last executing test programs: 10.937558786s ago: executing program 2 (id=2826): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x40, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) getsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000f80), 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x101}}}}}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close(r3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4005}, 0x4000) unshare(0x6a040000) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fad5734031371301c063010203010902120001000000000904b60000ffff3002984ae6107a470c05304bed3d6655a08639fadf4c4ed7620444fbc31442fe3656716270bc220878b8f5ae50bdb05986d244"], 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}}) 9.846952413s ago: executing program 1 (id=2830): syz_emit_ethernet(0xca, &(0x7f00000007c0)={@remote, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x94, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"8ccce3322c67dc748db496b3f4f412fc14dd2cebf5214b2657409f03a6d7089a43a34c8f21db7b2537c7fb518ecf26cd8bd1c2f01fcfc770d2b630378e2a877e9e1c6e4506b3d8b10dce2236ea35bc32104dbf0d26736dfecc4c31d408402ef7721ec4ea64d3ea2e7e9595b7f216acd51030ada7a12d64c52f40782e1fba9637"}}}}}}}, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(0xffffffffffffffff, r0, 0x0, 0x7f) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x2c4, r1, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x89b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1dec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "6b8911f880792dabfb056052708b698127283aba3e8e11"}}]}, @TIPC_NLA_BEARER={0x16c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5ce8580c, @mcast1, 0x4a}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xdd}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd72}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000005}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 9.823445526s ago: executing program 2 (id=2831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000980)={"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"}) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000980)={"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"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x3c, r7, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x3c, r7, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0xffff}], 0x1, 0x10041, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x4002, 0x0, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x1}, {0x9, 0x9, 0x80, '\x00', 0x8}, {0xfa, 0xce, 0x6, '\x00', 0x6}, {0x17, 0x8, 0x4, '\x00', 0xcf}, {0x4, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xfb}, {0x1, 0x4, 0xf9, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7b}, {0x9, 0x1, 0x28, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x80, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x85, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x9, '\x00', 0x1}, {0x89, 0xfc, 0x94, '\x00', 0x21}, {0x5, 0x3, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x21, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r10}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x203}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0xd, 0x9, 0xa, 0x30, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.819140997s ago: executing program 0 (id=2833): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x2}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'decodes', ' ', 'io+mem'}, 0xf) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) unshare(0x2040400) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002380)=ANY=[@ANYRES16=r4, @ANYRES32=r6, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r4], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r4, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 8.816167358s ago: executing program 1 (id=2834): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000340)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)=@in6={0x2, 0x4e22, 0x8, @private1, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}, 0xddf46f53285f2dc7) sendto$inet(r1, &(0x7f0000000280)="1d", 0x1, 0x200400c5, 0x0, 0x0) getpgid(r3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) 8.687555496s ago: executing program 2 (id=2835): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x21b3, &(0x7f0000000100)={0x0, 0xcb34, 0x2, 0x2, 0x1b4}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r1, 0x11, &(0x7f0000003ac0)="03", 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x5, 0x5, 0x32314152, 0x3, 0x20000000, 0x6, 0x0, 0x4006, 0x1, 0x4, 0x1, 0x4}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) 8.687298582s ago: executing program 0 (id=2836): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@redirect_dir_off}, {@userxattr}]}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) 8.414922736s ago: executing program 2 (id=2837): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800030000000000145f2088ac0f9b0000004500801600660000000190780a010100ac1414aa05009078e0000002450b0f6c0068002f05330001ac1414bb64010101"], 0xfdef) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r1, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.888819109s ago: executing program 2 (id=2838): r0 = getpid() r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_pidfd_open(r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0xfffffffffffffffd, 0xfffffffffffffffc, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x4, 0x0, 0x9, 0xe0470000, 0x0, 0x7fffffff}, 0x0, 0x0) 7.44857675s ago: executing program 0 (id=2839): socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000c0000010906240001000000000904000001030000f3092105000001220500090581030002000007"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x4000000) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, 0x0, 0xc2010) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x1c, r4, 0x101, 0x70bd2c, 0xfffffffe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000100), 0x0) syz_usb_control_io(r2, 0x0, 0x0) 7.326693987s ago: executing program 1 (id=2840): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2036) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002240)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x90, 0x0, 0x0, {0x0, 0x1, 0x7fffbfff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0xfff, 0x8, 0x7, 0x2, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x4, r3, r4, 0x6, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000580)='./file0/file0\x00', 0xbc9dc8fbd81cb451) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002d00)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002bc0), 0x0}) 6.675949086s ago: executing program 2 (id=2841): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ipvlan0\x00'}}, 0x1e) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x413fbacf41ed9f8a, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xb, 0x7}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x80, 0x9e, 0x5, 0xff, 0x70}, 0x8, &(0x7f0000000240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x41, &(0x7f0000000280)=@string={0x41, 0x3, "18dc950382608f48cd11ff0241d1be64ad1c03d124fc3520b1e4cc259bbfb114990461d1e7b6e719b45dc4ffa9998153793184243f5ea592880516b8799d7d"}}, {0x60, &(0x7f0000000300)=@string={0x60, 0x3, "06514d38a38c62011ffa88fdfb3c055d7b41cc128630592c874bac34cd1fb78f2d0046f209ebec25850fc539d90e121a6f2c104842493b0d982e845855af611268e8a1593fb4e7b63ed25a9d3f7c697ad799cad38026971c7e40c59979f3"}}, {0xd4, &(0x7f0000000440)=@string={0xd4, 0x3, "d50e528f903db9eef9d9e72b858222cf1689d1920401aff6a40b80878a57ecd0335ba57a1ff0f6b6c337436d968202c57516b445a9476344dd548bffa817f7552422d3d58f967422c9db7f780da1cb690398afb4b397c692664a87761da5a43df13b8f61739b401e1895eba1306683e17816d1b5e30847d131ed3f22f02f59d473f8b16d7a6c7e578e64abd2063ce45959bd53bfe69b35e4be2442dd62abcb166f2697139aa4653f6a838ce4e22ec085f6226195754ad7ca0557dcb575859917496bd6fd0f571b90114e75a6452e8f098a0b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x863}}, {0x3d, &(0x7f00000003c0)=@string={0x3d, 0x3, "2832022c0e5ebba8a66c54fbc2a0ef224e5ecb0f80a21822028d57f9a5720858969e20b9c34c1da1c8cc63da646fba1b583a0adffa0404cf2f8f44"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c01}}, {0xf6, &(0x7f0000000580)=@string={0xf6, 0x3, "5b3cdaaa7d521dbee0d5e5b4e5634ca23a5e52812b1e8f1d0661aad7cd844a1be67d3a10de096e4b4bd235fc96688ac8d6c277a4cea2caa013a79d46cafedb96ec5adf8b74e58cc6fe829ca148ff0cc77343f3efd207b3155cfb42aa9a81982dc2f9ddea4c2d45b80dad6a1226bc3e872245d4964621b6b1183270231a77d85e6faa94460eb0aa6cdea44bfb5747198f6743bd0952082263d746083b78225baeda71babac82e37fc98ce082f2915af468dfc15a9bee7d09074fe723df1e3ec20c2a15128c456b208008b4412fd66b5ab640cf5de10e15dc3c0eaaa4b590715dd1e59ee15138852d1fa5405ca6c4071537a1de8bb"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x30, &(0x7f00000006c0)=@string={0x30, 0x3, "147431df78d28dcdbb3f1efb4aaf840ea4d344de33e9323ad4fcb22f83f362cdc779d429250152b6ac9c46274350"}}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) prlimit64(r2, 0x5, &(0x7f00000000c0)={0x8, 0xb}, &(0x7f0000000140)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r3, 0x0, 0x0) 6.443368194s ago: executing program 1 (id=2843): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110d4, &(0x7f0000000040)={0x0, 0xe472, 0x1000, 0x8, 0x2e3}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c010380400000800800034000000002340002803000028008000180fffffffd0900020073797a310000000008000340000000000800034000f4ffff0700"], 0x1ec}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x2, 0x9, 0x3, 0x10001, 0x1, 0x4, 0x10000, 0x5}, 0x0, 0x0, 0x0, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00"], 0x0) splice(r11, 0x0, r5, &(0x7f0000000180)=0x1, 0x9, 0xd) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) 5.074537576s ago: executing program 3 (id=2846): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1) r6 = dup(r5) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000340)={0xe9, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @local}}}, 0x108) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="0f01c9ba20000f01d1652e640f0966b8001800000f23d00f21f8f08654090f30f866c74424002f9c00006766c7442402070000006766c744240600000000f364f40fc71cb8f8003636c40f21a41f", 0x4e}], 0x1, 0x2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.659633999s ago: executing program 3 (id=2848): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_setup(0x0, &(0x7f0000000280)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb311, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1001, 0xdc3063570f47452d, 0x4, 0x0, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0x40045304, &(0x7f0000000540)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x116}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r6, &(0x7f0000000040)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x3, 0x9, 0x31d8, 0xa50}}, 0x69e003) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) setreuid(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x30020880) close_range(r0, 0xffffffffffffffff, 0x0) 4.483556704s ago: executing program 3 (id=2850): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000ffffff"], 0x104}, 0x1, 0x0, 0x0, 0x4040041}, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000240)=0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="407a308625e409d76965ee795a44d8afa4bb7b2850ee298d2b0a6d0ab0348c01811e50408f3f70a4c9e1d0f9c3154ff0b38370e44b0c8a440d496d965dbaef363735679ff880c5f728b7b6aee1a8dee71eb0eaa5a8d77c8d147f035c9cc96267ff4aeb050218e3254a584d745a4417efe3dacc8d4f739f03c6bead24b4f518c5e7e92cb08761", @ANYRESHEX=r0, @ANYBLOB="32f30594340025c36b271db7b6146a89079151cdb1630ded7945", @ANYRES8=r1], 0x5c}, 0x1, 0x0, 0x0, 0x20004890}, 0x0) r2 = io_uring_setup(0x5111, &(0x7f0000000100)={0x0, 0x9c54, 0x10, 0x2, 0x1f6}) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000007fc0)=[{0xf00, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x42002, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0xfffffffc}, 0x1c) listen(r5, 0x8) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r9, 0x29, 0xce, 0x0, &(0x7f0000000000)=0xffffffffffffffc8) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r7, 0x29, 0x7f, 0xb, 0x400, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x700, 0x8001, 0xfffffbff}}) setrlimit(0xa, &(0x7f0000000000)) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) ptrace$setsig(0x4203, r3, 0x0, &(0x7f0000000180)={0x34, 0x800, 0x2}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r10, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 4.186506705s ago: executing program 3 (id=2852): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x5, @remote, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)="80006466d3805699", 0x8, 0x20050008, &(0x7f0000000000)={0xa, 0x6e26, 0x805, @mcast1, 0x43}, 0x1c) syz_usb_connect(0x0, 0x17f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b2c6d9400a1a0201b17a0102030109026d0101000000000904000004b76cea000a240100000002010208240800000000c90624060000e705240000000d240f0100000000000000000007241400000600bc241300231ffb4f78aae041c5f916dc54ea75ab53091576f793d10faf992cbf1f8241debae05c0b9479da7f36e008bd521df9096b"], 0x0) 4.016994518s ago: executing program 0 (id=2853): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0xd, &(0x7f0000000380)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) write$nbd(r1, &(0x7f0000000380)=ANY=[], 0x40) io_destroy(r0) 3.851458249s ago: executing program 0 (id=2854): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x454}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x81a}}, {0x41, &(0x7f00000001c0)=@string={0x41, 0x3, "cb58107afa39651062e27a4e06f5b922d741074d21a1edf977639bdb495fd0d06ad9b5badbc4b6bb858d61d462a1cafa0a0063e8ff5e09d456bccbe4c00ce2"}}]}) r0 = semget$private(0x0, 0x7, 0x85) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x3, 0x1800}, {0x0, 0xffbf, 0x2000}], 0x2, 0x0) semop(r0, &(0x7f0000000240)=[{0x1, 0xce92, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000080)=[{&(0x7f00000034c0)="b3", 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x0, 0x20}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080003"], 0x24}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000001, 0x0) read$msr(r5, &(0x7f0000000380)=""/127, 0xffffffffffffffb0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 3.314408328s ago: executing program 4 (id=2856): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) 2.061106607s ago: executing program 3 (id=2857): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="000000000000ff00b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.03726643s ago: executing program 4 (id=2858): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa000000000000711001000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) read$dsp(r0, &(0x7f0000000700)=""/228, 0xe4) setreuid(0xee01, 0xee01) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x6e5261661f604c76) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r1, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0a, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0xfffffff0, 0x0, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000640)={0x28, 0x6, 0x0, r2, 0xa, 0x4, 0xb45}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x4, 0xa36, 0x4, 0x1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.955699763s ago: executing program 3 (id=2859): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x0) (async) 1.578525984s ago: executing program 1 (id=2860): syz_usb_connect(0x2, 0x561, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xf8, 0x3b, 0x18, 0x8, 0xc45, 0x62bc, 0x1eda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54f, 0x1, 0x7, 0x1, 0x60, 0x1, [{{0x9, 0x4, 0x84, 0x7, 0x10, 0x12, 0xd8, 0xeb, 0x80, [@generic={0x97, 0xd, "50517dfc8b7645492fa03d9b20b8ca2df9f558bb8a15d920608140ca96db8ed495b819dc9a0b70d9ee3323275e5ace3494a31ce869d585653e8e6667497d16b69b19f61aafa705227a716ac1926a2d2ee9f91a586335486250800a61f905f7ed57987a3a71a960564b92b1898d542ce85ee79bac86125b24999c3d43b6e401b30de992f541dbc7c51a88b456db596acdd6e6210cd1"}], [{{0x9, 0x5, 0x7, 0xc, 0x7de, 0x7f, 0xfc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x2}, @generic={0xd8, 0x21, "a638d9960f7cdcee77ded952ff43a44a2e8920030c89501a13043fe4f05d1a2f0f46b16a352d8a878a1bf2e6eaba92600ff92d5147ae685a0a38c7b6c5de91a80a79f9205d1e1a3e8342b2f261a38f287551e1a4b4256ac40bfa9f219f5f72c8a84790d63726baa3cfd453d562ede9d002a481c04411149750f886c4b866c2edee113627d2296226a44bb6d33bb4cf2557a7ad7a383087eefdd4ceaee08dfebe6e92ef8a597fc8bdca9accf3669870cc2588eaa9ceff760cca5b106306bf266644c39fbeaaf95ebd7dd57ab6ebc451f5bee5b2f73892"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x92, 0x80, 0x8a}}, {{0x9, 0x5, 0x7, 0x16, 0x400, 0x8, 0xff, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x6, 0xfc, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2}, @generic={0x72, 0x8, "ad3d72ccd4154a876e138c6a9ae7ea940b49ad9bd8e824458625e559394461aef33076b19172623e270a4f95639194dc6fcc0de707ff890ec90154cc1ebae12e608ff39c3510efed833b4ecee8a1cb98df3e88cec022e5cdecbdbeed23e4a533705159a427d6346f05015f69186c277a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5f, 0x8}, @generic={0x5f, 0xb, "1a9afc385bfc67c12f85dd78dd4c49e756aebaead527f56471c81e0ae082b0068b83fc1ef2c82d79db115ac44d420fed9efd3755f0abeb1abc97342648c90648b135eb5dd15655e28b5493758a3ee351427107620d2e1cd82e2c91569b"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x9, 0x6, 0x0, [@generic={0xb, 0xb, "cbe82ed6afbc5370e1"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x2, 0x7, 0x6, [@generic={0xd3, 0x30, "c23382c4aa61d1913760b992f49b6ab97f9efa97696976a324e47990f2b9f809d23f4275297bb52f4a1274016965ad3eba7d486e1fa25efd00f64fba97c4ccb34677e8619c03043123d96c7e29eca82d98e8cd806044b15a3750b4d714411bbdac60542ce7750443ca37d109311d40e9e43703b28daaf66d64e433e5733aeb7e09ce32776eec3d7a35b190683b89d589d0224f7a52764101f3b7fc4d2f4e2757fa4bf79feb5fe8dddadb009099e43c6bc536bd3eb7b3c2795872509314adf31d8fac8a2a40dbdfebd9a8d64e77b5b88222"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x3, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x5}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x5, 0x3, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x75, 0x40}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0xf1, 0x8, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x2, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2e2}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x5, 0x5, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x3, 0x2, 0x7, [@generic={0xe5, 0x31, "58ebc9b00032d27e786b21687077d80a8f8e86b8b39aa090698ec9d1107471fdd62f2d6c2d78fbf0c6d1a2f95751aba50b367abd4b81fa26a98da801a25a2fe55f12915eaceff95ee01d46348a148896702268f7117838cfe4d0f0d80924ea3197c1795d9380c1d8b70730e7e88f29a7575a221bbda03984b7a9b47b4b85b0fe1259dcd1555292b66553765184ac59c6b1a61687c5181735baa4deebdad3b7d386373961d9baa9b26e72c8078b2680a7b191d358fac1cc440695eae7da1824127347ed7d8c62a2e516e6b6b742509086f659bec926590be074dfff07a6eb4cc40c508b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x40, 0x8}]}}, {{0x9, 0x5, 0x9, 0x8, 0x40, 0xd7, 0x3, 0x3, [@generic={0x72, 0xa, "1026eb34a41782e660bdfe9b3db10f1945d64e49677c8a241c792b3bc9fac79dcfc59b9fb133562c53466a697925b5f2dad585d92cb61832ceb152d4ac2273f5698509986b248ac9532b9135238b0d38842738f3c35cb2017b7698c1b68a2b07395f9bda02405068e265fc94b9c04978"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0xf001}]}}]}}]}}]}}, 0x0) 1.573997327s ago: executing program 4 (id=2861): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1/file0\x00', 0x7cae42, 0x0) write$cgroup_pressure(r0, &(0x7f0000000480)={'some', 0x20, 0x10, 0x20, 0x3}, 0x2f) r1 = creat(&(0x7f0000000500)='./file1/file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="67727071756f76615f696e6f64655f686172646c696d69ed3d3235652c00"]) syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x208002) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@dont_hash}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 620.074145ms ago: executing program 0 (id=2862): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xef, 0x6a, 0x1b, 0x10, 0x16c0, 0x5df, 0xb071, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x76, 0x2, 0x0, 0x3}}]}}]}}, 0x0) listen(r0, 0xf) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xd, 0x0, 0x7fffffffffffffff, 0xde, 0x0}) getpgrp(r1) 443.728938ms ago: executing program 1 (id=2863): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000200)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e27, 0x3fd6, @local, 0x6}, 0x1c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) 355.55878ms ago: executing program 4 (id=2864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd7, 0x0, 0x0, 0x0}, 0x94) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x281, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x23, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x8, 0xf65}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000200)=[{0x2, 0x2, 0x7, 0xb}, {0x2, 0x3, 0x5, 0x4}, {0x0, 0x2, 0x10, 0xb}, {0x0, 0x1, 0xa, 0x4}, {0x4, 0x3, 0xe, 0x9}, {0x4, 0x3, 0xa, 0x7}], 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000500)='ext4_da_write_pages\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080), &(0x7f0000000040)) 285.366801ms ago: executing program 4 (id=2865): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e440b021005643ab9777f4bc9cedf5af17bf099ba7ecc1b11bc2944b19f289d5dd65be97522d3d80afb5dfdf6e6622ca3e3f60bd4af439407b1d2f912abec0b7e6cc16b4af3"], 0x47) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, r4, 0x1, 0xfffffffc}, 0x5a}}, 0x0) r5 = socket(0x2, 0x80805, 0x9) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffff8}, &(0x7f0000000100)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000340)={0x8}, 0x8) (async) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x7, 0x80000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10, @ANYBLOB="0c002c80080000003b000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 4 (id=2866): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x28010081) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d4, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x15, 0xc5, "b4b05d74fc5e31974283488b241ac276be"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5698}, @NL80211_ATTR_VENDOR_DATA={0x66, 0xc5, "afb9d86b06d2fddb0c0dc944c590e7c784540ff5122b5df09c4772eac5a635b6be8dcd84dcc95da1617bc50f6593410f53c0e8c6267bf528d62530179d4d2e46b5f86124d0a2dc10345f4d94f02b713d22035460ba8cca288a60042d619c432791b1"}, @NL80211_ATTR_VENDOR_DATA={0x62, 0xc5, "b05e026bc1811fa7a97348a4efe1abb0c8f245ee3461e9fe8d16ea8297cb938875aa4b5f5937438ad11d39553127ca90bf9ebc47bd8b119d81c9c881cdfc530f285468ca627bd5af8a60d86f899da066f01bf84cb3a40f4023e0aca44afc"}, @NL80211_ATTR_VENDOR_DATA={0xc2, 0xc5, "93f13d31a36fd8b0659ad29dee4c65d52ca09e094837c953698f9923876f24d3f8016943271eaa6b43be1067ae20bba448cc689661527b0d50924eb5862f9fc02cc4672cc5364405f4575e7eb4c4e4a385e9a460981f7c4eb97ebb1966c930c0faf83b3330fece452f2a74f9ba0d37e29a60f59f39597dd277a56b2f69ffe8b529a2b56dfd3a38ad0e76dfd6b50217973fff9a59832bd69614010f3387c898b72eb38fe697467383213f4ff88da4655ea359286d9657e501853d7075fab8"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000084}, 0x8050) utime(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x6, 0x7fff}) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x116, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x20, 0x45, [{{0x9, 0x4, 0x0, 0x41, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x87a7, 0x80, 0x1, {0x22, 0xa14}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x8d, 0x7, 0x35}}]}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x3, 0x9, 0x2, 0x40, 0x80}, 0x19, &(0x7f0000000580)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "7c2d7e1d0b7c7a65469b2ad0103a6337"}]}, 0x8, [{0x79, &(0x7f00000005c0)=@string={0x79, 0x3, "8a1f4a2bbd962b5eec88f5c8d57a224201baa267ac1d21f6513398ef26384768b6bc6e8cea394224a6293df6ec745c7cf44f9b8cc8452dc8350800124406a2f7d5c7cd2251382c35077bfdd1f4bfb83d219f63f881fe55d34e6034c4965898b9bacb1fd52bfd03914273f934d190f11f58411ceda34dd7"}}, {0xd8, &(0x7f0000000640)=@string={0xd8, 0x3, "8fd175b552bd7f363c8ceccfb6cf57c13aa870ad1e387d5630ade1f46aee0fa92d6efa011d7c54148779f6b53443dfee7dcedafa7324981a2220d87a187a09e4ff9c5c88c16c353bf52816c23ea53ddec99b6bda9a96de8a06b0c821ccc6cc865f3e2be1db687d8b5875abbaad5699979a4c42aafa7ac1779cbeab354f2be684a2d5aa5094b1e8aace4583dff9b2efd03559a3899ec669f5ff2ed52e6a5d87e278f4ab11364411ee2a3045d450aae11a30369abb69a706b5fc304f98e67dcf96d34ed176e1b964c595453b3361b99f7b7a7ec4ede532"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x41e}}, {0x97, &(0x7f00000007c0)=@string={0x97, 0x3, "a8b7feeb7cec17b24444add5802c4737e8c9965857ac8e230d278feb24ec5ea3950a1d171c2c3721f594ac5983af317fe9986b27220869bd0729cf2e479db46983f17160973ec3a4430131dc39435bb87a2d292ba9bfa8bd547eed50a50063959b2921206fadff5c953fe6f9ad10a51ef017d9ce53064af4dcce3c7675c754098654d83f0625ed15926dab03b70df2189ccc67885e"}}, {0xc7, &(0x7f0000000880)=@string={0xc7, 0x3, "58ac49c7297ba932adedc195718d59d69eca30651d4584371a20e020d05764b6abb654f70bffe208ab1855d87e75b2569124a6900b1595d3a836bc6923e3a232b4142f8e9601ea09e788b7294fe51a89cbe64bc3516bddf25c1fab60c0154b6dc5f1bee6560e1478047cf8e3ace31ee5cce275219eb5c037635a6598990e0e0478dd9cfcb874afeea438224291efb2c9366486d89948db98e4a6aadf625aff56fe95be9e89512954b0658d785b349ec48227a0230755f18a22556ae2969396f2a336f57292"}}, {0xd3, &(0x7f0000000980)=@string={0xd3, 0x3, "4dfe56a7c23900c777222136f183eedc460fc3bc849283c0a775cb22c6f8db704d155b40d601c3338f771fe674724203aa09ede8195803a216d971b10f0f94f0e0ef0154f0e4300f472917a223eecdcac710e26deba5d3df82caccc2a606f16d5615083793960af48a7fef63e69a79e7351f05a0a04279231784e5bcecf1fd51348e3115dd90f8cb4caf7bd140fc64cb5f2475d5853546704f88206ea2008eda06eef0e3a00efd5d9626188adfaddbe1f97c27b9da4e7c6cae5b69cdafeb0448518495dd6e5eb8e5920ed39674dd56f459"}}, {0xd9, &(0x7f0000000a80)=@string={0xd9, 0x3, "d53098cc38d4a90f2a95fdaa3bef1a95bcb9f6790f3c6377365b21d67b463854778c71ce4b34a13cfea8890ed256f948d8da9f79b622b9cac4de099ea5abe5cad0608fb39c0e80d9878d0cf4633cfadd7a2730192b24fda2af904797701ec4fdde2a9262d714d34ff864b4644248b08c5c59347e501ccd6a8a3dbe1c8aaea91244631e5fec297b38be18efea37bde2c980e5b9d930db72e0961ecb3caa1c532b6f64466a0046436c6cee51273c44f3b633af2526cf91d7d488bd65d992c9e2020de9a51514d8f77a73a9528cf595032e5bd310a0b5a666"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000dc0)={0x24, &(0x7f0000000c00)={0x40, 0x0, 0xc0, {0xc0, 0x8, "6de858f437d2fb9d6b31dfa1123f667f6283943a04baa77880a013cd1421a4d4807ec5dfac838439acb3a116e4908a3f870286b4a80afc04660381aab560664b77f03bd81aba282a5739436ee7f0e9e962736102eea66c65074d51b83c756f9669b868172ce1369b979406c5158b35575b716c34b6d3c696fa3478bdefb8b57626f760f6d510cc5263c260523386de6ac4da1aba1e46d8db467f008f29f0e3f8e2ddd08abd723171e3120cda4081221bfe279b5fffaef441754d408d2fa4"}}, &(0x7f0000000d00)={0x0, 0x3, 0x8, @string={0x8, 0x3, "6ce098eaf354"}}, &(0x7f0000000d40)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0xa}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x8d6}}}}, &(0x7f0000001000)={0x2c, &(0x7f0000000e00)={0x40, 0x16, 0x63, "e6483d71626f6281a9023a56da6d774d6de54771c4c35f51de524a4534a0f118b2e6d08e133d739bdfe554f725f7fb537060d4c8c936cf8509796c607c90f3e4d1e54925032258096ef223f09f04ff2c3f16dc8da299ed9c13646017d1cdea46f853d2"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000f00)={0x20, 0x1, 0x7d, "8484dac3c032e4c60f0be474c0acc24d7f735f71c72cd3fde9354481f06e1670a5ee5c52b42bf2cc2c1b2cac821837721b4920caef342f9d67271b696d63298c754021b4211f79464caaadbcc1e76e306857fc4143a2bf774f01fca38c338fc33ba9d2bc9c7d5ab853a1f551fb039edcff5ce7d17f8105cbd25e36b31a"}, &(0x7f0000000fc0)={0x20, 0x3, 0x1, 0x49}}) r4 = syz_usb_connect(0x5, 0xc67, &(0x7f0000001040)={{0x12, 0x1, 0x310, 0x58, 0xca, 0x5d, 0x20, 0x12d1, 0x79a, 0xc579, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc55, 0x3, 0x3, 0x3, 0x80, 0x40, [{{0x9, 0x4, 0x26, 0x8, 0x1, 0xff, 0x5, 0x1a, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x4, 0x3, 0xf, [@generic={0x5e, 0x31, "03e6582f5147090751dfdf345975b83130d0211c69a2c06d2ffd057bd68d47056ae48c62399f5945d1b8201312de11638729bc4607a416206ca9555fd45ee0523377931de85b33f29a46a0590e5e1b1f87518a8fcb7052d0f8da486f"}]}}]}}, {{0x9, 0x4, 0x80, 0x3, 0xc, 0xff, 0x3, 0x65, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x1, 0x5, 0xd7}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x1, 0x4, "e4085975670c"}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x0, "b8"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x2, 0x6, "f43a93"}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x5, "89414ddf05"}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x9, 0x67}, {0x6, 0x24, 0x1a, 0x9}, [@obex={0x5, 0x24, 0x15, 0x42dd}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x1a0, 0x1}]}], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x0, 0x8, 0x7, [@generic={0xe8, 0x22, "dc26308e52e62557322726992d9a764a05ea63f4f7c91dafdd606f1db2c6a69074f861f75bd6332d50357b64eea8d008af6adf4d6056b6abaecc7be1003cb83349e62272806f1e63f79cd53e5acfa9461989d49078eca4ebfc6804299e61eab470c81637d1a07122d2f86b23793284d962ebf41e0e3b4d09572e41e6561b0c6deebe96ba96a91c5e45b31e941176776388d2e66a739f730421f358c897f4a03a76f7abb477a5bb4dcf0417527ffe606e489e8bfe101048fa9d68ab5f6067a731a981793ca025416816faa8c38055bac298bb4aa89144fb8ad2d290349494a8c12ef825015445"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x2, 0x9, 0x6, [@generic={0xfb, 0x22, "8796cd7f8dca3d382ff2f2479d38a845f9b612795a10c1b75fa538dcfe3b98232b0df880f66e3d557100c6c859d2a3453907ac243246020df5e1c2ba455150e6ffb3661728885eaac7f4334aac45247653bd64ae420822bb5b37f2377de23896d6bdb1f3ae67c172b989f2e4cbb6ddd12c57ea3c6537c0fa818847f44e937647590ee92d82fbfd3162cc2696341c5d235e7b306cf8ec5c8b625b19eeec3edf19d73c783483fe320195750a049a6bf4895fa1d8175eab3538b63a6328cd4cf015fa1e8a16d7b0ce1d3d1e44c7f75670aee1fff52cc657592d088e22175e5a51cd399d208527502ed3a8a18a3fa0ee130a5b69866860dc7d812d"}]}}, {{0x9, 0x5, 0xd, 0x12, 0x40, 0x1, 0x4, 0x8, [@generic={0xcb, 0xb, "c0b6d380a8a67c56ae429cfb0d232d35645e17942ea0f0f89e1c2d70ace722a7181fcc9dd520dc07557e0cc608a31aba07971aafac86ee25c19c926a7ca87ae4fddcdd7f6cc1459be72f46ffe873362dcfa6750e52e6b1eaea3fa2ea0b2262d34e2b0d08c9aaec679454a44a21f6258acb2ebeb3307b49ee9817a33ac01bfa506fc6c795a2a5eb2fa967d8e3cb153f40a1d2e5e9e7725e8c41d53bdc165b580dfc9090300f9aa12e81360899fa6d2960716cf3bc3b0cfcb4ff5da072cef4951e893e3ccebcb5da758d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x3, 0xa, 0x5, [@generic={0x32, 0x9, "58fe224f0137a229695187f015d90e0b32d76438fbf5a8180ee2349aa27f34d8751b554a7c42d69fa15803886f14f8da"}, @generic={0xe3, 0x24, "dc1e73767be542d112b168a6c92e488c09ffa062e64d9e709947d1d552df9f7935c2fa45d76333bbf33e0e9e94de12fa229a22c86a2bf56cb7243de3ca8053ad7944bce3e82312ce8605952e1bfdab6ca6ade5a48a49d55c3cb3538c697b25ae939ade3b1a8e7e80a99378e883f1da9723ac8ca06eba89c733ee099458a270644258f7b30d096d45957334518bb198e1967d15ac50f2085757e26c69251f073293e91bbbc4d14a240116759bc83018cfc961cc6a16a592666179e7501d86df54a3e8a9aacf0a02b277df841d96f3262df4194a034f1ef500b330aff06d3f56e7f1"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x0, 0x2, 0x1}}, {{0x9, 0x5, 0x6, 0x4, 0x3ff, 0x3, 0x5, 0x8, [@generic={0x33, 0x30, "711e5d73d4d31159f6d7b1547c8804e5aea4d91c8b68efa7de471a7ca9128e463b5b69a864361ed68d592bd1163bd2126a"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x440, 0xe, 0x0, 0x9, [@generic={0xba, 0x11, "627d8670f7554437767e53f38c88e2f0b696da6317e63f545b4f82fbe1be2f6b4194c1803c1b359d0075ea2160cd4717932285a1209aa068f6cbaa8c567cdfcc9b93c7de0b3d6d1b4778303ab0352ce5d208345ed0378fe46b95792486c12b620fae0870b42c309555af2a21e3fdbd47557120236c2b7a3b0be64e011bc6938bf88d7635fc7a1bdef958bb6a0bdc5609123d7cb85ced68c4319f9489f1776d2bff572a1fa809a94c30c0c2401e25c34eeae0b6490ca7419b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x6, 0x5, 0x6, [@generic={0xa6, 0xb, "c8e4b26287a0f94b9efed635a920e3d8699f0d6a7505abeb7efca18c2505d6683e5910a11b5db87e4ea8dbd4be2e9739eccda00c65e305d0fef24729ef9c39c6a244ae5b8faba9a3a3534676120a9bbf4ffc90a9e5a7e5fa5f752e0bb061fc18053ff405d0a86abef419c111c8b773a8f427c48d2d328f2f70f783e35afc66c5122bd2c4d672d506149f37de89488b33accef4010ac6ec11b78c0e0311fe2d92eaa75a25"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0xaf, 0xa, 0xda, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xb217}]}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x4a, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xb0, 0xa1c4}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0xfd, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x6}]}}, {{0x9, 0x5, 0xf, 0x2, 0x200, 0x2, 0xd, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}]}}, {{0x9, 0x4, 0xe5, 0x5, 0xb, 0xbd, 0xd6, 0x1b, 0xfb, [@uac_control={{0xa, 0x24, 0x1, 0x60, 0x4}}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x70}, [@extension_unit={0x8, 0x24, 0x8, 0x2, 0x3, 0x6, "cf"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x305, 0x6, 0x3, 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0xd3, 0xe8}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x4, 0x5, 0x2}]}], [{{0x9, 0x5, 0x5, 0x4, 0x10, 0x8, 0x6, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x7, 0x6, 0x9, [@generic={0xae, 0x11, "fe4cc756a2f434e4b4be3fa1f82cc7f1080187770b093dd1345d2363a4172aa2c29d89e8ebfe6921a3da6ee38d9f24ae4549d7da035060b253c0e8e295a44f0ea374bc60edb72ea7a0593cd44873e3a69fce485d41e0ad37e39ae338f0ba225e273e80062eda56054d0b677088ce68a83d3f19a2b002d567a169ac5aeefcdf0f705f30f5550cb2064cf73af95d574a42dec3ca6123a814ab868705de56fc11e5b05fcbaef7ccfbc037e18520"}, @generic={0xb6, 0xc, "5b29935ee9e01038df01678d22f5b30e4191811d4e6acbd39d54614e23bf4fe3eda9259353ce625634f0b12be04e25b4d1de3d24496bb4758c5a66aedf685429af09de22aef5a207d46f9d542c5fa50efe448a2386b5783d75a75405cb9cf17b8df56bf3d0c13ee9deb1b33bd29ed2846a8669786003e4d5e9ce8d84bea59090e292b2848de40c40ca4ce6e39f305a81fac1670783ecc76d1bf9b6890457bf464585d08b9a796db538b2dbebe278dc7b6569f427"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0xf, 0x2, 0xa, [@generic={0xd0, 0x21, "97bb4ffbd15aa0fa0d10d17b7efb0081734b6fe797b06498488113cf6f7c2f57ce7c696b561778f94cb9090fa32a5f84e667ac32b94d6365fa1389624fa7488ac13f378ea6533dddede11292359c505808c04f117044bf190fe7216584566a660fdb24e5d7b9e3ac8017f2167fd22d273de46c62c358f298411cdb652a6d89262239978e1afd56b3d4dd59be82128394fd3ad639ea8781107a91ee58fe694643162e229b1b36ad0a17b54dae7c981e42c01f0f4cb73f40ccae2df47016003cd45cf8d3d6608425e68df40da4299b"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x7, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x80}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x0, 0x2, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf0, 0x29f9}, @generic={0xee, 0x31, "5cfe653a61b4f20faa96446ad1af96be9ba84a8ff32e09cd2ef9a8a34a9f12dcd168682ebb6da96b63ac6777f58b83b185b0afa8414fd49ba0e000fe14f0228564b31b2c9f05bc76624d8a8eb05b8d42283ee834f22bc48955afd8f64b5d9688ce752a350de4bdbb559e37f4410e71c1cf088c483bfeb963f12479a96fff77a0e1ef4aaad0dcea131ed4ac71b124337b6e826971b17ac31c6711c3b1183551c8463b57a66c3b4688c4f917953b7582bfef596eee1b9b2c697d2b1292a77ee142165ca98ed1d90241b9a11a7cfc692d9e5b9e604795da67866c95c00b77aab583fe77ce29b4502a986d8af54f"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x8, 0x0, 0x4, [@generic={0x100, 0x22, "492e00b9cc81f15f95b65a606eac05cdaf6cf4123137c3406ab1e9428add269aba7be4e161e29b297efd68b151f2fffa25c768ab47aa70e8c9ad2eb5025564beec0fcac53f02e07f052bca46856160daaeb798455dcedb48e784125773691326bbad121826e52aa57c89a33a517e8b9118625e15d1c2cf93793066863606589c45f7e508403e30d2225646ca6ffdd5a0fc0efe885120d84956b5e895c539b0cf070f45b8d790b96cf970243bca17c488bfeb32a1f3352082e30ad78342f0027e8dfd124fd3c9b1c4412b54543a0403a2c9a82ac04d7664e539f038aefe2a45ff508a98343d6752022ffd9662f3ab8491a4c4499c3fb0b0eba68dbdeaded6"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x9, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1fb8f38903abbef9, 0x9, 0xff80}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x2, 0x9, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x2, 0xe0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x2}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xc9, 0x7, 0x96, [@generic={0x93, 0x32, "c1f842ac22f42e09e902695b311994160fcc8edbb36e560fd72afeaf37834f38332db3ddcf18576b14667ac1601215bc9f3de05d73f587ee3f16e6c60eb6fc56ac711e19318f5d28b0a4376cc87d82c70d95345f96ec208f723c801e000ecac6b08601add36e7ee35caa22af7f1400822a07e072bb362394893e916583416a0b8610be1f35913edc271de6c1d2bf5d1780"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x2, 0xb, 0xd}}]}}]}}]}}, &(0x7f00000023c0)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x110, 0x30, 0xff, 0xff, 0xff, 0x9}, 0x19, &(0x7f0000001d00)={0x5, 0xf, 0x19, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0xc, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x5, 0xfe, 0x9}]}, 0x8, [{0xf3, &(0x7f0000001d40)=@string={0xf3, 0x3, "021280eb5f1355257622ada556f54f5c9f9d9f7069501d955ae44954e6e89cd6d85ffe9e04ab176db8a287ef9e1d704ed0f2cabf8e07dcdb56e8d77221ac05d5e3fdf678e6bc1b408f71e67c23e414d7c5a2ea946d3b84a62113e116cf81ec678301837049bd0e0e3457813c3d3b3018ef25518e4527a90ae335fef7b6e980fe618c31ae8715f1ab3080b3a39e61544d56b3939bd1febb26e84807e3b9febae3fa9d51c0187fb8272e9de4ecc1115689085a51ff188df440c103e4c0a16dac976af5e5e100cb00b87dee21634a57523e4990f2ca3dd3ec1306e4150325357d9fb6b150a42f9301158f8ceac0ec5139c3ae"}}, {0x9a, &(0x7f0000001e40)=@string={0x9a, 0x3, "360f9e58bd236d1a2776529e72dd22deb1d3e50c471f736f5a7dc121ed6f39d39f18f3c8a43cf35df1a0b1c93600326292c9b84f12523de852f708f1f414aed139f22026f996c6c91c2086534102f3bbbab9ab6e3f43868727c635f512b218239d79b384f9d5bc3acbdae67c9f4040df599dd8b0710ac673b8582f01834a7ddef26da5217811ae7abc4f19fef0173fcc2857dd52b3e15461"}}, {0xdf, &(0x7f0000001f00)=@string={0xdf, 0x3, "b3d88ef6646767a4472cddf3bad1971e9e22e1bddb5b7a86e40ad7e47cb5bafa69406ac931d298b91bfb421f50708579be90296932c8f1d0b709ca71bc446542421540f0f645224441a311ceb671b8ab6bd4316d44de630b8f8a60a791a337e9528e0851d830759bd304204bfc82a762c20c9cb491e25fff2879230bc05d95157349bc634fa2b9fc1b20b0809135ec1b10450c5a834e292e4b87ef750618ea1d75dd7cfe0fc759cfd1758a48d223fdda1da5ee044f04dbedebea94d92410fc07645d7e2f3807775d36aba9ed2ad9b5e072c66d49139c612950ca0b966a"}}, {0x93, &(0x7f0000002000)=@string={0x93, 0x3, "5d74b382210457f3624a91b82da088f5954baa102d10162e1fc88d41e3be7e1f1ba77f3fb4c4d48d5936ef2c74ee7370f4cf85d64de3c82c40b4b95dbb2c8bd9a688deee3d905666f73e687d382b44264e79fd8853d4f7562c5b0f76c213bfe639334c67c6e886a18ac8d3497613c95806ec2077f9c5e2a3f75f246905537d6a9057568de546c58d4543a22ff5f701d146"}}, {0x95, &(0x7f00000020c0)=@string={0x95, 0x3, "5ce45ba95456d3a77a5001dd7595c620a19625ba76b54277163f4a75e13dc31c477273efc92127b659e3321f6068632d5381048f2cb8688f4d08df928e9cb21abc22af4ef78aa61946f3dbfea3a7c1ff5b06110a2bc282d929420f5114454e97d0a60526af4cc725194666853cdb409e1dadbcab4833ae851e6a23272d029474423f465a5283ad424e592f886cd109c3d6e04b"}}, {0xf9, &(0x7f0000002180)=@string={0xf9, 0x3, "b13adad552ed7ef84a5cb5206ce43f2606960d6d830acf22a002f71b9b35fcfb6c6b3344608f604857ca1e4f6e690183a92319bc1f1e01648371137c740d66da528b0f90119f1aa83ce8adb94649d62aec584f6b53871c41f2bf97b230bc88a3755f286bb3d014ca519c72c2f95d295e376c9a7701182e305d9e03ab1ad9d09237a3b933a667657e2a6c07e1ffdcf7858c572f40ba038204bf5841296082cd938b8b5177fdc473f2b8b428963263a1ba1d555ab7c20337851edc6eabd09fec6925e3a86de103a7ea787e11d267c1d8f622e6a65ef4cd4269b78127965c9b67d76b26a0e9d3660a8c250c22c3c3335024639b6933ee86d2"}}, {0xb, &(0x7f0000002280)=@string={0xb, 0x3, "7d505ecae73d5e7e8c"}}, {0xe0, &(0x7f00000022c0)=@string={0xe0, 0x3, "b96f4f4be8e7442f6913dcca4ab5a3f34adffa22c5b2ed74e02009e4331fedab9961932022058ccadfe6c68293b73cba14b0079c0989793e6fc4cd4c2f1893a239a0bd58cbe5fa6e328ecfc663ef36961f9ce6ba384a9ae028d541a16be46d3374500febe8147d1ce7075af1616b3048dbda4032886d8585e6980054ec25878afa1221dded8f7971d7069a6c4fec1fb434da2b75efc1dd934350b7b4c964a8b7b8659265d64bfe1be2a705e30b3980fdf8cbc5285aa38c6484d92cd76594697986c202a44767ba27c11d02a72348809e398887aa38ee356c5b879cb7ea89"}}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x400800, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000024c0)={'sit0\x00', &(0x7f0000002480)={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xac, 0x14, 0x14, 0x43}, 0x5, 0x4}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002540), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000002680)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0xb0, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x64c}, @NL80211_ATTR_FRAME={0x58, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @initial, {0x0, 0x6}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1c30, 0x2, @device_b, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x24, "19ae5dd6f2bff128ef87910f26db85f15b07c3336d25a09cd3377f0b745a678568264eb4"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x120}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x9]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) connect$pppl2tp(r0, &(0x7f00000026c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x3, 0x1, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}}}, 0x3a) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000002800)={&(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002740)=[0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0], 0x4, 0x1, 0x3, 0x3}) syz_usb_control_io$printer(r4, &(0x7f00000028c0)={0x14, &(0x7f0000002840)={0x20, 0x30, 0x3, {0x3, 0x24, "da"}}, &(0x7f0000002880)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "80477e8962b0f0e27af5d4d4544502e963aaad54410d5989b564"}}}, &(0x7f0000002bc0)={0x34, &(0x7f0000002900)={0x0, 0x15, 0xca, "2fb41a26d1fea9490a0186f70cc17344776026c8619c8f39f1b9469066f748b6498433c52915b95ed2951988dff9fdb454584e2d372470440e73f8f9e75455504a9a8e041664e3d2f93feb48d683934c0bd0b28034494877bdff3eb621373d8ad2444ca26b70c87ee8978103f97b53d72e08414ab1e35e09bb8ff573f426d021acddc4a11264fe5c0f605c24d7ea8023116c8181c00069f887b13455c4a5afd737dbf9e561ed122cf459bb0507688d87f1d293206db7f137d97fea7a179b2ce10aede152fc509dc83da9"}, &(0x7f0000002a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000002a40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002a80)={0x20, 0x0, 0x88, {0x86, "3efb1141dae2eeab59fb76dd944f1829559ca0cf36c87d39f2cb20aae9602911706487ac4c305c3a58208d38c010a7a4cb83a50241957c3c81c52d33d52ed49c09fc29767e9ed09920fc5282d025cffc5e915519c7e503bc11b1099beb77ca41de0afa99b7a54062626ae36deae1058d98dfe67e11c5a061658e60532e62771993c8f1082fb7"}}, &(0x7f0000002b40)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000002b80)={0x20, 0x0, 0x1, 0xfc}}) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000002c00)=0xff, 0x4) syz_usb_control_io(r3, &(0x7f0000002e40)={0x2c, &(0x7f0000002c40)={0x20, 0x9, 0x72, {0x72, 0xf, "74428ae1c75906f1ff3c42a0a3e8931969c6d48b3bf1fe8b004eb2205fc47b262d252e8b15177011225a23ce5887018b2d3052e64feda9627df483ae081d8f1fd9be95307f0dd0f0a5ee0f3807042fdee15e0d0952ee0e684c5cf7e162e96419648b3ce877ca50c47a294f35831d7ac4"}}, &(0x7f0000002cc0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "9e3c9959d1ef23fe41344459b031c8fd0d6a644d08b9b4d486690921dad38bb6c659fcd731045f73fd7ca50fde7c78d5e5370685def03079b3a489b84edac4fec917c63538f05042a0117f17305027bfd0167fb53152d8ac811a1abffecaa2fced7b6dc42e56352da5f8023984c68d68"}}, &(0x7f0000002d40)={0x0, 0xf, 0x55, {0x5, 0xf, 0x55, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x21, "1d86c8f6c87cd7d28c004f108e54412b"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "762f5a8cbb2db6734bc61e2dd22ab871"}, @generic={0x21, 0x10, 0x1, "8bfd12150d354b2d6bbf7a9e475bfc2927a18162431fb25cd43e82d81317"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xc, 0x5, 0x7}]}}, &(0x7f0000002dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3b, 0x80, 0x7, 0x3, "42201e6c", "689de4e5"}}, &(0x7f0000002e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3e, 0x10, 0x4, 0x31, 0x31, 0x7, 0x3}}}, &(0x7f0000003340)={0x84, &(0x7f0000002e80)={0x40, 0x31, 0xc4, "c8991c7446a7f9b2c8b158b06e3e1942ea182c35047e36ff56eaa5fff64898f40d23b78258c5cc64419544b38a602674b57e44903e9c9b3c1ceacef0945326318b374e1c0169c94979ba328aa0eafad667e765c305c3c62a58335f44bd6d06dda96e3bbf3cd27ec35d046340acd9a67420841ebfa2023c3874cef67317293bcad40905a1153dbdb6d0fd7f650897c950af0d9989f46815a5ebe8758e3ba0be6321453c800bc9828c66752c387c4a1b70d744f12ece91706f5a82798eb4059262c5a81f2a"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003000)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000003040)={0x20, 0x0, 0x4, {0x160, 0x80}}, &(0x7f0000003080)={0x40, 0x7, 0x2, 0x7f}, &(0x7f00000030c0)={0x40, 0x9, 0x1, 0xd}, &(0x7f0000003100)={0x40, 0xb, 0x2, "5806"}, &(0x7f0000003140)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000003180)={0x40, 0x13, 0x6, @local}, &(0x7f00000031c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000003200)={0x40, 0x19, 0x2, "2e1e"}, &(0x7f0000003240)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000003280)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000032c0)={0x40, 0x1e, 0x1, 0xf}, &(0x7f0000003300)={0x40, 0x21, 0x1, 0x3f}}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000003400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000003440)=0xa0000) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000003480)={0x1, @bcast, @netrom={'nr', 0x0}, 0x7, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000003500)={0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000003800)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000037c0)={&(0x7f0000003580)={0x220, r6, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "4de065e7edecb5a1cade"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "2868a0"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "0c8b79322d76250add14e7"}, @NL80211_ATTR_FILS_ERP_RRK={0x7a, 0xfc, "da5b39480d006a9c7b9e8760e773136341101fd521ee668f52f162625adb9a987d0683c3741a927894228ac2fea7f3e8df21472f590b9cdc2600622364f22d81117c8fbdcaa58dd4922b0860d931af4f94144ec6a726a432d4c9187be81e5fe0cd02becaa5abde31dcc8d3e41f8f43f5b9f93ba7d3cc"}, @NL80211_ATTR_FILS_ERP_REALM={0x19, 0xfa, "82d22778f07ee11811f344f431ec1f81124952dd90"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfff5}, @NL80211_ATTR_FILS_ERP_RRK={0x6b, 0xfc, "5abcf422ac1bdc311efdf293a07c0f4bf75bbc4d5a3f3125341090860cd7500af1fc4f388ee7e5d2184963904bcddfcc1efdc2109b00fc744635762112353cefaf921ce5f2b76e4108400ab7dae48762e7861a976e0623e3f5a4e2b2dff99fed3edb4da02e3c1c"}, @NL80211_ATTR_FILS_ERP_RRK={0xcc, 0xfc, "8d1fa8e5b7b9534e62a65d7f0220277bc89c0a7e07a0b780005e6501bc6c6d4b9fc22782df877e78d90982f442501cb93b8c573439933263a2ecd645db3290c37b64176971bc7257bbf3552f968c5b315311ccd1fd7ab7542e9daa0508bf5f0d7827a72c0f470d5e00f5b79779c76bfc822967d7fb47f1304b0c861633d783c71a3e132b135f3e8cbd33e16d9fc122c324423eee7a2cd63c2b3c652ad57a193d86203c558342603210ad2a0cfbb68726240137da33a0d9d6a03e5cda16a3b550592d31cdc83fdaa0"}]]}, 0x220}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003880), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000039c0)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003980)={&(0x7f00000038c0)={0x8c, r8, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000003ac0)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x74270cd8c3b33801}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000003b00)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003dc0)={r0, 0x20, &(0x7f0000003d80)={&(0x7f0000003c80)=""/141, 0x8d, 0x0, &(0x7f0000003d40)=""/16, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003e40)={0x11, 0xe, &(0x7f0000003b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xaf}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xb0}, @alu={0x4, 0x0, 0x7, 0x2, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f0000003bc0)='GPL\x00', 0x1, 0x3e, &(0x7f0000003c00)=""/62, 0x41100, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000003c40)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0x0, &(0x7f0000003e00)=[r0, r0], 0x0, 0x10, 0x4}, 0x94) kernel console output (not intermixed with test programs): 852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 531.704504][T13860] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2184'. [ 532.464862][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 532.815253][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 533.237017][T13878] netlink: 'syz.2.2192': attribute type 2 has an invalid length. [ 533.314487][T13881] random: crng reseeded on system resumption [ 533.355013][ T30] audit: type=1400 audit(1764514668.369:1873): avc: denied { append } for pid=13879 comm="syz.1.2193" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 533.465576][ T30] audit: type=1400 audit(1764514668.369:1874): avc: denied { open } for pid=13879 comm="syz.1.2193" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 533.478159][T13881] Restarting kernel threads ... [ 533.496459][ T30] audit: type=1400 audit(1764514668.539:1875): avc: denied { ioctl } for pid=13879 comm="syz.1.2193" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 533.501208][T13881] Done restarting kernel threads. [ 533.714409][T13880] netlink: 'syz.1.2193': attribute type 10 has an invalid length. [ 534.439717][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 534.449886][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 535.097454][ T5922] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 535.199159][ T30] audit: type=1400 audit(1764514670.259:1876): avc: denied { write } for pid=13905 comm="syz.4.2200" lport=41161 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 535.266238][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.284252][ T5922] usb 4-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config [ 535.311359][ T5922] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 535.476809][ T5922] usb 4-1: config 1 has no interface number 1 [ 535.496520][ T5922] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.505624][T13916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2203'. [ 535.981714][ T5922] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 536.011242][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 536.029508][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.037868][ T5922] usb 4-1: Product: syz [ 536.042694][ T5922] usb 4-1: Manufacturer: syz [ 536.047937][ T5922] usb 4-1: SerialNumber: syz [ 536.147368][T13926] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2206'. [ 536.157303][T13926] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2206'. [ 536.338324][T13930] netlink: 'syz.2.2207': attribute type 5 has an invalid length. [ 536.395500][T13933] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 536.455464][ T30] audit: type=1400 audit(1764514671.509:1877): avc: denied { read } for pid=13923 comm="syz.1.2205" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 536.455509][ T30] audit: type=1400 audit(1764514671.509:1878): avc: denied { open } for pid=13923 comm="syz.1.2205" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 536.455530][ T30] audit: type=1400 audit(1764514671.509:1879): avc: denied { ioctl } for pid=13923 comm="syz.1.2205" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 536.506973][T13941] netlink: 'syz.2.2211': attribute type 10 has an invalid length. [ 536.638234][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2209'. [ 536.638249][T13943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 536.638278][T13943] netlink: 'syz.4.2209': attribute type 19 has an invalid length. [ 536.638287][T13943] netlink: 'syz.4.2209': attribute type 20 has an invalid length. [ 536.850317][ C1] vkms_vblank_simulate: vblank timer overrun [ 537.485024][ T5922] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 537.572782][ T30] audit: type=1400 audit(1764514672.619:1880): avc: denied { create } for pid=13950 comm="syz.0.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 538.061040][T13953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.172032][ T5922] usb 4-1: USB disconnect, device number 99 [ 538.349108][ T30] audit: type=1326 audit(1764514673.409:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.378844][T13958] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2217'. [ 538.424721][ T30] audit: type=1326 audit(1764514673.409:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.448251][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.474822][ T30] audit: type=1326 audit(1764514673.409:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.525195][ T30] audit: type=1326 audit(1764514673.409:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.554915][ T30] audit: type=1326 audit(1764514673.409:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.677863][T13963] input: syz1 as /devices/virtual/input/input20 [ 538.754256][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'. [ 538.785490][ T30] audit: type=1326 audit(1764514673.439:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.824473][ T30] audit: type=1326 audit(1764514673.439:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.858975][ T30] audit: type=1326 audit(1764514673.439:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.958366][ T30] audit: type=1326 audit(1764514673.439:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 538.981743][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.989845][ T30] audit: type=1326 audit(1764514673.439:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 539.013313][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.020342][ T30] audit: type=1326 audit(1764514673.439:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.2.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 539.043823][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.195507][T13985] netlink: 'syz.0.2223': attribute type 10 has an invalid length. [ 539.660556][T13991] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2225'. [ 539.768270][T13991] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2225'. [ 540.422784][ T5879] IPVS: starting estimator thread 0... [ 540.525960][T14007] IPVS: using max 40 ests per chain, 96000 per kthread [ 541.399371][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2235'. [ 541.422693][T14042] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2236'. [ 541.531904][T14042] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2236'. [ 541.948186][T14053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.001443][T14053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.070034][T14058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14058 comm=syz.0.2241 [ 542.100061][T14058] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 542.164778][ T8814] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 542.173015][T14064] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2241'. [ 542.394625][ T8814] usb 4-1: Using ep0 maxpacket: 16 [ 542.401315][ T8814] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 542.409812][ T8814] usb 4-1: config 0 has no interface number 0 [ 542.476284][ T8814] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 542.493126][ T8814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.518742][ T8814] usb 4-1: Product: syz [ 542.532469][ T8814] usb 4-1: Manufacturer: syz [ 542.546752][ T8814] usb 4-1: SerialNumber: syz [ 542.573526][ T8814] usb 4-1: config 0 descriptor?? [ 542.587774][ T8814] hub 4-1:0.132: bad descriptor, ignoring hub [ 542.607895][ T8814] hub 4-1:0.132: probe with driver hub failed with error -5 [ 542.664695][ T8814] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input21 [ 542.702611][ T8814] input: failed to attach handler mousedev to device input21, error: -2 [ 542.801628][T14066] binder: 14065:14066 ioctl c0306201 0 returned -14 [ 543.524671][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 543.524686][ T30] audit: type=1400 audit(1764514678.579:1938): avc: denied { create } for pid=14083 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 543.586040][ T30] audit: type=1400 audit(1764514678.579:1939): avc: denied { write } for pid=14083 comm="syz.1.2251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 543.751905][ T30] audit: type=1400 audit(1764514678.689:1940): avc: denied { create } for pid=14084 comm="syz.3.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 543.806263][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2249'. [ 544.012854][T13499] usb 4-1: reset high-speed USB device number 100 using dummy_hcd [ 544.326496][T13499] usb 4-1: device firmware changed [ 544.353216][ T8814] usb 4-1: USB disconnect, device number 100 [ 544.497725][T14100] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2254'. [ 544.507004][ T8814] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 544.714604][ T8814] usb 4-1: Using ep0 maxpacket: 16 [ 544.729248][ T8814] usb 4-1: config 254 has an invalid interface number: 235 but max is 0 [ 544.742740][ T8814] usb 4-1: config 254 has an invalid descriptor of length 255, skipping remainder of the config [ 545.236747][ T8814] usb 4-1: config 254 has no interface number 0 [ 545.243063][ T8814] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 255, changing to 11 [ 545.254821][ T8814] usb 4-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 59378, setting to 1024 [ 545.266241][ T8814] usb 4-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.329825][ T8814] usb 4-1: config 254 interface 235 has no altsetting 0 [ 545.350640][ T8814] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 545.360947][ T8814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.372408][ T8814] usb 4-1: Product: syz [ 545.378025][ T8814] usb 4-1: Manufacturer: syz [ 545.382855][ T8814] usb 4-1: SerialNumber: syz [ 545.400533][T14088] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.704039][ T8814] usbtest 4-1:254.235: couldn't get endpoints, -71 [ 545.754684][ T8809] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 545.762424][ T8814] usbtest 4-1:254.235: probe with driver usbtest failed with error -71 [ 546.459976][ T8809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.471413][ T8809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.546405][ T8814] usb 4-1: USB disconnect, device number 101 [ 546.560858][ T8809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 546.633632][ T8809] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.654447][ T8809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.677455][ T8809] usb 2-1: config 0 descriptor?? [ 546.778552][T14129] lo speed is unknown, defaulting to 1000 [ 547.107842][ T8809] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x6 [ 547.121273][ T8809] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 547.524634][ T8809] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 547.679649][ T8809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 547.714955][ T8809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.746153][ T8809] usb 4-1: Product: syz [ 547.754507][ T8809] usb 4-1: Manufacturer: syz [ 547.760209][ T8809] usb 4-1: SerialNumber: syz [ 547.771743][ T8809] usb 4-1: config 0 descriptor?? [ 548.003847][ T8809] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 548.312592][T14161] netlink: 'syz.2.2270': attribute type 3 has an invalid length. [ 548.563752][T14161] netlink: 'syz.2.2270': attribute type 3 has an invalid length. [ 548.735610][T14169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2272'. [ 549.232593][ T30] audit: type=1326 audit(1764514684.289:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.353332][ T5879] usb 2-1: USB disconnect, device number 87 [ 549.449596][ T30] audit: type=1326 audit(1764514684.289:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.475348][ T30] audit: type=1326 audit(1764514684.289:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.501011][ T30] audit: type=1326 audit(1764514684.289:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.573685][ T30] audit: type=1326 audit(1764514684.289:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.635071][ T8809] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 549.654978][ T8809] usb 4-1: USB disconnect, device number 102 [ 549.668163][ T30] audit: type=1326 audit(1764514684.289:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.739488][ T30] audit: type=1326 audit(1764514684.289:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.781801][ T30] audit: type=1326 audit(1764514684.289:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.817644][ T30] audit: type=1326 audit(1764514684.289:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 549.841247][ T30] audit: type=1326 audit(1764514684.289:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14179 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 550.332998][T14219] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2289'. [ 550.971934][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2293'. [ 551.304988][ T8809] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 551.568042][ T8809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.589993][ T8809] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 551.607676][ T8809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.618603][ T8809] usb 2-1: config 0 descriptor?? [ 551.671121][ T8809] pwc: Askey VC010 type 2 USB webcam detected. [ 552.064694][ T8809] pwc: recv_control_msg error -32 req 02 val 2b00 [ 552.396277][ T8809] pwc: recv_control_msg error -32 req 02 val 2700 [ 552.430323][ T8809] pwc: recv_control_msg error -32 req 02 val 2c00 [ 552.440096][ T8809] pwc: recv_control_msg error -32 req 04 val 1000 [ 552.450251][ T8809] pwc: recv_control_msg error -32 req 04 val 1300 [ 552.485199][ T8809] pwc: recv_control_msg error -32 req 04 val 1400 [ 552.492099][ T8809] pwc: recv_control_msg error -32 req 02 val 2000 [ 552.499257][ T8809] pwc: recv_control_msg error -32 req 02 val 2100 [ 552.506866][ T8809] pwc: recv_control_msg error -32 req 04 val 1500 [ 552.513762][ T8809] pwc: recv_control_msg error -32 req 02 val 2500 [ 552.721829][ T8809] pwc: recv_control_msg error -32 req 02 val 2600 [ 552.729006][ T8809] pwc: recv_control_msg error -32 req 02 val 2900 [ 552.737863][ T8809] pwc: recv_control_msg error -32 req 02 val 2800 [ 552.998504][ T8809] pwc: recv_control_msg error -71 req 04 val 1200 [ 553.025251][ T8809] pwc: Registered as video103. [ 553.036429][ T8809] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 553.073433][ T8809] usb 2-1: USB disconnect, device number 88 [ 553.208047][T14276] xt_cluster: node mask cannot exceed total number of nodes [ 554.056531][T14290] vcan0: tx address claim with dest, not broadcast [ 554.644148][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 554.644186][ T30] audit: type=1400 audit(1764514689.249:1965): avc: denied { bind } for pid=14282 comm="syz.1.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 556.310371][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 556.337920][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 557.178337][T14318] netlink: 'syz.0.2317': attribute type 4 has an invalid length. [ 557.199497][T14318] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2317'. [ 557.350989][T14325] netlink: 'syz.3.2320': attribute type 1 has an invalid length. [ 557.536352][T14325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.784076][T14331] 9pnet: Found fid 0 not clunked [ 557.907357][T14332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2320'. [ 559.533708][T14355] lo speed is unknown, defaulting to 1000 [ 559.994624][ T8809] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 560.174629][ T8809] usb 4-1: Using ep0 maxpacket: 8 [ 560.207414][ T8809] usb 4-1: config index 0 descriptor too short (expected 22, got 18) [ 560.219599][ T8809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.234636][ T8809] usb 4-1: config 0 has no interfaces? [ 560.235217][T14364] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2328'. [ 560.246730][ T8809] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d [ 560.264674][ T8809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.273818][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.281898][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.288955][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.296067][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.304109][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.312551][ T30] audit: type=1326 audit(1764514695.329:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 560.312567][ T8809] usb 4-1: Product: syz [ 560.343199][ T8809] usb 4-1: Manufacturer: syz [ 560.348031][ T8809] usb 4-1: SerialNumber: syz [ 560.354939][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.361808][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.369050][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.375973][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.382954][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.389938][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.397077][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.403921][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.405187][ T30] audit: type=1326 audit(1764514695.329:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 560.411826][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.442935][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.449974][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.456925][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.465543][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.472346][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.480362][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.487232][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.494008][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.500951][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.507889][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.514925][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.521707][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.528529][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.535315][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.542085][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.548963][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.555798][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.562567][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.569380][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.576287][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.583073][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.589876][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.596715][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.603489][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.610309][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.617275][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.624048][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.630853][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.637695][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.644469][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.651312][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.658265][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.665076][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.671871][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.678765][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.685587][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.692384][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.699178][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.705999][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.712769][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.719769][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 560.727042][ T8809] usb 4-1: config 0 descriptor?? [ 560.745539][ T30] audit: type=1326 audit(1764514695.329:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 560.770710][ T30] audit: type=1326 audit(1764514695.329:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac66b8e1ff code=0x7ffc0000 [ 560.794344][ T30] audit: type=1326 audit(1764514695.349:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 560.819381][ T30] audit: type=1326 audit(1764514695.349:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac66b8f783 code=0x7ffc0000 [ 560.853482][ T30] audit: type=1326 audit(1764514695.349:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fac66b8f807 code=0x7ffc0000 [ 560.918037][ T30] audit: type=1326 audit(1764514695.349:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fac66b46bdd code=0x7ffc0000 [ 561.039682][ T30] audit: type=1326 audit(1764514695.349:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fac66bc3e89 code=0x7ffc0000 [ 561.064163][ T30] audit: type=1326 audit(1764514695.349:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14365 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac66b8e1ff code=0x7ffc0000 [ 561.088146][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.097049][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.105866][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.112723][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.119892][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.127475][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.134415][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.142973][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.150302][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 561.157328][ T51] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 562.098683][T14389] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 562.275847][ T8809] usb 4-1: USB disconnect, device number 103 [ 562.426283][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.432646][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.585760][T14399] netlink: 5080 bytes leftover after parsing attributes in process `syz.2.2337'. [ 562.635750][T14399] openvswitch: netlink: Flow key attr not present in new flow. [ 562.774616][ T8809] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 562.957359][ T8809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.975749][ T8809] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 562.978260][T14409] netlink: 'syz.4.2340': attribute type 1 has an invalid length. [ 563.011660][ T8809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.691658][ T8809] usb 4-1: config 0 descriptor?? [ 564.167695][ T43] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 564.347584][ T8809] usbhid 4-1:0.0: can't add hid device: -71 [ 564.353568][ T8809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 564.365319][ T8809] usb 4-1: USB disconnect, device number 104 [ 564.420551][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.431213][ T43] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 564.440364][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.812439][ T43] usb 2-1: config 0 descriptor?? [ 565.253659][ T43] input: HID 28bd:0935 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0935.0016/input/input23 [ 565.348259][ T43] uclogic 0003:28BD:0935.0016: input,hidraw0: USB HID v10.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.1-1/input0 [ 565.425492][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2353'. [ 565.453865][ T43] usb 2-1: USB disconnect, device number 89 [ 565.522816][T14448] fido_id[14448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 565.655804][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 565.655819][ T30] audit: type=1400 audit(1764514700.719:2087): avc: denied { map } for pid=14455 comm="syz.4.2355" path="socket:[41497]" dev="sockfs" ino=41497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 565.752261][T14461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2355'. [ 565.898738][T14462] virtio-fs: tag not found [ 566.226767][T14468] SET target dimension over the limit! [ 566.520503][T14485] /dev/nullb0: Can't open blockdev [ 566.626745][T14489] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 567.448293][ T30] audit: type=1400 audit(1764514702.449:2088): avc: denied { write } for pid=14498 comm="syz.1.2367" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 567.934717][T14503] tmpfs: Unknown parameter 'quoa_inode_hardlimit' [ 569.682552][T14529] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2376'. [ 569.707586][T14530] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2376'. [ 569.859544][ T43] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 569.872977][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 570.056345][ T43] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 570.066245][ T43] usb 4-1: can't read configurations, error -22 [ 570.261731][ T43] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 570.440926][ T43] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 570.468608][ T43] usb 4-1: can't read configurations, error -22 [ 570.502776][ T43] usb usb4-port1: attempt power cycle [ 570.874695][ T43] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 570.888455][ T30] audit: type=1400 audit(1764514705.949:2089): avc: denied { read } for pid=14579 comm="syz.4.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 570.917313][ T43] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 570.925423][ T43] usb 4-1: can't read configurations, error -22 [ 571.126153][ T43] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 571.159203][ T43] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 571.167295][ T43] usb 4-1: can't read configurations, error -22 [ 571.177462][ T43] usb usb4-port1: unable to enumerate USB device [ 571.673251][ T5893] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 571.750530][ T30] audit: type=1400 audit(1764514706.809:2090): avc: denied { setopt } for pid=14589 comm="syz.2.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 571.766072][T14590] overlayfs: failed to clone upperpath [ 571.780862][ T30] audit: type=1400 audit(1764514706.809:2091): avc: denied { write } for pid=14589 comm="syz.2.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 571.807077][T14592] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 571.834834][ T5893] usb 2-1: device descriptor read/64, error -71 [ 572.423567][ T5893] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 572.556466][ T30] audit: type=1400 audit(1764514707.619:2092): avc: denied { getopt } for pid=14599 comm="syz.2.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 572.577405][ T5893] usb 2-1: device descriptor read/64, error -71 [ 572.695750][ T5893] usb usb2-port1: attempt power cycle [ 572.715128][T14604] netlink: 'syz.0.2395': attribute type 10 has an invalid length. [ 573.010343][T14613] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2399'. [ 573.020459][T14613] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2399'. [ 573.074615][ T5893] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 573.116907][ T5893] usb 2-1: device descriptor read/8, error -71 [ 573.128905][ T5879] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 573.334858][ T5879] usb 4-1: Invalid ep0 maxpacket: 64 [ 573.484767][ T5879] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 573.567437][ T30] audit: type=1326 audit(1764514708.629:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14634 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 573.614710][ T30] audit: type=1326 audit(1764514708.629:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14634 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 573.645261][ T30] audit: type=1326 audit(1764514708.649:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14634 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 573.674610][ T30] audit: type=1326 audit(1764514708.649:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14634 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 573.723321][ T30] audit: type=1326 audit(1764514708.649:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14634 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 573.794634][ T5879] usb 4-1: Invalid ep0 maxpacket: 64 [ 573.800503][ T5879] usb usb4-port1: attempt power cycle [ 573.850698][ T30] audit: type=1326 audit(1764514708.649:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14634 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac66b8f749 code=0x7ffc0000 [ 574.156047][ T5879] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 574.185545][ T5879] usb 4-1: Invalid ep0 maxpacket: 64 [ 574.217835][T14650] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2411'. [ 574.227660][T14650] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2411'. [ 574.381160][ T5879] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 574.405163][ T5879] usb 4-1: Invalid ep0 maxpacket: 64 [ 574.414394][ T5879] usb usb4-port1: unable to enumerate USB device [ 574.619934][T14660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2415'. [ 574.629994][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'. [ 574.640126][T14660] hsr_slave_0: left promiscuous mode [ 574.647139][T14660] hsr_slave_1: left promiscuous mode [ 574.984890][ T5879] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 575.137921][ T5879] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 575.147384][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.232332][ T5879] usb 2-1: Product: syz [ 575.263134][ T5879] usb 2-1: Manufacturer: syz [ 575.268024][ T5879] usb 2-1: SerialNumber: syz [ 575.281459][ T5879] usb 2-1: config 0 descriptor?? [ 576.142085][ T5879] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 577.837211][ T5879] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 577.857600][ T5879] usb 2-1: USB disconnect, device number 94 [ 577.928963][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 577.928978][ T30] audit: type=1400 audit(1764514712.989:2116): avc: denied { create } for pid=14701 comm="syz.3.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 577.956262][ T30] audit: type=1400 audit(1764514712.999:2117): avc: denied { getopt } for pid=14701 comm="syz.3.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 577.998279][T14703] lo speed is unknown, defaulting to 1000 [ 578.352788][T14710] fuse: Unknown parameter 'GPL' [ 578.586742][ T30] audit: type=1400 audit(1764514713.649:2118): avc: denied { write } for pid=14718 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 578.610475][ T30] audit: type=1400 audit(1764514713.669:2119): avc: denied { ioctl } for pid=14718 comm="syz.0.2433" path="socket:[41899]" dev="sockfs" ino=41899 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 578.689583][ T30] audit: type=1400 audit(1764514713.749:2120): avc: denied { setopt } for pid=14718 comm="syz.0.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 579.804674][ T43] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 579.955112][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 579.963977][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 579.977866][ T43] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 579.989251][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.005151][ T43] usb 4-1: Product: syz [ 580.009331][ T43] usb 4-1: Manufacturer: syz [ 580.013920][ T43] usb 4-1: SerialNumber: syz [ 580.026396][T14765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2446'. [ 580.063871][ T43] usb 4-1: config 0 descriptor?? [ 580.088481][ T43] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 580.107301][ T43] usb 4-1: Detected FT232R [ 580.288320][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 580.345310][ T43] ftdi_sio 4-1:0.0: GPIO initialisation failed: -32 [ 580.454916][ T43] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 580.644680][ T30] audit: type=1400 audit(1764514715.689:2121): avc: denied { map } for pid=14766 comm="syz.1.2447" path="pipe:[41965]" dev="pipefs" ino=41965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 580.730429][T14782] overlayfs: missing 'lowerdir' [ 580.748927][T14782] overlayfs: missing 'lowerdir' [ 580.770737][ T30] audit: type=1400 audit(1764514715.829:2122): avc: denied { create } for pid=14780 comm="syz.4.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 582.049932][T14797] kthread_run failed with err -4 [ 582.128303][T14803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2457'. [ 582.182104][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2459'. [ 582.212775][ T5879] usb 4-1: USB disconnect, device number 113 [ 582.401056][ T5879] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 582.473286][T14819] siw: device registration error -23 [ 582.908913][ T5879] ftdi_sio 4-1:0.0: device disconnected [ 583.251462][T14830] overlayfs: missing 'lowerdir' [ 583.986919][ T30] audit: type=1400 audit(1764514719.039:2123): avc: denied { create } for pid=14853 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 584.069081][ T30] audit: type=1400 audit(1764514719.129:2124): avc: denied { bind } for pid=14853 comm="syz.3.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 584.506871][ T30] audit: type=1400 audit(1764514719.569:2125): avc: denied { append } for pid=14863 comm="syz.1.2473" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 584.583091][T14865] XFS (nbd3): SB validate failed with error -5. [ 584.754895][ T8814] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 584.826679][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 584.850453][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 584.908188][ T8814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.920389][ T8814] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 584.952150][ T8814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.981220][ T8814] usb 2-1: config 0 descriptor?? [ 585.152760][ T30] audit: type=1326 audit(1764514720.209:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14861 comm="syz.3.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7fc00000 [ 585.467468][ T30] audit: type=1400 audit(1764514720.469:2127): avc: denied { setopt } for pid=14883 comm="syz.0.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.513303][ T30] audit: type=1400 audit(1764514720.569:2128): avc: denied { ioctl } for pid=14891 comm="syz.2.2480" path="socket:[42240]" dev="sockfs" ino=42240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 585.546325][ T8814] usb 2-1: string descriptor 0 read error: -71 [ 585.606284][ T8814] usbhid 2-1:0.0: can't add hid device: -71 [ 585.612288][ T8814] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 585.795939][ T8814] usb 2-1: USB disconnect, device number 95 [ 586.194293][T14911] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2484'. [ 586.924700][ T30] audit: type=1400 audit(1764514721.979:2129): avc: denied { append } for pid=14921 comm="syz.3.2488" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 587.424655][ T8814] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 587.789530][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'. [ 588.176127][ T8814] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 588.209809][ T8814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.326586][ T8814] usb 4-1: config 0 descriptor?? [ 588.533883][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 588.603251][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 588.643656][T14947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2494'. [ 589.099861][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'. [ 589.120808][ T30] audit: type=1800 audit(1764514724.179:2130): pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2494" name="SYSV00000000" dev="tmpfs" ino=70 res=0 errno=0 [ 589.186115][T14951] batman_adv: batadv0: Adding interface: bond3 [ 589.194609][T14951] batman_adv: batadv0: The MTU of interface bond3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.357800][T14951] batman_adv: batadv0: Not using interface bond3 (retrying later): interface not active [ 589.375901][ T30] audit: type=1400 audit(1764514724.429:2131): avc: denied { setopt } for pid=14956 comm="syz.0.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 589.645426][ T30] audit: type=1400 audit(1764514724.709:2132): avc: denied { watch watch_reads } for pid=14963 comm="syz.2.2501" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 589.783333][ T43] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 589.962303][ T8814] usb 4-1: Cannot read MAC address [ 589.970126][ T8814] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 589.981926][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 589.990661][ T8814] usb 4-1: USB disconnect, device number 114 [ 589.998046][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 590.007183][ T43] usb 2-1: config 4 interface 0 has no altsetting 0 [ 590.309817][ T43] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 590.329117][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.349402][ T43] usb 2-1: Product: syz [ 590.359003][ T43] usb 2-1: Manufacturer: syz [ 590.363769][ T43] usb 2-1: SerialNumber: syz [ 590.909013][ T8814] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 590.935055][T14986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.988575][T14986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.153176][ T8814] usb 4-1: Using ep0 maxpacket: 8 [ 591.179356][ T8814] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 591.195280][ T8814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.207849][ T8814] usb 4-1: Product: syz [ 591.215398][ T8814] usb 4-1: Manufacturer: syz [ 591.224520][ T8814] usb 4-1: SerialNumber: syz [ 591.234792][ T8814] usb 4-1: config 0 descriptor?? [ 591.244434][ T8814] gspca_main: se401-2.14.0 probing 047d:5003 [ 591.267271][ T30] audit: type=1400 audit(1764514726.304:2133): avc: denied { mount } for pid=14994 comm="syz.0.2508" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 591.828583][ T8814] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 591.838575][ T8814] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 591.848475][ T8814] usb 4-1: USB disconnect, device number 115 [ 592.976067][T15025] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 593.175974][T15025] overlayfs: failed to clone lowerpath [ 593.279411][T14640] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 593.539590][T14640] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 593.541512][T15030] bond2: option downdelay: invalid value (18446744073709551615) [ 593.559869][T15030] bond2: option downdelay: allowed values 0 - 2147483647 [ 593.567383][T14640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 593.579906][T14640] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 593.591065][T15030] bond2 (unregistering): Released all slaves [ 593.612469][T14640] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.625661][T14640] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.634822][T14640] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.723598][T14640] usb 4-1: config 0 descriptor?? [ 594.195093][T14640] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 594.205471][T14640] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 594.214654][T14640] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 594.222160][T14640] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 594.229848][T14640] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 594.643969][T14640] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 595.684817][T15056] random: crng reseeded on system resumption [ 595.806730][T15057] netlink: 'syz.1.2525': attribute type 10 has an invalid length. [ 596.306263][ T8814] usb 4-1: reset high-speed USB device number 116 using dummy_hcd [ 596.367628][ T43] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 596.403127][ T43] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 596.525403][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 596.536556][ T43] usb 2-1: media controller created [ 596.572829][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 596.654748][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 596.709429][T15056] Restarting kernel threads ... [ 596.716778][T15056] Done restarting kernel threads. [ 597.066050][ T30] audit: type=1400 audit(1764514731.739:2134): avc: denied { getopt } for pid=15088 comm="syz.1.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 597.184452][ T30] audit: type=1326 audit(1764514731.851:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.208255][ T30] audit: type=1326 audit(1764514731.851:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.327918][ T30] audit: type=1326 audit(1764514731.851:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.352781][ T30] audit: type=1326 audit(1764514731.851:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.382167][ T30] audit: type=1326 audit(1764514731.851:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.434303][ T30] audit: type=1326 audit(1764514731.851:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.559070][ T30] audit: type=1326 audit(1764514731.851:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.584352][ T30] audit: type=1326 audit(1764514731.851:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.608161][ T30] audit: type=1326 audit(1764514731.851:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 597.635106][T15105] veth0_virt_wifi: entered allmulticast mode [ 598.691358][T15128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=15128 comm=syz.3.2542 [ 598.756288][ T8809] usb 4-1: USB disconnect, device number 116 [ 598.894280][T15128] netlink: 'syz.3.2542': attribute type 16 has an invalid length. [ 598.902787][T15128] netlink: 'syz.3.2542': attribute type 2 has an invalid length. [ 598.919068][T15128] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.2542'. [ 601.399898][T15149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 602.281265][T15170] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 602.290011][T15170] xt_socket: unknown flags 0x4c [ 602.364242][T15171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2554'. [ 602.416714][T15171] vlan2: entered allmulticast mode [ 602.422124][T15171] macsec0: entered allmulticast mode [ 602.986175][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 602.995262][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 602.995277][ T30] audit: type=1400 audit(1764514737.267:2197): avc: denied { name_bind } for pid=15175 comm="syz.3.2555" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 603.064375][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 603.203543][T15180] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 603.243643][T15180] overlayfs: failed to clone lowerpath [ 604.156749][T15195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2561'. [ 604.188282][T15195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15195 comm=syz.4.2561 [ 604.495969][T15199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15199 comm=syz.4.2561 [ 605.708051][T15205] lo speed is unknown, defaulting to 1000 [ 606.503305][T15210] netlink: 'syz.3.2563': attribute type 12 has an invalid length. [ 606.518726][T15202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.558356][T15202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.572479][T15213] tmpfs: Unknown parameter 'grpquota' [ 606.588520][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2565'. [ 606.611677][T15202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.636874][T15202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.695681][T15216] netlink: 'syz.4.2565': attribute type 10 has an invalid length. [ 606.714046][T15216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2565'. [ 606.723572][T15216] dummy0: entered promiscuous mode [ 606.778779][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2567'. [ 607.135512][ T8809] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 607.296422][ T8809] usb 4-1: Using ep0 maxpacket: 8 [ 607.296938][ T30] audit: type=1400 audit(1764514741.308:2198): avc: denied { ioctl } for pid=15241 comm="syz.1.2575" path="/dev/input/mouse0" dev="devtmpfs" ino=982 ioctlcmd=0xaf75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 607.308059][ T8809] usb 4-1: config 4 has an invalid interface number: 111 but max is 0 [ 607.332731][ T30] audit: type=1400 audit(1764514741.336:2199): avc: denied { write } for pid=15241 comm="syz.1.2575" dev="sockfs" ino=42723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 607.357337][ T8809] usb 4-1: config 4 has no interface number 0 [ 607.364028][ T30] audit: type=1400 audit(1764514741.336:2200): avc: denied { setattr } for pid=15241 comm="syz.1.2575" name="PINGv6" dev="sockfs" ino=42723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 607.371383][ T8809] usb 4-1: config 4 interface 111 has no altsetting 0 [ 607.389999][ T30] audit: type=1400 audit(1764514741.336:2201): avc: denied { setattr } for pid=15241 comm="syz.1.2575" name="mouse0" dev="devtmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 607.397861][ T8809] usb 4-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=9b.e3 [ 607.426658][ T8809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.434653][ T8809] usb 4-1: Product: ౝ [ 607.445581][ T8809] usb 4-1: Manufacturer: ᠁ [ 607.452592][T15245] tipc: Enabling of bearer rejected, failed to enable media [ 607.455873][ T8809] usb 4-1: SerialNumber: 壋稐㧺ၥ乺⊹䇗䴇ꄡ吝捷彉탐몵쓛뮶超푡ꅢ響 [ 607.455873][ T8809] 廿퐉뱖ೀ [ 607.489807][T15248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2577'. [ 607.587726][ T30] audit: type=1400 audit(1764514741.579:2202): avc: denied { write } for pid=15254 comm="syz.1.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 607.633526][ T30] audit: type=1400 audit(1764514741.598:2203): avc: denied { ioctl } for pid=15254 comm="syz.1.2579" path="socket:[42806]" dev="sockfs" ino=42806 ioctlcmd=0x5456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 607.720622][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2580'. [ 607.785736][ T8809] cdc_acm 4-1:4.111: Zero length descriptor references [ 607.799569][ T8809] cdc_acm 4-1:4.111: probe with driver cdc_acm failed with error -22 [ 607.835222][ T8809] usb 4-1: USB disconnect, device number 117 [ 607.867399][T15262] netlink: 'syz.0.2581': attribute type 12 has an invalid length. [ 607.877257][T15262] netlink: 'syz.0.2581': attribute type 29 has an invalid length. [ 607.885255][T15262] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2581'. [ 607.894292][T15262] netlink: 'syz.0.2581': attribute type 2 has an invalid length. [ 607.902056][T15262] netlink: 23 bytes leftover after parsing attributes in process `syz.0.2581'. [ 608.216721][T15274] blktrace: Concurrent blktraces are not allowed on loop2 [ 608.717667][ T30] audit: type=1400 audit(1764514742.627:2204): avc: denied { unmount } for pid=8929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 608.768131][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2584'. [ 608.840275][T15277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2873109532 (5746219064 ns) > initial count (1400233668 ns). Using initial count to start timer. [ 608.890072][T15281] tc_dump_action: action bad kind [ 609.115430][T15286] lo speed is unknown, defaulting to 1000 [ 609.391180][T14640] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 609.565900][T14640] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 609.575411][T14640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.588196][T14640] usb 4-1: Product: syz [ 609.596558][T14640] usb 4-1: Manufacturer: syz [ 609.602613][T14640] usb 4-1: SerialNumber: syz [ 609.685445][ T30] audit: type=1326 audit(1764514743.534:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 609.687079][T14640] usb 4-1: config 0 descriptor?? [ 609.907473][ T30] audit: type=1326 audit(1764514743.581:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 609.991295][ T30] audit: type=1326 audit(1764514743.581:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 610.046890][T15314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2596'. [ 610.077726][ T30] audit: type=1326 audit(1764514743.590:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 610.103270][ T30] audit: type=1326 audit(1764514743.590:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 610.152513][T15318] overlayfs: failed to clone upperpath [ 610.161962][ T30] audit: type=1326 audit(1764514743.600:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 610.201940][ T30] audit: type=1326 audit(1764514743.600:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 610.211131][T14640] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 610.244879][ T30] audit: type=1326 audit(1764514743.600:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 610.291222][ T30] audit: type=1326 audit(1764514743.609:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15307 comm="syz.1.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 610.570335][T15330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2600'. [ 611.381389][T15343] netlink: 'syz.0.2606': attribute type 1 has an invalid length. [ 611.798098][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 611.807112][T14640] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 611.850356][T14640] usb 4-1: USB disconnect, device number 118 [ 612.727718][T15367] __nla_validate_parse: 3 callbacks suppressed [ 612.727760][T15367] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2613'. [ 612.835632][T15367] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2613'. [ 614.115781][T15397] netlink: 'syz.0.2622': attribute type 2 has an invalid length. [ 615.269246][T15418] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2626'. [ 615.296307][T15418] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2626'. [ 615.482941][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 615.482957][ T30] audit: type=1400 audit(1765039036.959:2248): avc: denied { setopt } for pid=15425 comm="syz.1.2629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 616.030034][T15426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.044873][T15426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.293224][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 616.461346][ T30] audit: type=1326 audit(1765039037.866:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 616.762101][ T30] audit: type=1326 audit(1765039037.866:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 616.785758][ T30] audit: type=1326 audit(1765039037.866:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 616.809824][ T30] audit: type=1326 audit(1765039037.866:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 616.961677][ T30] audit: type=1326 audit(1765039037.866:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 617.120767][ T30] audit: type=1326 audit(1765039037.866:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 617.664400][ T30] audit: type=1326 audit(1765039037.866:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 617.879501][ T30] audit: type=1326 audit(1765039037.866:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 617.956294][ T30] audit: type=1326 audit(1765039037.866:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15431 comm="syz.3.2631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 618.229125][ T8809] usb 5-1: USB disconnect, device number 5 [ 619.099992][T15470] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2643'. [ 619.634558][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2644'. [ 620.346641][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 620.357750][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 620.366655][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 620.376626][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 620.385818][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 620.954357][T15494] overlayfs: conflicting options: userxattr,redirect_dir=on [ 621.020582][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 621.020598][ T30] audit: type=1400 audit(1765039042.140:2274): avc: denied { read } for pid=15489 comm="syz.3.2648" path="socket:[45107]" dev="sockfs" ino=45107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 621.219674][ T6975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.185026][ T6975] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.255859][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2649'. [ 622.271958][T15483] lo speed is unknown, defaulting to 1000 [ 622.405701][ T6975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.421513][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2652'. [ 622.442788][T15513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2652'. [ 622.452491][ T6975] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.462994][T15513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2652'. [ 622.483065][T15520] overlayfs: failed to clone upperpath [ 622.520118][ T6975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.530642][ T6975] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.551174][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 622.567004][T15522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.578286][T15522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.649145][ T5819] Bluetooth: hci4: command tx timeout [ 622.931961][ T6975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.962181][ T6975] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.225294][T15483] chnl_net:caif_netlink_parms(): no params data found [ 624.072328][T15483] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.080648][T15483] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.092943][T15483] bridge_slave_0: entered allmulticast mode [ 624.101336][T15483] bridge_slave_0: entered promiscuous mode [ 624.110144][T15483] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.117998][T15483] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.128024][T15483] bridge_slave_1: entered allmulticast mode [ 624.135485][T15483] bridge_slave_1: entered promiscuous mode [ 624.170402][ T30] audit: type=1400 audit(1765039045.086:2275): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 624.469271][T15483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.501934][ T6975] bond5: left promiscuous mode [ 624.507296][ T6975] bridge0: port 3(bond5) entered disabled state [ 624.519348][ T6975] bridge_slave_1: left allmulticast mode [ 624.525506][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.534856][ T6975] bridge_slave_0: left allmulticast mode [ 624.540506][ T6975] bridge_slave_0: left promiscuous mode [ 624.546547][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.569889][ T6975] batman_adv: batadv0: Interface deactivated: gretap1 [ 624.587110][ T6975] batman_adv: batadv0: Interface deactivated: vxlan0 [ 624.841054][ T5819] Bluetooth: hci4: command tx timeout [ 625.303323][ T6975] batman_adv: batadv0: Removing interface: gretap1 [ 625.343513][ T5922] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 625.498120][ T6975] batman_adv: batadv0: Removing interface: vxlan0 [ 625.516236][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.540019][ T5922] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 625.561313][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.569823][ T5922] usb 4-1: Product: syz [ 625.574242][ T5922] usb 4-1: Manufacturer: syz [ 625.579048][ T5922] usb 4-1: SerialNumber: syz [ 625.594102][ T5922] usb 4-1: config 0 descriptor?? [ 625.607438][ T5922] cytherm 4-1:0.0: Cypress thermometer device now attached [ 625.708938][ T30] audit: type=1326 audit(1765039046.527:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.2661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f846198f749 code=0x0 [ 625.936989][ T6975] team0: Port device bond0 removed [ 625.949938][ T6975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.968725][ T6975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.991299][ T6975] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 626.001762][ T6975] bond0 (unregistering): Released all slaves [ 626.026343][ T6975] bond1 (unregistering): Released all slaves [ 626.052312][ T6975] bond2 (unregistering): Released all slaves [ 626.083614][ T6975] bond3 (unregistering): Released all slaves [ 626.115883][ T6975] bond4 (unregistering): Released all slaves [ 626.145585][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.151998][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.314148][ T6975] bond5 (unregistering): Released all slaves [ 626.542391][ T6975] bond6 (unregistering): Released all slaves [ 626.561561][T15483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.575966][T15561] syzkaller1: entered promiscuous mode [ 626.581502][T15561] syzkaller1: entered allmulticast mode [ 626.589181][ T43] usb 4-1: USB disconnect, device number 119 [ 626.595574][ T43] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 626.641164][ T30] audit: type=1400 audit(1765039047.396:2277): avc: denied { bind } for pid=15574 comm="syz.2.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 626.738704][ T6975] : left promiscuous mode [ 626.769876][T15483] team0: Port device team_slave_0 added [ 626.781887][T15580] netlink: 'syz.2.2665': attribute type 1 has an invalid length. [ 626.783707][ T30] audit: type=1400 audit(1765039047.527:2278): avc: denied { write } for pid=15579 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 626.810714][ T30] audit: type=1400 audit(1765039047.537:2279): avc: denied { search } for pid=5477 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.812665][T15580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2665'. [ 626.832534][ T30] audit: type=1400 audit(1765039047.537:2280): avc: denied { search } for pid=5477 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.832580][ T30] audit: type=1400 audit(1765039047.537:2281): avc: denied { search } for pid=5477 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.832615][ T30] audit: type=1400 audit(1765039047.537:2282): avc: denied { read } for pid=5477 comm="dhcpcd" name="n115" dev="tmpfs" ino=7801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 626.832720][ T30] audit: type=1400 audit(1765039047.537:2283): avc: denied { open } for pid=5477 comm="dhcpcd" path="/run/udev/data/n115" dev="tmpfs" ino=7801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 626.935670][T15583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.944864][T15583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.958491][T15483] team0: Port device team_slave_1 added [ 626.975681][ T30] audit: type=1400 audit(1765039047.537:2284): avc: denied { getattr } for pid=5477 comm="dhcpcd" path="/run/udev/data/n115" dev="tmpfs" ino=7801 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 627.019271][ T30] audit: type=1326 audit(1765039047.705:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 627.046464][T15483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.062221][T15483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.089776][ T30] audit: type=1326 audit(1765039047.705:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15579 comm="syz.2.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 627.114037][T15483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.116910][ T5819] Bluetooth: hci4: command tx timeout [ 627.152659][T15483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.159748][T15483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.190100][T15483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.385387][T15483] hsr_slave_0: entered promiscuous mode [ 627.391853][T15483] hsr_slave_1: entered promiscuous mode [ 627.398015][T15483] debugfs: 'hsr0' already exists in 'hsr' [ 627.403805][T15483] Cannot create hsr debugfs directory [ 627.462543][ T6975] hsr_slave_0: left promiscuous mode [ 627.468401][T15593] trusted_key: encrypted_key: master key parameter '' is invalid [ 627.495501][ T6975] hsr_slave_1: left promiscuous mode [ 627.512607][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.536566][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.651204][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.683630][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.717976][ T6975] veth1_macvtap: left promiscuous mode [ 627.723521][ T6975] veth0_macvtap: left promiscuous mode [ 628.731135][T15611] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2671'. [ 628.774013][T15611] 9pnet_fd: Insufficient options for proto=fd [ 629.305596][ T5819] Bluetooth: hci4: command tx timeout [ 629.456927][ T6975] team0 (unregistering): Port device team_slave_1 removed [ 629.516988][ T6975] team0 (unregistering): Port device team_slave_0 removed [ 630.267556][T15622] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 630.368221][T15593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.375790][T15593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.755236][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 630.795224][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2673'. [ 631.110350][ T6975] IPVS: stop unused estimator thread 0... [ 633.551614][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 633.551628][ T30] audit: type=1326 audit(1765039053.859:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 633.618744][T15483] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 633.625588][T15686] netlink: 'syz.3.2685': attribute type 1 has an invalid length. [ 633.654519][T15686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2685'. [ 633.665717][ T30] audit: type=1326 audit(1765039053.859:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 633.678041][T15483] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 633.737365][ T30] audit: type=1326 audit(1765039053.897:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 633.772523][T15483] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 633.781807][ T30] audit: type=1326 audit(1765039053.897:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 633.810605][ T30] audit: type=1326 audit(1765039053.897:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 633.841047][ T30] audit: type=1326 audit(1765039053.897:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 633.881546][ T30] audit: type=1326 audit(1765039053.897:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 633.959349][ T30] audit: type=1326 audit(1765039053.897:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 633.983210][ T43] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 634.005177][T15483] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 634.029139][ T30] audit: type=1326 audit(1765039053.897:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 634.064818][ T30] audit: type=1326 audit(1765039053.897:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15683 comm="syz.2.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6258f749 code=0x7ffc0000 [ 634.143568][ T43] usb 4-1: device descriptor read/64, error -71 [ 634.150549][T15706] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2687'. [ 634.294681][T15483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.344065][T15483] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.385461][T15483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 634.395960][T15483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.477866][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.485014][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.494692][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.501853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.528829][ T43] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 634.707605][T15729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.722082][ T43] usb 4-1: device descriptor read/64, error -71 [ 634.772751][T15729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.862252][ T43] usb usb4-port1: attempt power cycle [ 635.109453][T15483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.340755][ T43] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 635.844600][ T43] usb 4-1: device descriptor read/8, error -71 [ 636.125273][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 636.142662][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 636.167445][ T43] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 636.216829][ T43] usb 4-1: device descriptor read/8, error -71 [ 636.349824][ T43] usb usb4-port1: unable to enumerate USB device [ 637.183961][T15483] veth0_vlan: entered promiscuous mode [ 637.213561][T15483] veth1_vlan: entered promiscuous mode [ 637.413621][T15789] IPVS: set_ctl: invalid protocol: 41 172.30.0.4:20001 [ 637.655056][T15483] veth0_macvtap: entered promiscuous mode [ 637.760780][T15483] veth1_macvtap: entered promiscuous mode [ 637.830744][T15483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.926651][T15483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.963248][ T9982] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.973356][ T9982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.987598][ T9982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.004574][ T9982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.185425][T12676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.194649][T12676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.293093][ T9980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.318480][ T9980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.474615][T15816] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2706'. [ 638.486866][T15816] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2706'. [ 640.034266][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 640.034278][ T30] audit: type=1400 audit(1765039059.920:2332): avc: denied { map } for pid=15825 comm="syz.1.2707" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 640.164889][T15853] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2716'. [ 640.174029][ T30] audit: type=1326 audit(1765039060.051:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 640.225306][T15856] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2718'. [ 640.226880][ T30] audit: type=1326 audit(1765039060.051:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 640.257889][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.268793][ T30] audit: type=1326 audit(1765039060.088:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 640.293592][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.420350][T15856] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2718'. [ 640.425561][ T30] audit: type=1326 audit(1765039060.088:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 640.453935][ T30] audit: type=1326 audit(1765039060.088:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 641.235506][T15860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 641.241530][T15860] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 641.585130][ T30] audit: type=1326 audit(1765039060.088:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 641.609664][ T30] audit: type=1326 audit(1765039060.088:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 641.636165][ T30] audit: type=1326 audit(1765039060.088:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 641.660088][ T30] audit: type=1326 audit(1765039060.088:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13a38f749 code=0x7ffc0000 [ 641.707601][T15860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 641.714299][T15860] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 641.720228][T15860] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 641.735673][T15860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 641.741781][T15860] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 641.756320][T15860] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 641.859197][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2723'. [ 641.868617][T15876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2723'. [ 642.312050][ T5922] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 642.633367][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 642.646534][T15899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.655776][T15899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.682696][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.694181][ T5922] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 642.707232][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.731952][T15900] binder: 15896:15900 ioctl c0306201 0 returned -14 [ 642.857651][ T5922] usb 4-1: config 0 descriptor?? [ 643.158262][T15905] overlayfs: failed to clone upperpath [ 643.279547][ T43] usb 4-1: USB disconnect, device number 124 [ 643.887512][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'. [ 643.897056][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'. [ 643.915911][ T5819] Bluetooth: hci4: command 0x0c1a tx timeout [ 643.917302][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 643.922024][ T5819] Bluetooth: hci2: command 0x0c1a tx timeout [ 645.514961][T15921] Bluetooth: hci3: command 0x0c1a tx timeout [ 645.842941][T15941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2740'. [ 645.890670][T15948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2740'. [ 646.006779][T15944] binder: 15942:15944 ioctl c0306201 0 returned -14 [ 646.141033][T15921] Bluetooth: hci5: command 0x0406 tx timeout [ 646.147079][T15921] Bluetooth: hci4: command 0x0c1a tx timeout [ 646.185850][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 646.341596][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 646.341611][ T30] audit: type=1326 audit(1765039065.821:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 646.371210][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.385136][T15964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.418244][T15964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.896648][ T30] audit: type=1326 audit(1765039065.821:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 646.961107][ T30] audit: type=1326 audit(1765039065.821:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 647.066512][ T30] audit: type=1326 audit(1765039065.821:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 647.143291][ T30] audit: type=1326 audit(1765039065.821:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 647.193778][ T30] audit: type=1326 audit(1765039065.821:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 647.357397][ T30] audit: type=1326 audit(1765039065.821:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 647.423038][ T30] audit: type=1326 audit(1765039065.821:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 647.459551][ T30] audit: type=1326 audit(1765039065.821:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 648.048423][ T30] audit: type=1326 audit(1765039065.821:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846198f749 code=0x7ffc0000 [ 648.417239][T15921] Bluetooth: hci4: command 0x0c1a tx timeout [ 649.653565][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 649.674833][T16011] evm: overlay not supported [ 650.660369][T16034] binder: 16033:16034 ioctl c0306201 0 returned -14 [ 650.763406][T16044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2769'. [ 650.963998][T16045] bridge0: entered promiscuous mode [ 650.994123][T16045] macsec1: entered promiscuous mode [ 651.008076][T16045] bridge0: port 3(macsec1) entered blocking state [ 651.044798][T16045] bridge0: port 3(macsec1) entered disabled state [ 651.067236][T16045] macsec1: entered allmulticast mode [ 651.084144][T16045] bridge0: entered allmulticast mode [ 651.115724][T16045] macsec1: left allmulticast mode [ 651.126885][T16045] bridge0: left allmulticast mode [ 651.140396][T16045] bridge0: left promiscuous mode [ 651.259200][T16061] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2773'. [ 651.269085][T16061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.790661][T16078] overlayfs: failed to clone lowerpath [ 651.934091][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 651.934108][ T30] audit: type=1400 audit(1765039071.049:2493): avc: denied { unmount } for pid=8929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 652.150602][T16089] binder: 16085:16089 ioctl c0306201 0 returned -14 [ 652.152774][T16091] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 652.451234][ T30] audit: type=1400 audit(1765039071.536:2494): avc: denied { map } for pid=16092 comm="syz.2.2783" path="socket:[47333]" dev="sockfs" ino=47333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 652.474676][ T30] audit: type=1400 audit(1765039071.536:2495): avc: denied { accept } for pid=16092 comm="syz.2.2783" path="socket:[47333]" dev="sockfs" ino=47333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 652.498937][T16094] netlink: 'syz.0.2779': attribute type 7 has an invalid length. [ 652.587165][ T8809] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 652.633867][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 652.644920][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 652.760043][ T8809] usb 4-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 652.781777][ T8809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.802194][ T8809] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 652.811354][ T8809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.824857][ T8809] usb 4-1: Product: syz [ 652.835175][ T8809] usb 4-1: Manufacturer: syz [ 652.864961][ T8809] usb 4-1: SerialNumber: syz [ 652.886027][ T8809] usb 4-1: config 0 descriptor?? [ 652.900944][ T8809] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 652.924652][ T8809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.947590][ T8809] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 652.956274][ T8809] usb 4-1: media controller created [ 652.989154][ T8809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.138501][ T8809] DVB: Unable to find symbol tda10046_attach() [ 653.149264][ T8809] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 653.688519][ T8809] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 653.896353][ T30] audit: type=1400 audit(1765039072.892:2496): avc: denied { connect } for pid=16116 comm="syz.2.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 654.022969][ T8809] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 654.032487][ T8809] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 654.053232][ T8809] usb 4-1: USB disconnect, device number 125 [ 654.108806][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2791'. [ 654.424770][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2790'. [ 654.434476][ T30] audit: type=1400 audit(1765039073.378:2497): avc: denied { read } for pid=16120 comm="syz.2.2790" name="file0" dev="tmpfs" ino=3067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 654.531724][T16129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.554884][T16129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.764075][T16142] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.2797'. [ 654.782245][T16142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2797'. [ 655.470196][T16154] sp0: Synchronizing with TNC [ 655.486883][T16154] sp0: Found TNC [ 655.797587][T16172] netlink: 'syz.3.2805': attribute type 4 has an invalid length. [ 655.822258][T16172] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2805'. [ 656.747043][T11191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 656.769341][T11191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 656.793439][T11191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 656.804709][T11191] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 656.815490][T11191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 656.901993][ T30] audit: type=1400 audit(1765039075.698:2498): avc: denied { getopt } for pid=16208 comm="syz.2.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 656.928787][T16199] lo speed is unknown, defaulting to 1000 [ 657.032419][ T30] audit: type=1400 audit(1765039075.819:2499): avc: denied { mount } for pid=16201 comm="syz.4.2812" name="/" dev="hugetlbfs" ino=47008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 657.574089][T16233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.639395][T16233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.717522][ T30] audit: type=1400 audit(1765039076.455:2500): avc: denied { unmount } for pid=15483 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 657.872480][T16239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2820'. [ 657.887707][T16199] chnl_net:caif_netlink_parms(): no params data found [ 658.415608][T16199] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.428565][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.488741][T16199] bridge_slave_0: entered allmulticast mode [ 658.500690][T16199] bridge_slave_0: entered promiscuous mode [ 658.571260][T16199] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.673302][T16199] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.681851][T16199] bridge_slave_1: entered allmulticast mode [ 658.689711][T16199] bridge_slave_1: entered promiscuous mode [ 658.735696][T16199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.748457][T16199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.785894][T16199] team0: Port device team_slave_0 added [ 658.796773][T16199] team0: Port device team_slave_1 added [ 658.837316][T16199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.851139][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.883898][T16199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.898356][T16199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.907148][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.934590][T16199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.945680][ T5922] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 659.057572][T15921] Bluetooth: hci2: command tx timeout [ 659.114995][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 659.128130][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 659.226716][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 659.335308][ T5922] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 659.345502][T16199] hsr_slave_0: entered promiscuous mode [ 659.351982][T16199] hsr_slave_1: entered promiscuous mode [ 659.358350][T16199] debugfs: 'hsr0' already exists in 'hsr' [ 659.360125][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.364381][T16199] Cannot create hsr debugfs directory [ 659.385500][ T5922] usb 4-1: Product: syz [ 659.390046][ T5922] usb 4-1: Manufacturer: syz [ 659.394819][ T5922] usb 4-1: SerialNumber: syz [ 659.406464][ T5922] usb 4-1: config 0 descriptor?? [ 659.418947][T16254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 659.426652][T16254] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 659.436423][ T5922] usb 4-1: ucan: probing device on interface #0 [ 659.528974][T16199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.540365][T16199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.605583][T16199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.616099][T16199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.706627][ T30] audit: type=1400 audit(1765039078.316:2501): avc: denied { getopt } for pid=16261 comm="syz.2.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 659.803399][T16199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.819812][T16199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.854141][T16264] lo speed is unknown, defaulting to 1000 [ 659.922223][T16199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.934000][T16199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.968255][ T5922] usb 4-1: ucan: could not read protocol version, ret=-71 [ 659.976060][ T5922] usb 4-1: ucan: probe failed; try to update the device firmware [ 659.991934][ T5922] usb 4-1: USB disconnect, device number 126 [ 660.139959][T16199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 660.149713][T16199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 660.159912][T16199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 660.170891][T16199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 660.237976][T16199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.257618][T16199] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.268849][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.275990][ T6975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.289565][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.296656][ T9980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.452393][T16199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.495327][T16199] veth0_vlan: entered promiscuous mode [ 660.506884][T16199] veth1_vlan: entered promiscuous mode [ 660.552664][T16199] veth0_macvtap: entered promiscuous mode [ 660.565383][T16199] veth1_macvtap: entered promiscuous mode [ 660.589362][T16199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.603734][T16199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.618824][ T6975] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.630353][ T6975] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.639812][ T6975] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.744801][ T6975] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.813576][ T30] audit: type=1400 audit(1765039079.354:2502): avc: denied { bind } for pid=16281 comm="syz.4.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 660.841138][T16284] pimreg3: entered allmulticast mode [ 660.870074][ T30] audit: type=1400 audit(1765039079.411:2503): avc: denied { create } for pid=16281 comm="syz.4.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 660.894350][ T30] audit: type=1400 audit(1765039079.411:2504): avc: denied { read } for pid=16281 comm="syz.4.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 660.904368][T15798] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 661.111852][ T30] audit: type=1400 audit(1765039079.513:2505): avc: denied { getopt } for pid=16281 comm="syz.4.2829" lport=56088 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 661.290810][T15921] Bluetooth: hci2: command tx timeout [ 661.408321][ T30] audit: type=1400 audit(1765039079.513:2506): avc: denied { bind } for pid=16281 comm="syz.4.2829" lport=56088 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 661.449619][ T30] audit: type=1400 audit(1765039079.513:2507): avc: denied { name_bind } for pid=16281 comm="syz.4.2829" src=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 661.469807][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.488920][T15798] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 661.498133][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.515081][T15798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.526060][ T30] audit: type=1400 audit(1765039079.513:2508): avc: denied { node_bind } for pid=16281 comm="syz.4.2829" saddr=::1 src=20000 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 661.530052][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.558408][T15798] usb 4-1: Product: syz [ 661.563558][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.568554][T15798] usb 4-1: Manufacturer: syz [ 661.575850][T15798] usb 4-1: SerialNumber: syz [ 661.587290][T15798] usb 4-1: config 0 descriptor?? [ 661.738767][ T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 661.774677][ T30] audit: type=1400 audit(1765039080.262:2509): avc: denied { write } for pid=16297 comm="syz.0.2833" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 661.775054][T16298] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 662.071424][ T43] usb 5-1: config 247 has an invalid interface number: 125 but max is 2 [ 662.080616][ T43] usb 5-1: config 247 has an invalid interface number: 230 but max is 2 [ 662.089023][ T43] usb 5-1: config 247 has an invalid interface number: 17 but max is 2 [ 662.404265][T16312] overlayfs: conflicting options: userxattr,redirect_dir=on [ 662.792603][T15798] usb 4-1: non-Atmel transceiver xxxx0100 [ 662.967796][ T43] usb 5-1: config 247 has an invalid interface number: 26 but max is 2 [ 662.980339][ T43] usb 5-1: config 247 has an invalid interface number: 184 but max is 2 [ 662.988794][ T43] usb 5-1: config 247 has 5 interfaces, different from the descriptor's value: 3 [ 662.998722][ T43] usb 5-1: config 247 has no interface number 0 [ 663.005265][ T43] usb 5-1: config 247 has no interface number 1 [ 663.011521][ T43] usb 5-1: config 247 has no interface number 2 [ 663.018188][ T43] usb 5-1: config 247 has no interface number 3 [ 663.025177][ T43] usb 5-1: config 247 has no interface number 4 [ 663.031541][ T43] usb 5-1: config 247 interface 125 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 663.043068][ T43] usb 5-1: config 247 interface 125 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 663.054892][ T43] usb 5-1: config 247 interface 125 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 663.067169][ T43] usb 5-1: config 247 interface 125 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 663.068061][T15798] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 663.084255][ T43] usb 5-1: too many endpoints for config 247 interface 230 altsetting 150: 100, using maximum allowed: 30 [ 663.101345][ T43] usb 5-1: config 247 interface 230 altsetting 150 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 663.115491][ T43] usb 5-1: config 247 interface 230 altsetting 150 has a duplicate endpoint with address 0x6, skipping [ 663.127174][ T43] usb 5-1: config 247 interface 230 altsetting 150 has a duplicate endpoint with address 0x3, skipping [ 663.128244][T15798] usb 4-1: Firmware version (0.0) predates our first public release. [ 663.138564][ T43] usb 5-1: config 247 interface 230 altsetting 150 has an invalid descriptor for endpoint zero, skipping [ 663.157914][ T43] usb 5-1: config 247 interface 230 altsetting 150 has 4 endpoint descriptors, different from the interface descriptor's value: 100 [ 663.171976][ T43] usb 5-1: too many endpoints for config 247 interface 17 altsetting 143: 213, using maximum allowed: 30 [ 663.183972][T15798] usb 4-1: Please update to version 0.2 or newer [ 663.214308][ T43] usb 5-1: config 247 interface 17 altsetting 143 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 663.225667][ T43] usb 5-1: config 247 interface 17 altsetting 143 has an invalid descriptor for endpoint zero, skipping [ 663.237849][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.238648][ T43] usb 5-1: config 247 interface 17 altsetting 143 has a duplicate endpoint with address 0x6, skipping [ 663.249227][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.261864][ T43] usb 5-1: config 247 interface 17 altsetting 143 has a duplicate endpoint with address 0xC, skipping [ 663.278107][ T43] usb 5-1: config 247 interface 17 altsetting 143 has a duplicate endpoint with address 0xB, skipping [ 663.290965][ T43] usb 5-1: config 247 interface 17 altsetting 143 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 663.303884][ T43] usb 5-1: config 247 interface 17 altsetting 143 has 8 endpoint descriptors, different from the interface descriptor's value: 213 [ 663.318685][ T43] usb 5-1: config 247 interface 26 altsetting 241 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 663.331350][ T43] usb 5-1: config 247 interface 184 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 663.342940][ T43] usb 5-1: config 247 interface 184 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 663.359394][ T43] usb 5-1: config 247 interface 184 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 663.370766][ T43] usb 5-1: config 247 interface 184 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 663.382132][ T43] usb 5-1: config 247 interface 184 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 663.394687][ T43] usb 5-1: config 247 interface 184 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 663.406292][ T43] usb 5-1: config 247 interface 184 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 663.406373][T15798] usb 4-1: atusb_probe: initialization failed, error = -19 [ 663.428651][T15798] usb 4-1: USB disconnect, device number 127 [ 663.508563][T15921] Bluetooth: hci2: command tx timeout [ 663.543454][ T43] usb 5-1: config 247 interface 184 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7 [ 663.554853][ T43] usb 5-1: config 247 interface 230 has no altsetting 0 [ 663.561849][ T43] usb 5-1: config 247 interface 17 has no altsetting 0 [ 663.568739][ T43] usb 5-1: config 247 interface 26 has no altsetting 0 [ 663.575578][ T43] usb 5-1: config 247 interface 184 has no altsetting 0 [ 663.584734][ T43] usb 5-1: New USB device found, idVendor=0930, idProduct=0709, bcdDevice=92.40 [ 663.594178][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.607737][ T43] usb 5-1: Product: syz [ 663.613524][ T43] usb 5-1: Manufacturer: syz [ 663.618228][ T43] usb 5-1: SerialNumber: syz [ 663.675200][T15797] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 663.856788][T15797] usb 1-1: Using ep0 maxpacket: 16 [ 663.863694][T15797] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 663.871373][T15797] usb 1-1: can't read configurations, error -61 [ 664.017111][T15797] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 664.087027][ T43] usb 5-1: USB disconnect, device number 6 [ 664.467621][T15797] usb 1-1: Using ep0 maxpacket: 16 [ 664.483388][T15797] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 664.491885][T15797] usb 1-1: can't read configurations, error -61 [ 664.498892][T15797] usb usb1-port1: attempt power cycle [ 664.722842][T16339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.731609][T16339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.763959][T16339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.817820][T16339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.874286][T15797] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 665.082409][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 665.109534][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 665.118944][T15797] usb 1-1: Using ep0 maxpacket: 16 [ 665.294784][T15797] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 665.302650][T15797] usb 1-1: can't read configurations, error -61 [ 665.442958][T15797] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 665.473414][T15797] usb 1-1: Using ep0 maxpacket: 16 [ 665.480633][T15797] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 665.498230][T15797] usb 1-1: can't read configurations, error -61 [ 665.540562][T15797] usb usb1-port1: unable to enumerate USB device [ 665.564392][T11191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 665.575644][T11191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 665.584389][T11191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 665.592030][T11191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 665.599698][T11191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 665.665178][T16349] lo speed is unknown, defaulting to 1000 [ 665.728884][T15921] Bluetooth: hci2: command tx timeout [ 666.177679][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'. [ 666.265839][ T6975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.372927][ T6975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.422277][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 666.422287][ T30] audit: type=1400 audit(1765039084.601:2511): avc: denied { connect } for pid=16370 comm="syz.3.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 666.465141][T16349] chnl_net:caif_netlink_parms(): no params data found [ 666.522049][ T6975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.587247][T16373] dlm: plock device version mismatch: kernel (1.2.0), user (1634036835.1701994354.29542) [ 666.630248][ T6975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.690204][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.697400][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.704555][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 666.714197][T16349] bridge_slave_0: entered allmulticast mode [ 666.721701][T16349] bridge_slave_0: entered promiscuous mode [ 666.734841][T16349] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.745522][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.752748][T16349] bridge_slave_1: entered allmulticast mode [ 666.759981][T16349] bridge_slave_1: entered promiscuous mode [ 666.795853][T16349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.820798][T16349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.874166][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 666.886145][T16349] team0: Port device team_slave_0 added [ 666.895211][ T43] usb 4-1: Dual-Role OTG device on HNP port [ 666.902592][ T43] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 666.903323][T16349] team0: Port device team_slave_1 added [ 666.912210][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.928934][ T43] usb 4-1: Product: syz [ 666.933186][ T43] usb 4-1: Manufacturer: syz [ 666.940969][ T43] usb 4-1: SerialNumber: syz [ 666.952996][ T43] usb 4-1: config 0 descriptor?? [ 666.976901][ T43] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 666.991642][ T6975] bridge_slave_1: left allmulticast mode [ 666.998077][ T6975] bridge_slave_1: left promiscuous mode [ 667.004038][T15797] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 667.013443][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.022752][ T6975] bridge_slave_0: left allmulticast mode [ 667.028402][ T6975] bridge_slave_0: left promiscuous mode [ 667.034533][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.171347][T15797] usb 1-1: Using ep0 maxpacket: 8 [ 667.178138][T15797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 667.191321][ T43] usb 4-1: USB disconnect, device number 2 [ 667.192808][T15797] usb 1-1: config 4 interface 0 has no altsetting 0 [ 667.206937][T15797] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 667.216156][T15797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.225019][T15797] usb 1-1: Product: ࠚ [ 667.232854][T15797] usb 1-1: Manufacturer: ఊ [ 667.244188][T15797] usb 1-1: SerialNumber: 壋稐㧺ၥ乺⊹䇗䴇ꄡ吝捷彉탐몵쓛뮶超푡ꅢ響 [ 667.244188][T15797] 廿퐉뱖ೀ [ 667.295924][ T6975] dvmrp0 (unregistering): left allmulticast mode [ 667.781056][T15921] Bluetooth: hci0: command tx timeout [ 668.659631][ T6975] team0: Port device bond0 removed [ 668.666231][ T6975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.676414][ T6975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.687749][ T6975] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 668.705348][ T6975] bond0 (unregistering): Released all slaves [ 668.786081][ T6975] bond1 (unregistering): Released all slaves [ 668.797106][T16349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.804034][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.830038][T16349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.842894][T16349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.849839][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.850610][ T8812] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 668.881517][T16349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.931044][T15797] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 668.964773][T15797] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 669.011778][T15797] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 669.021089][T15797] usb 1-1: media controller created [ 669.031290][T16396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.041915][T16349] hsr_slave_0: entered promiscuous mode [ 669.055841][ T8812] usb 4-1: device descriptor read/64, error -71 [ 669.060888][T15797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 669.066959][T16396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.072057][T16349] hsr_slave_1: entered promiscuous mode [ 669.094167][ T30] audit: type=1400 audit(1765039087.098:2512): avc: denied { write } for pid=16397 comm="syz.4.2861" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 669.184175][T16402] overlay: Unknown parameter 'dont_hash' [ 669.310782][ T8812] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 669.372311][T16349] debugfs: 'hsr0' already exists in 'hsr' [ 669.409778][T16349] Cannot create hsr debugfs directory [ 669.441167][ T6975] : left promiscuous mode [ 669.463076][ T8812] usb 4-1: device descriptor read/64, error -71 [ 669.603713][ T8812] usb usb4-port1: attempt power cycle [ 670.005122][T15921] Bluetooth: hci0: command tx timeout [ 670.046068][T15797] zl10353_read_register: readreg error (reg=127, ret==0) [ 670.052245][ T8812] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 670.078542][T15797] usb 1-1: USB disconnect, device number 56 [ 670.142721][ T8812] usb 4-1: device descriptor read/8, error -71 [ 670.173563][T16410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.222128][T16410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.360692][T15921] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 670.432400][ T8812] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 670.550689][ T8812] usb 4-1: device descriptor read/8, error -71 [ 670.583787][T15797] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 670.604302][ T6975] ------------[ cut here ]------------ [ 670.610106][ T6975] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 670.618808][ T6975] WARNING: CPU: 1 PID: 6975 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x247/0x850 [ 670.630009][ T6975] Modules linked in: [ 670.634274][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 670.644399][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 670.655230][ T6975] Workqueue: netns cleanup_net [ 670.660464][ T6975] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 670.666815][ T6975] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 5f d7 ee f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 60 bd e2 8c e8 aa 0a ad f6 90 <0f> 0b 90 90 e8 40 d7 ee f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 670.687052][ T6975] RSP: 0018:ffffc900035075a8 EFLAGS: 00010282 [ 670.693682][ T6975] RAX: 0000000000000000 RBX: ffff888057240d80 RCX: ffffffff817b1cd8 [ 670.702035][ T6975] RDX: ffff88802a26c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 670.710455][ T6975] RBP: ffff88802ea60e80 R08: 0000000000000001 R09: 0000000000000000 [ 670.710489][ T30] audit: type=1400 audit(1765039088.595:2513): avc: denied { write } for pid=5795 comm="syz-executor" path="pipe:[4864]" dev="pipefs" ino=4864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 670.718419][ T6975] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888057242ad8 [ 670.741535][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.757614][ T6975] R13: 0000000000000000 R14: ffff8880572417b8 R15: ffff888057242a80 [ 670.766708][ T6975] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 670.775994][ T6975] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.782577][ T6975] CR2: 00007fc6a1fd9e9c CR3: 0000000028469000 CR4: 00000000003526f0 [ 670.790805][ T6975] DR0: 0000000000000002 DR1: 0000000000000001 DR2: 000000000000004e [ 670.799017][ T6975] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 670.807214][ T6975] Call Trace: [ 670.810492][ T6975] [ 670.813422][ T6975] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 670.817350][T15797] usb 1-1: config 4 has an invalid interface number: 118 but max is 0 [ 670.819631][ T6975] __ieee80211_link_release_channel+0x273/0x4b0 [ 670.834139][ T6975] ieee80211_link_release_channel+0x128/0x200 [ 670.840873][ T6975] ? __pfx_ieee80211_uninit+0x10/0x10 [ 670.846251][ T6975] unregister_netdevice_many_notify+0x1402/0x25c0 [ 670.852909][T15797] usb 1-1: config 4 has no interface number 0 [ 670.852942][T15797] usb 1-1: config 4 interface 118 has no altsetting 0 [ 670.852974][T15797] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.71 [ 670.852996][T15797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.883932][ T6975] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 670.890714][ T6975] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 670.897087][ T6975] ? find_held_lock+0x2b/0x80 [ 670.901773][ T6975] unregister_netdevice_queue+0x305/0x3f0 [ 670.907759][ T6975] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 670.914319][ T6975] _cfg80211_unregister_wdev+0x64b/0x830 [ 670.920617][ T6975] ieee80211_remove_interfaces+0x34e/0x740 [ 670.924255][ T5922] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 670.926508][ T6975] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 670.940616][ T6975] ieee80211_unregister_hw+0x55/0x3a0 [ 670.946128][ T6975] hwsim_exit_net+0x788/0x1590 [ 670.951318][ T6975] ? __pfx_hwsim_exit_net+0x10/0x10 [ 670.956828][ T6975] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 670.962212][ T6975] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 670.968008][ T6975] ? __pfx_hwsim_exit_net+0x10/0x10 [ 670.973209][ T6975] ops_undo_list+0x2ee/0xab0 [ 670.977891][ T6975] ? __pfx_ops_undo_list+0x10/0x10 [ 670.983011][ T6975] ? cleanup_net+0x347/0x8b0 [ 670.987607][ T6975] ? idr_destroy+0x62/0x2e0 [ 670.992523][ T6975] cleanup_net+0x41b/0x8b0 [ 670.997031][ T6975] ? __pfx_cleanup_net+0x10/0x10 [ 671.002059][ T6975] ? rcu_is_watching+0x12/0xc0 [ 671.006829][ T6975] process_one_work+0x9cf/0x1b70 [ 671.011858][ T6975] ? __pfx_process_one_work+0x10/0x10 [ 671.017237][ T6975] ? assign_work+0x1a0/0x250 [ 671.021882][ T6975] worker_thread+0x6c8/0xf10 [ 671.026488][ T6975] ? __pfx_worker_thread+0x10/0x10 [ 671.031685][ T6975] kthread+0x3c5/0x780 [ 671.035753][ T6975] ? __pfx_kthread+0x10/0x10 [ 671.040341][ T6975] ? rcu_is_watching+0x12/0xc0 [ 671.045166][ T6975] ? __pfx_kthread+0x10/0x10 [ 671.049755][ T6975] ret_from_fork+0x675/0x7d0 [ 671.054385][ T6975] ? __pfx_kthread+0x10/0x10 [ 671.059181][ T6975] ret_from_fork_asm+0x1a/0x30 [ 671.064083][ T6975] [ 671.067080][ T6975] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 671.074330][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 671.083842][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 671.093868][ T6975] Workqueue: netns cleanup_net [ 671.098611][ T6975] Call Trace: [ 671.101866][ T6975] [ 671.104780][ T6975] dump_stack_lvl+0x3d/0x1f0 [ 671.109345][ T6975] vpanic+0x640/0x6f0 [ 671.113306][ T6975] ? drv_unassign_vif_chanctx+0x247/0x850 [ 671.118998][ T6975] panic+0xca/0xd0 [ 671.122705][ T6975] ? __pfx_panic+0x10/0x10 [ 671.127109][ T6975] ? check_panic_on_warn+0x1f/0xb0 [ 671.132191][ T6975] check_panic_on_warn+0xab/0xb0 [ 671.137101][ T6975] __warn+0xf6/0x3c0 [ 671.140965][ T6975] ? drv_unassign_vif_chanctx+0x247/0x850 [ 671.146678][ T6975] report_bug+0x3c3/0x580 [ 671.150994][ T6975] ? drv_unassign_vif_chanctx+0x247/0x850 [ 671.156693][ T6975] handle_bug+0x184/0x210 [ 671.161002][ T6975] exc_invalid_op+0x17/0x50 [ 671.165486][ T6975] asm_exc_invalid_op+0x1a/0x20 [ 671.170314][ T6975] RIP: 0010:drv_unassign_vif_chanctx+0x247/0x850 [ 671.176620][ T6975] Code: 74 24 10 48 81 c6 20 01 00 00 48 89 74 24 10 e8 5f d7 ee f6 8b 54 24 04 48 8b 74 24 10 48 c7 c7 60 bd e2 8c e8 aa 0a ad f6 90 <0f> 0b 90 90 e8 40 d7 ee f6 4c 89 f2 48 b8 00 00 00 00 00 fc ff df [ 671.196202][ T6975] RSP: 0018:ffffc900035075a8 EFLAGS: 00010282 [ 671.202253][ T6975] RAX: 0000000000000000 RBX: ffff888057240d80 RCX: ffffffff817b1cd8 [ 671.210207][ T6975] RDX: ffff88802a26c900 RSI: ffffffff817b1ce5 RDI: 0000000000000001 [ 671.218148][ T6975] RBP: ffff88802ea60e80 R08: 0000000000000001 R09: 0000000000000000 [ 671.226090][ T6975] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888057242ad8 [ 671.234031][ T6975] R13: 0000000000000000 R14: ffff8880572417b8 R15: ffff888057242a80 [ 671.241977][ T6975] ? __warn_printk+0x198/0x350 [ 671.246717][ T6975] ? __warn_printk+0x1a5/0x350 [ 671.251466][ T6975] ? drv_unassign_vif_chanctx+0x246/0x850 [ 671.257173][ T6975] ieee80211_assign_link_chanctx+0x3f1/0xf00 [ 671.263127][ T6975] __ieee80211_link_release_channel+0x273/0x4b0 [ 671.269342][ T6975] ieee80211_link_release_channel+0x128/0x200 [ 671.275383][ T6975] ? __pfx_ieee80211_uninit+0x10/0x10 [ 671.280747][ T6975] unregister_netdevice_many_notify+0x1402/0x25c0 [ 671.287144][ T6975] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 671.293886][ T6975] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 671.300015][ T6975] ? find_held_lock+0x2b/0x80 [ 671.304668][ T6975] unregister_netdevice_queue+0x305/0x3f0 [ 671.310365][ T6975] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 671.316587][ T6975] _cfg80211_unregister_wdev+0x64b/0x830 [ 671.322195][ T6975] ieee80211_remove_interfaces+0x34e/0x740 [ 671.327979][ T6975] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 671.334287][ T6975] ieee80211_unregister_hw+0x55/0x3a0 [ 671.339641][ T6975] hwsim_exit_net+0x788/0x1590 [ 671.344383][ T6975] ? __pfx_hwsim_exit_net+0x10/0x10 [ 671.349557][ T6975] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 671.354914][ T6975] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 671.360606][ T6975] ? __pfx_hwsim_exit_net+0x10/0x10 [ 671.365784][ T6975] ops_undo_list+0x2ee/0xab0 [ 671.370354][ T6975] ? __pfx_ops_undo_list+0x10/0x10 [ 671.375438][ T6975] ? cleanup_net+0x347/0x8b0 [ 671.380002][ T6975] ? idr_destroy+0x62/0x2e0 [ 671.384479][ T6975] cleanup_net+0x41b/0x8b0 [ 671.388880][ T6975] ? __pfx_cleanup_net+0x10/0x10 [ 671.393794][ T6975] ? rcu_is_watching+0x12/0xc0 [ 671.398532][ T6975] process_one_work+0x9cf/0x1b70 [ 671.403447][ T6975] ? __pfx_process_one_work+0x10/0x10 [ 671.408794][ T6975] ? assign_work+0x1a0/0x250 [ 671.413354][ T6975] worker_thread+0x6c8/0xf10 [ 671.417932][ T6975] ? __pfx_worker_thread+0x10/0x10 [ 671.423013][ T6975] kthread+0x3c5/0x780 [ 671.427052][ T6975] ? __pfx_kthread+0x10/0x10 [ 671.431622][ T6975] ? rcu_is_watching+0x12/0xc0 [ 671.436359][ T6975] ? __pfx_kthread+0x10/0x10 [ 671.440920][ T6975] ret_from_fork+0x675/0x7d0 [ 671.445481][ T6975] ? __pfx_kthread+0x10/0x10 [ 671.450042][ T6975] ret_from_fork_asm+0x1a/0x30 [ 671.454787][ T6975] [ 671.458047][ T6975] Kernel Offset: disabled [ 671.462355][ T6975] Rebooting in 86400 seconds..