit: type=1400 audit(1749441540.306:336): avc: denied { create } for pid=6742 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.799329][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 133.811797][ T5880] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 133.839304][ T9] usb 1-1: config 0 descriptor?? [ 133.993595][ T30] audit: type=1400 audit(1749441540.526:337): avc: denied { bind } for pid=6745 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 133.994193][ T5880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.057318][ T5880] usb 4-1: not running at top speed; connect to a high speed hub [ 134.097670][ T5880] usb 4-1: config 9 has an invalid interface number: 76 but max is 0 [ 134.108940][ T5880] usb 4-1: config 9 has no interface number 0 [ 134.122636][ T5880] usb 4-1: config 9 interface 76 has no altsetting 0 [ 134.164810][ T30] audit: type=1400 audit(1749441540.666:338): avc: denied { setattr } for pid=6747 comm="syz.2.200" name="v4l-subdev3" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.187954][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.217236][ T5880] usb 4-1: New USB device found, idVendor=16d8, idProduct=6804, bcdDevice=68.d5 [ 134.264761][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.463331][ T5880] usb 4-1: Product: syz [ 134.463966][ T9] nintendo 0003:057E:200E.0003: item fetching failed at offset 3/7 [ 134.467582][ T5880] usb 4-1: Manufacturer: syz [ 134.527724][ T5880] usb 4-1: SerialNumber: syz [ 134.628674][ T9] nintendo 0003:057E:200E.0003: HID parse failed [ 134.701418][ T9] nintendo 0003:057E:200E.0003: probe - fail = -22 [ 134.729996][ T9] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -22 [ 134.821590][ T9] usb 1-1: USB disconnect, device number 5 [ 134.838347][ T30] audit: type=1400 audit(1749441541.366:339): avc: denied { getopt } for pid=6740 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.853064][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.900841][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.942351][ T6756] overlayfs: failed to resolve './file1': -2 [ 135.005410][ T5880] hub 4-1:9.76: bad descriptor, ignoring hub [ 135.074751][ T5880] hub 4-1:9.76: probe with driver hub failed with error -5 [ 135.111369][ T5880] option 4-1:9.76: GSM modem (1-port) converter detected [ 135.181099][ T5880] usb 4-1: USB disconnect, device number 14 [ 135.242205][ T5880] option 4-1:9.76: device disconnected [ 135.384549][ T6737] syz.1.196 (6737): drop_caches: 2 [ 135.506448][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 137.179375][ T6784] netlink: 56 bytes leftover after parsing attributes in process `syz.3.210'. [ 137.198604][ T6784] FAULT_INJECTION: forcing a failure. [ 137.198604][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 137.217668][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.3.210 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 137.217692][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.217702][ T6784] Call Trace: [ 137.217709][ T6784] [ 137.217715][ T6784] dump_stack_lvl+0x16c/0x1f0 [ 137.217744][ T6784] should_fail_ex+0x512/0x640 [ 137.217770][ T6784] should_failslab+0xc2/0x120 [ 137.217793][ T6784] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 137.217815][ T6784] ? skb_clone+0x190/0x3f0 [ 137.217842][ T6784] skb_clone+0x190/0x3f0 [ 137.217866][ T6784] netlink_deliver_tap+0xabd/0xd30 [ 137.217890][ T6784] netlink_unicast+0x6b2/0x7f0 [ 137.217910][ T6784] ? __pfx_netlink_unicast+0x10/0x10 [ 137.217935][ T6784] netlink_ack+0x696/0xb80 [ 137.217960][ T6784] netlink_rcv_skb+0x332/0x420 [ 137.217977][ T6784] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 137.218000][ T6784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.218029][ T6784] ? ns_capable+0xd7/0x110 [ 137.218050][ T6784] nfnetlink_rcv+0x1b3/0x430 [ 137.218070][ T6784] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 137.218089][ T6784] ? netlink_deliver_tap+0x1ae/0xd30 [ 137.218109][ T6784] netlink_unicast+0x53d/0x7f0 [ 137.218130][ T6784] ? __pfx_netlink_unicast+0x10/0x10 [ 137.218156][ T6784] netlink_sendmsg+0x8d1/0xdd0 [ 137.218180][ T6784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.218210][ T6784] ____sys_sendmsg+0xa98/0xc70 [ 137.218230][ T6784] ? copy_msghdr_from_user+0x10a/0x160 [ 137.218269][ T6784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.218302][ T6784] ___sys_sendmsg+0x134/0x1d0 [ 137.218329][ T6784] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.218352][ T6784] ? __lock_acquire+0x622/0x1c90 [ 137.218411][ T6784] __sys_sendmsg+0x16d/0x220 [ 137.218437][ T6784] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.218480][ T6784] do_syscall_64+0xcd/0x4c0 [ 137.218509][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.218532][ T6784] RIP: 0033:0x7f8ee1b8e929 [ 137.218547][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.218563][ T6784] RSP: 002b:00007f8ee2997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.218580][ T6784] RAX: ffffffffffffffda RBX: 00007f8ee1db5fa0 RCX: 00007f8ee1b8e929 [ 137.218592][ T6784] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 137.218602][ T6784] RBP: 00007f8ee2997090 R08: 0000000000000000 R09: 0000000000000000 [ 137.218612][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.218621][ T6784] R13: 0000000000000000 R14: 00007f8ee1db5fa0 R15: 00007ffdb9c33058 [ 137.218649][ T6784] [ 137.861371][ T1208] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 137.942152][ T6788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.191866][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 138.209604][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 138.348142][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 138.358998][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.374350][ T1208] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.418991][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.462357][ T1208] usb 4-1: config 0 descriptor?? [ 138.570418][ T30] audit: type=1400 audit(1749441545.096:340): avc: denied { setopt } for pid=6795 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 139.027952][ T1208] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 139.543935][ T30] audit: type=1400 audit(1749441545.656:341): avc: denied { append } for pid=6794 comm="syz.0.214" name="001" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.034325][ T1208] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 140.173684][ T1208] usb 4-1: USB disconnect, device number 15 [ 140.751388][ T30] audit: type=1400 audit(1749441546.816:342): avc: denied { setopt } for pid=6809 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.073420][ T6812] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 141.344783][ T6823] fido_id[6823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 145.216061][ T6836] syz_tun: entered allmulticast mode [ 145.235382][ T6835] syz_tun: left allmulticast mode [ 145.396111][ T6841] xt_recent: hitcount (2147483647) is larger than allowed maximum (65535) [ 145.454970][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 146.274697][ T6838] ======================================================= [ 146.274697][ T6838] WARNING: The mand mount option has been deprecated and [ 146.274697][ T6838] and is ignored by this kernel. Remove the mand [ 146.274697][ T6838] option from the mount to silence this warning. [ 146.274697][ T6838] ======================================================= [ 146.397826][ T30] audit: type=1400 audit(1749441552.906:343): avc: denied { mount } for pid=6834 comm="syz.4.223" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 146.671164][ T5936] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 146.704959][ T6867] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 146.972768][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.983330][ T5936] usb 2-1: not running at top speed; connect to a high speed hub [ 146.999444][ T5936] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 147.009590][ T5936] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 147.020933][ T5936] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 147.030775][ T5936] usb 2-1: config 17 has no interface number 0 [ 147.037947][ T5936] usb 2-1: config 17 interface 8 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.051366][ T5936] usb 2-1: config 17 interface 8 has no altsetting 0 [ 147.114934][ T6876] trusted_key: encrypted_key: insufficient parameters specified [ 147.470851][ T5936] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 147.501514][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.513637][ T5936] usb 2-1: Product: syz [ 147.518746][ T5936] usb 2-1: Manufacturer: syz [ 147.524926][ T5936] usb 2-1: SerialNumber: syz [ 147.556036][ T30] audit: type=1400 audit(1749441554.086:344): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 147.966105][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 149.308736][ T5936] usb 2-1: selecting invalid altsetting 0 [ 149.371955][ T30] audit: type=1400 audit(1749441555.886:345): avc: denied { create } for pid=6879 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 149.374340][ T5936] usb 2-1: USB disconnect, device number 5 [ 149.789118][ T30] audit: type=1400 audit(1749441556.116:346): avc: denied { write } for pid=6879 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 149.975807][ T30] audit: type=1400 audit(1749441556.496:347): avc: denied { name_connect } for pid=6900 comm="syz.0.241" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 151.427531][ T30] audit: type=1400 audit(1749441557.546:348): avc: denied { bind } for pid=6893 comm="syz.3.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.120111][ T6934] trusted_key: encrypted_key: insufficient parameters specified [ 153.315466][ T30] audit: type=1400 audit(1749441559.836:349): avc: denied { create } for pid=6930 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 153.996432][ T30] audit: type=1400 audit(1749441560.516:350): avc: denied { bind } for pid=6937 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.486224][ T1208] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.734605][ T5936] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.883508][ T1208] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 154.905961][ T1208] usb 2-1: config 0 has no interface number 0 [ 154.911559][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 154.919095][ T5936] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 154.931413][ T1208] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 154.947516][ T5936] usb 5-1: config 0 has no interface number 0 [ 154.962918][ T30] audit: type=1400 audit(1749441561.496:351): avc: denied { append } for pid=6959 comm="syz.0.257" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.988648][ T5936] usb 5-1: config 0 interface 12 has no altsetting 0 [ 155.018903][ T5936] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 155.030806][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.054207][ T5936] usb 5-1: Product: syz [ 155.080780][ T5936] usb 5-1: Manufacturer: syz [ 155.126299][ T1208] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.139530][ T1208] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 155.148748][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.167046][ T1208] usb 2-1: Product: syz [ 155.171485][ T1208] usb 2-1: Manufacturer: syz [ 155.176081][ T1208] usb 2-1: SerialNumber: syz [ 155.301062][ T5936] usb 5-1: SerialNumber: syz [ 155.323600][ T5936] usb 5-1: config 0 descriptor?? [ 155.503094][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 155.565298][ T1208] usb 2-1: config 0 descriptor?? [ 155.574196][ T6944] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.588493][ T1208] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 155.605623][ T1208] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 155.866352][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 155.953773][ T30] audit: type=1326 audit(1749441562.486:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c7d8e929 code=0x7ffc0000 [ 155.983908][ T6974] loop6: detected capacity change from 0 to 7 [ 155.992110][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.000141][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.008027][ T30] audit: type=1326 audit(1749441562.486:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c7d8e929 code=0x7ffc0000 [ 156.008171][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.039208][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.047323][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.055291][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.063256][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.071163][ T6974] ldm_validate_partition_table(): Disk read failed. [ 156.077810][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.088056][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.088165][ T6974] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.088308][ T6974] Dev loop6: unable to read RDB block 0 [ 156.089001][ T6974] loop6: unable to read partition table [ 156.089189][ T6974] loop6: partition table beyond EOD, truncated [ 156.089205][ T6974] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 156.089205][ T6974] ) failed (rc=-5) [ 156.107928][ T30] audit: type=1326 audit(1749441562.516:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f91c7d8e929 code=0x7ffc0000 [ 156.107969][ T30] audit: type=1326 audit(1749441562.516:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c7d8e929 code=0x7ffc0000 [ 156.108022][ T30] audit: type=1326 audit(1749441562.516:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c7d8e929 code=0x7ffc0000 [ 156.108057][ T30] audit: type=1326 audit(1749441562.516:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.0.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f91c7d8e929 code=0x7ffc0000 [ 156.123739][ T10] usb 2-1: USB disconnect, device number 6 [ 156.134916][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 156.135481][ T10] cyberjack 2-1:0.69: device disconnected [ 156.848319][ T5936] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 156.856771][ T5936] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 156.864197][ T5936] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 156.872276][ T5936] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 156.881228][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.893021][ T5936] usb 5-1: USB disconnect, device number 7 [ 157.220398][ T10] usb 1-1: device descriptor read/64, error -71 [ 157.252747][ T6986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.521083][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.711123][ T10] usb 1-1: device descriptor read/64, error -71 [ 157.876363][ T10] usb usb1-port1: attempt power cycle [ 158.021939][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.106592][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 158.189398][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 158.231084][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.552957][ T9] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 158.561179][ T9] usb 2-1: config 0 has no interface number 0 [ 158.584224][ T10] usb 1-1: device descriptor read/8, error -71 [ 158.591080][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 158.616622][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.646779][ T9] usb 2-1: Product: syz [ 158.650970][ T9] usb 2-1: Manufacturer: syz [ 158.675494][ T9] usb 2-1: SerialNumber: syz [ 158.818709][ T9] usb 2-1: config 0 descriptor?? [ 158.841482][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.854715][ T9] hub 2-1:0.145: bad descriptor, ignoring hub [ 158.862116][ T9] hub 2-1:0.145: probe with driver hub failed with error -5 [ 158.905655][ T10] usb 1-1: device descriptor read/8, error -71 [ 158.914378][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input10 [ 158.977709][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 158.977724][ T30] audit: type=1400 audit(1749441565.506:378): avc: denied { shutdown } for pid=7013 comm="syz.4.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 159.047175][ T10] usb usb1-port1: unable to enumerate USB device [ 159.321295][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 159.321501][ T7017] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 159.336700][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.365905][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 159.382693][ T7020] syz.1.266: attempt to access beyond end of device [ 159.382693][ T7020] loop1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 159.398203][ T30] audit: type=1400 audit(1749441565.906:379): avc: denied { mounton } for pid=6993 comm="syz.1.266" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 159.411177][ T7020] hfs: can't find a HFS filesystem on dev loop1 [ 159.647827][ T9] usb 36-1: SetAddress Request (2) to port 0 [ 159.825417][ T9] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 159.836417][ T7018] vhci_hcd: connection closed [ 159.839793][ T6118] vhci_hcd: stop threads [ 159.850544][ T6118] vhci_hcd: release socket [ 159.873547][ T6118] vhci_hcd: disconnect device [ 159.972897][ T30] audit: type=1400 audit(1749441566.506:380): avc: denied { write } for pid=7028 comm="syz.1.274" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 162.119590][ T7051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.524902][ T7055] syz_tun: entered allmulticast mode [ 162.546829][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.051636][ T10] usb 3-1: device descriptor read/64, error -71 [ 163.104452][ T7053] syz_tun: left allmulticast mode [ 163.127399][ T7049] bridge0: port 3(netdevsim2) entered blocking state [ 163.134154][ T7049] bridge0: port 3(netdevsim2) entered disabled state [ 163.140921][ T7049] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 163.149767][ T7049] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 163.157313][ T7049] bridge0: port 3(netdevsim2) entered blocking state [ 163.164027][ T7049] bridge0: port 3(netdevsim2) entered forwarding state [ 163.312429][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 163.501137][ T10] usb 3-1: device descriptor read/64, error -71 [ 163.613115][ T10] usb usb3-port1: attempt power cycle [ 163.954488][ T976] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 164.048428][ T30] audit: type=1400 audit(1749441570.576:381): avc: denied { map } for pid=7073 comm="syz.4.287" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 164.075951][ T30] audit: type=1400 audit(1749441570.576:382): avc: denied { execute } for pid=7073 comm="syz.4.287" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 164.108433][ T30] audit: type=1400 audit(1749441570.576:383): avc: denied { remount } for pid=7073 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.134128][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 164.146698][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.157114][ T976] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 164.173508][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.275057][ T976] usb 1-1: config 0 descriptor?? [ 164.658229][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.685468][ T10] usb 3-1: device descriptor read/8, error -71 [ 164.891252][ T9] usb 36-1: device descriptor read/8, error -110 [ 164.931448][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.966890][ T10] usb 3-1: device descriptor read/8, error -71 [ 165.074775][ T976] usbhid 1-1:0.0: can't add hid device: -71 [ 165.080789][ T976] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 165.116077][ T10] usb usb3-port1: unable to enumerate USB device [ 165.156719][ T976] usb 1-1: USB disconnect, device number 10 [ 165.217794][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 165.572131][ T9] usb usb36-port1: attempt power cycle [ 165.897069][ T5941] usb 2-1: USB disconnect, device number 7 [ 166.219925][ T7122] FAULT_INJECTION: forcing a failure. [ 166.219925][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 166.271173][ T7122] CPU: 1 UID: 0 PID: 7122 Comm: syz.2.298 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 166.271202][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.271213][ T7122] Call Trace: [ 166.271220][ T7122] [ 166.271228][ T7122] dump_stack_lvl+0x16c/0x1f0 [ 166.271260][ T7122] should_fail_ex+0x512/0x640 [ 166.271284][ T7122] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 166.271310][ T7122] should_failslab+0xc2/0x120 [ 166.271335][ T7122] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 166.271364][ T7122] ? __alloc_skb+0x2b2/0x380 [ 166.271394][ T7122] __alloc_skb+0x2b2/0x380 [ 166.271417][ T7122] ? __pfx___alloc_skb+0x10/0x10 [ 166.271444][ T7122] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 166.271469][ T7122] netlink_alloc_large_skb+0x69/0x130 [ 166.271491][ T7122] netlink_sendmsg+0x6a1/0xdd0 [ 166.271515][ T7122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.271543][ T7122] ____sys_sendmsg+0xa98/0xc70 [ 166.271564][ T7122] ? copy_msghdr_from_user+0x10a/0x160 [ 166.271588][ T7122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.271620][ T7122] ___sys_sendmsg+0x134/0x1d0 [ 166.271647][ T7122] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.271670][ T7122] ? __lock_acquire+0x622/0x1c90 [ 166.271728][ T7122] __sys_sendmsg+0x16d/0x220 [ 166.271754][ T7122] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.271796][ T7122] do_syscall_64+0xcd/0x4c0 [ 166.271824][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.271847][ T7122] RIP: 0033:0x7f84e498e929 [ 166.271862][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.271878][ T7122] RSP: 002b:00007f84e58c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.271896][ T7122] RAX: ffffffffffffffda RBX: 00007f84e4bb5fa0 RCX: 00007f84e498e929 [ 166.271907][ T7122] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 166.271918][ T7122] RBP: 00007f84e58c4090 R08: 0000000000000000 R09: 0000000000000000 [ 166.271928][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.271939][ T7122] R13: 0000000000000000 R14: 00007f84e4bb5fa0 R15: 00007fff5a69f818 [ 166.271963][ T7122] [ 166.494973][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.505403][ T9] usb usb36-port1: unable to enumerate USB device [ 168.938199][ T976] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 169.226378][ T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.237809][ T976] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 169.249632][ T976] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.258885][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.267070][ T976] usb 1-1: SerialNumber: syz [ 169.281131][ T5936] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.466913][ T5936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.502456][ T7130] warning: `syz.0.301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 170.016830][ T5936] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 170.083516][ T5936] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.135972][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.151446][ T5936] usb 2-1: SerialNumber: syz [ 170.157455][ T7158] tipc: Enabling of bearer rejected, failed to enable media [ 170.347659][ T30] audit: type=1400 audit(1749441576.876:384): avc: denied { create } for pid=7161 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.499534][ T5880] usb 2-1: USB disconnect, device number 8 [ 171.848504][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 171.991326][ T115] usb 1-1: USB disconnect, device number 11 [ 172.211044][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 172.223124][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 172.241020][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.262003][ T10] usb 4-1: config 0 descriptor?? [ 172.289442][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 172.629542][ T30] audit: type=1400 audit(1749441579.156:385): avc: denied { setopt } for pid=7181 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.630964][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 172.676566][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.686545][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.701798][ T7185] FAULT_INJECTION: forcing a failure. [ 172.701798][ T7185] name failslab, interval 1, probability 0, space 0, times 0 [ 172.717159][ T30] audit: type=1400 audit(1749441579.206:386): avc: denied { write } for pid=7161 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 172.741322][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: syz.4.318 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 172.741345][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.741355][ T7185] Call Trace: [ 172.741361][ T7185] [ 172.741368][ T7185] dump_stack_lvl+0x16c/0x1f0 [ 172.741398][ T7185] should_fail_ex+0x512/0x640 [ 172.741425][ T7185] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 172.741448][ T7185] should_failslab+0xc2/0x120 [ 172.741475][ T7185] __kmalloc_cache_noprof+0x6a/0x3e0 [ 172.741494][ T7185] ? lockdep_init_map_type+0x5c/0x280 [ 172.741520][ T7185] ? tcf_block_get_ext+0x15c/0x1800 [ 172.741543][ T7185] tcf_block_get_ext+0x15c/0x1800 [ 172.741561][ T7185] ? qdisc_create+0x71/0xfc0 [ 172.741581][ T7185] ? tc_modify_qdisc+0x12bb/0x2130 [ 172.741604][ T7185] ? netlink_sendmsg+0x8d1/0xdd0 [ 172.741622][ T7185] ? ____sys_sendmsg+0xa98/0xc70 [ 172.741643][ T7185] tcf_block_get+0xa8/0x100 [ 172.741660][ T7185] ? __pfx_tcf_block_get+0x10/0x10 [ 172.741677][ T7185] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 172.741704][ T7185] ? __pfx_prio_init+0x10/0x10 [ 172.741721][ T7185] prio_init+0x3b/0x80 [ 172.741735][ T7185] ? __pfx_prio_init+0x10/0x10 [ 172.741751][ T7185] qdisc_create+0x457/0xfc0 [ 172.741775][ T7185] tc_modify_qdisc+0x12bb/0x2130 [ 172.741803][ T7185] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 172.741847][ T7185] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 172.741872][ T7185] rtnetlink_rcv_msg+0x3c9/0xe90 [ 172.741902][ T7185] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.741936][ T7185] ? ref_tracker_free+0x37c/0x830 [ 172.741965][ T7185] netlink_rcv_skb+0x155/0x420 [ 172.741984][ T7185] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.742013][ T7185] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.742042][ T7185] ? netlink_deliver_tap+0x1ae/0xd30 [ 172.742071][ T7185] netlink_unicast+0x53d/0x7f0 [ 172.742094][ T7185] ? __pfx_netlink_unicast+0x10/0x10 [ 172.742121][ T7185] netlink_sendmsg+0x8d1/0xdd0 [ 172.742144][ T7185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.742174][ T7185] ____sys_sendmsg+0xa98/0xc70 [ 172.742194][ T7185] ? copy_msghdr_from_user+0x10a/0x160 [ 172.742219][ T7185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.742251][ T7185] ___sys_sendmsg+0x134/0x1d0 [ 172.742278][ T7185] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.742302][ T7185] ? __lock_acquire+0x622/0x1c90 [ 172.742360][ T7185] __sys_sendmsg+0x16d/0x220 [ 172.742387][ T7185] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.742431][ T7185] do_syscall_64+0xcd/0x4c0 [ 172.742459][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.742476][ T7185] RIP: 0033:0x7f4278b8e929 [ 172.742491][ T7185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.742508][ T7185] RSP: 002b:00007f42799d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.742525][ T7185] RAX: ffffffffffffffda RBX: 00007f4278db5fa0 RCX: 00007f4278b8e929 [ 172.742536][ T7185] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 172.742547][ T7185] RBP: 00007f42799d1090 R08: 0000000000000000 R09: 0000000000000000 [ 172.742557][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.742568][ T7185] R13: 0000000000000000 R14: 00007f4278db5fa0 R15: 00007ffc351ccc78 [ 172.742592][ T7185] [ 173.172919][ T10] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 173.178797][ T10] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 173.188465][ T10] usb 4-1: USB disconnect, device number 16 [ 173.696944][ T7194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.321'. [ 173.765267][ T7194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.813181][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 173.903416][ T7202] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 174.007721][ T7202] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 174.437232][ T7202] bridge0: port 3(netdevsim2) entered disabled state [ 174.542762][ T7202] bridge_slave_1: left allmulticast mode [ 174.558735][ T7202] bridge_slave_1: left promiscuous mode [ 174.581991][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.605571][ T7202] bridge_slave_0: left allmulticast mode [ 174.631126][ T7202] bridge_slave_0: left promiscuous mode [ 174.636873][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.804831][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 175.211653][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 175.227224][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 175.301374][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.416366][ T10] usb 4-1: config 0 descriptor?? [ 175.434665][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11 [ 175.504361][ T30] audit: type=1400 audit(1749441582.036:387): avc: denied { map } for pid=7215 comm="syz.4.326" path="socket:[13757]" dev="sockfs" ino=13757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.801910][ T30] audit: type=1400 audit(1749441582.036:388): avc: denied { read } for pid=7215 comm="syz.4.326" path="socket:[13757]" dev="sockfs" ino=13757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.878826][ T5176] bcm5974 4-1:0.0: could not read from device [ 175.895284][ T5829] bcm5974 4-1:0.0: could not read from device [ 175.903561][ T10] usb 4-1: USB disconnect, device number 17 [ 175.920817][ T5176] bcm5974 4-1:0.0: could not read from device [ 176.141949][ T7226] syz.4.329: attempt to access beyond end of device [ 176.141949][ T7226] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 176.813288][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 177.198810][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 177.210787][ T7238] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 178.352321][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 178.361930][ T7256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.491747][ T7256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.651359][ T5936] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 178.913857][ T5936] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.955030][ T5936] usb 2-1: config 0 has no interface number 0 [ 178.972394][ T5936] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 179.007299][ T5936] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.037502][ T5936] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 179.069075][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.138537][ T5936] usb 2-1: config 0 descriptor?? [ 179.175167][ T5936] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 179.329152][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.609329][ T7257] iowarrior 2-1:0.1: Error -90 while submitting URB [ 179.626844][ T7271] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 179.643564][ T7256] iowarrior 2-1:0.1: Error -90 while submitting URB [ 179.656426][ T7271] bond0: (slave gre0): Error -95 calling set_mac_address [ 179.926963][ T5941] usb 2-1: USB disconnect, device number 9 [ 180.336271][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 180.982010][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 181.991181][ T5936] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 182.451232][ T5936] usb 4-1: Using ep0 maxpacket: 16 [ 182.539436][ T5936] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 182.548795][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.557506][ T5936] usb 4-1: Product: syz [ 182.561938][ T5936] usb 4-1: Manufacturer: syz [ 182.566534][ T5936] usb 4-1: SerialNumber: syz [ 182.685725][ T5941] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.685832][ T5936] usb 4-1: config 0 descriptor?? [ 182.746303][ T7311] syz_tun: entered allmulticast mode [ 182.915662][ T7319] syz_tun: entered allmulticast mode [ 183.063045][ T7310] syz_tun: left allmulticast mode [ 183.082398][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 183.089062][ T5941] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 183.099192][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.129361][ T5941] usb 2-1: config 0 descriptor?? [ 183.166599][ T7317] syz_tun: left allmulticast mode [ 183.288457][ T5936] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 183.310367][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.337696][ T5936] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 183.359709][ T5936] usb 4-1: media controller created [ 183.400099][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.464102][ T5941] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 183.480495][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.510915][ T5941] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 183.564988][ T5941] usb 2-1: media controller created [ 183.590862][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.844814][ T30] audit: type=1400 audit(1749441590.376:389): avc: denied { getopt } for pid=7344 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.088214][ T7296] dtv5100: wlen = 0, aborting. [ 184.104796][ T5936] zl10353_read_register: readreg error (reg=127, ret==0) [ 184.119808][ T5936] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 184.144303][ T5936] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 184.154869][ T7308] ------------[ cut here ]------------ [ 184.160356][ T7308] usb 4-1: BOGUS control dir, pipe 80001280 doesn't match bRequestType c0 [ 184.183607][ T7308] WARNING: CPU: 1 PID: 7308 at drivers/usb/core/urb.c:411 usb_submit_urb+0x13c3/0x1790 [ 184.193622][ T7308] Modules linked in: [ 184.197756][ T7308] CPU: 1 UID: 0 PID: 7308 Comm: syz.1.351 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 184.209631][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.220012][ T7308] RIP: 0010:usb_submit_urb+0x13c3/0x1790 [ 184.225823][ T7308] Code: e8 52 f0 86 fa 4c 89 ef e8 da c3 d5 fe 44 8b 44 24 28 44 89 f9 48 8b 54 24 38 48 89 c6 48 c7 c7 00 0e 73 8c e8 4e b5 45 fa 90 <0f> 0b 90 90 e9 84 ef ff ff e8 1f f0 86 fa 0f b6 2d 67 49 5b 09 31 [ 184.246256][ T7308] RSP: 0018:ffffc9000c397698 EFLAGS: 00010286 [ 184.253011][ T7308] RAX: 0000000000000000 RBX: ffff88814c298a00 RCX: ffffc90004f43000 [ 184.261038][ T7308] RDX: 0000000000080000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 184.269017][ T7308] RBP: ffff888034082058 R08: 0000000000000001 R09: 0000000000000000 [ 184.277151][ T7308] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888143a8c100 [ 184.285173][ T7308] R13: ffff8880340820b0 R14: 0000000000000001 R15: 0000000080001280 [ 184.293186][ T7308] FS: 00007f3fbbec36c0(0000) GS:ffff888124854000(0000) knlGS:0000000000000000 [ 184.302169][ T7308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.308767][ T7308] CR2: 00007f6d33d3a000 CR3: 00000000296b9000 CR4: 00000000003526f0 [ 184.316787][ T7308] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.324792][ T7308] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.332859][ T7308] Call Trace: [ 184.336147][ T7308] [ 184.339091][ T7308] ? __init_swait_queue_head+0xca/0x150 [ 184.345437][ T7308] usb_start_wait_urb+0x104/0x4b0 [ 184.350477][ T7308] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 184.356667][ T7308] ? __asan_memset+0x23/0x50 [ 184.361305][ T7308] usb_control_msg+0x326/0x4a0 [ 184.366084][ T7308] ? __pfx_usb_control_msg+0x10/0x10 [ 184.371450][ T7308] dtv5100_i2c_msg+0x1d8/0x320 [ 184.376239][ T7308] dtv5100_i2c_xfer+0x1e0/0x420 [ 184.381135][ T7308] __i2c_transfer+0x6b3/0x2190 [ 184.385919][ T7308] ? __pfx___i2c_transfer+0x10/0x10 [ 184.391168][ T7308] i2c_smbus_xfer_emulated+0x230/0x11f0 [ 184.396731][ T7308] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 184.402763][ T7308] ? __asan_memset+0x23/0x50 [ 184.407367][ T7308] ? debug_mutex_unlock+0xf0/0x270 [ 184.412644][ T7308] ? find_held_lock+0x2b/0x80 [ 184.417346][ T7308] __i2c_smbus_xfer+0x836/0x1020 [ 184.422586][ T7308] ? rt_mutex_slowlock.constprop.0+0xd5/0x120 [ 184.428677][ T7308] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 184.434100][ T7308] i2c_smbus_xfer+0x200/0x3c0 [ 184.438795][ T7308] i2cdev_ioctl_smbus+0x237/0x960 [ 184.443860][ T7308] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 184.450140][ T7308] ? __might_fault+0xe3/0x190 [ 184.455484][ T7308] ? __might_fault+0xe3/0x190 [ 184.460188][ T7308] i2cdev_ioctl+0x338/0x820 [ 184.464759][ T7308] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 184.469797][ T7308] ? selinux_file_ioctl+0x180/0x270 [ 184.475048][ T7308] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 184.480092][ T7308] __x64_sys_ioctl+0x18e/0x210 [ 184.484892][ T7308] do_syscall_64+0xcd/0x4c0 [ 184.489418][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.495613][ T7308] RIP: 0033:0x7f3fbaf8e929 [ 184.500034][ T7308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.519990][ T7308] RSP: 002b:00007f3fbbec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.528738][ T7308] RAX: ffffffffffffffda RBX: 00007f3fbb1b5fa0 RCX: 00007f3fbaf8e929 [ 184.536756][ T7308] RDX: 00002000000001c0 RSI: 0000000000000720 RDI: 000000000000000b [ 184.544774][ T7308] RBP: 00007f3fbb010b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.553537][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.562181][ T7308] R13: 0000000000000000 R14: 00007f3fbb1b5fa0 R15: 00007ffdf714be08 [ 184.570192][ T7308] [ 184.573301][ T7308] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.580584][ T7308] CPU: 1 UID: 0 PID: 7308 Comm: syz.1.351 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 184.592123][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.602165][ T7308] Call Trace: [ 184.605434][ T7308] [ 184.608356][ T7308] dump_stack_lvl+0x3d/0x1f0 [ 184.612947][ T7308] panic+0x71c/0x800 [ 184.616840][ T7308] ? __pfx_panic+0x10/0x10 [ 184.621253][ T7308] ? show_trace_log_lvl+0x29b/0x3e0 [ 184.626454][ T7308] ? usb_submit_urb+0x13c3/0x1790 [ 184.631466][ T7308] check_panic_on_warn+0xab/0xb0 [ 184.636397][ T7308] __warn+0xf6/0x3c0 [ 184.640288][ T7308] ? usb_submit_urb+0x13c3/0x1790 [ 184.645307][ T7308] report_bug+0x3c3/0x580 [ 184.649645][ T7308] ? usb_submit_urb+0x13c3/0x1790 [ 184.654656][ T7308] handle_bug+0x184/0x210 [ 184.658973][ T7308] exc_invalid_op+0x17/0x50 [ 184.663461][ T7308] asm_exc_invalid_op+0x1a/0x20 [ 184.668298][ T7308] RIP: 0010:usb_submit_urb+0x13c3/0x1790 [ 184.673922][ T7308] Code: e8 52 f0 86 fa 4c 89 ef e8 da c3 d5 fe 44 8b 44 24 28 44 89 f9 48 8b 54 24 38 48 89 c6 48 c7 c7 00 0e 73 8c e8 4e b5 45 fa 90 <0f> 0b 90 90 e9 84 ef ff ff e8 1f f0 86 fa 0f b6 2d 67 49 5b 09 31 [ 184.693528][ T7308] RSP: 0018:ffffc9000c397698 EFLAGS: 00010286 [ 184.699580][ T7308] RAX: 0000000000000000 RBX: ffff88814c298a00 RCX: ffffc90004f43000 [ 184.707536][ T7308] RDX: 0000000000080000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 184.715492][ T7308] RBP: ffff888034082058 R08: 0000000000000001 R09: 0000000000000000 [ 184.723448][ T7308] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888143a8c100 [ 184.731406][ T7308] R13: ffff8880340820b0 R14: 0000000000000001 R15: 0000000080001280 [ 184.739374][ T7308] ? __warn_printk+0x1a5/0x350 [ 184.744133][ T7308] ? usb_submit_urb+0x13c2/0x1790 [ 184.749150][ T7308] ? __init_swait_queue_head+0xca/0x150 [ 184.754685][ T7308] usb_start_wait_urb+0x104/0x4b0 [ 184.759696][ T7308] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 184.765248][ T7308] ? __asan_memset+0x23/0x50 [ 184.769830][ T7308] usb_control_msg+0x326/0x4a0 [ 184.774580][ T7308] ? __pfx_usb_control_msg+0x10/0x10 [ 184.779857][ T7308] dtv5100_i2c_msg+0x1d8/0x320 [ 184.784616][ T7308] dtv5100_i2c_xfer+0x1e0/0x420 [ 184.789462][ T7308] __i2c_transfer+0x6b3/0x2190 [ 184.794224][ T7308] ? __pfx___i2c_transfer+0x10/0x10 [ 184.799421][ T7308] i2c_smbus_xfer_emulated+0x230/0x11f0 [ 184.804954][ T7308] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 184.810926][ T7308] ? __asan_memset+0x23/0x50 [ 184.815507][ T7308] ? debug_mutex_unlock+0xf0/0x270 [ 184.820616][ T7308] ? find_held_lock+0x2b/0x80 [ 184.825295][ T7308] __i2c_smbus_xfer+0x836/0x1020 [ 184.830220][ T7308] ? rt_mutex_slowlock.constprop.0+0xd5/0x120 [ 184.836277][ T7308] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 184.841642][ T7308] i2c_smbus_xfer+0x200/0x3c0 [ 184.846310][ T7308] i2cdev_ioctl_smbus+0x237/0x960 [ 184.851327][ T7308] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 184.856862][ T7308] ? __might_fault+0xe3/0x190 [ 184.861530][ T7308] ? __might_fault+0xe3/0x190 [ 184.866207][ T7308] i2cdev_ioctl+0x338/0x820 [ 184.870702][ T7308] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 184.875719][ T7308] ? selinux_file_ioctl+0x180/0x270 [ 184.880918][ T7308] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 184.885938][ T7308] __x64_sys_ioctl+0x18e/0x210 [ 184.890692][ T7308] do_syscall_64+0xcd/0x4c0 [ 184.895187][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.901064][ T7308] RIP: 0033:0x7f3fbaf8e929 [ 184.905462][ T7308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.925055][ T7308] RSP: 002b:00007f3fbbec3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.933452][ T7308] RAX: ffffffffffffffda RBX: 00007f3fbb1b5fa0 RCX: 00007f3fbaf8e929 [ 184.941408][ T7308] RDX: 00002000000001c0 RSI: 0000000000000720 RDI: 000000000000000b [ 184.949362][ T7308] RBP: 00007f3fbb010b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.957322][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.965281][ T7308] R13: 0000000000000000 R14: 00007f3fbb1b5fa0 R15: 00007ffdf714be08 [ 184.973249][ T7308] [ 184.976448][ T7308] Kernel Offset: disabled [ 184.980756][ T7308] Rebooting in 86400 seconds..