last executing test programs: 3m5.932154687s ago: executing program 1 (id=932): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000700)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="000eb9000000b923c3c0c429fbb7583d086300eddbec53ea0ad5b26d14eed1dbdcdd2c53edbc1da26dff3d23582f0c0e4df2c4834c4e98e07ed4162980b3d51932ab4e0d33b79731fc15433837ecd25036914f48fd58229fd695f82ff5a51fbcc6141f2a7ad19cb584b9c2ab562dffbb64e982b379f88b54d78140147599e9e9a47501a4bccdcd64a217e46683497165133261870aebb22c46a522ce4110627d55a0643308916083110b0db935c4a68c3a4af99560d3e1774d1de11729583b"], &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x20, 0x13, 0x7a, "c9d5dadadbdac0fec86ddd0b6afb980bc6ff967e0b0a9b94e52f0db5c06ff8fae017d5696fcedccea697e7d4dba099893500ff041e631397f9852e2cd301288c95756bf337395c06f01298f4283e8661a8d2ef85ffe21edbbd76873880c69a1a89cb54a36bcba8d9a41a47007d8d2b63b97cc622755070a30455"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000000880)={0x20, 0x82, 0x1, "d4"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="2083030000001bb19d2f14ce12986ed2bff5646978bf28ce6d33f24a81395fe9d1c589b228f3f707111673b7b06640a1595fbe84c71f2c568614534ecafed22bf029ed898521c61b9d69913b6c3631b5f5ff38806e2e74a18bce2f16b81cbec47ba6e5e425eb4fb25631bf4c4fece586bafe171e610d5176af79f6afbca95b4cf2a2af1318cf9e3bfa0bf92af3dff4e018cb50"], &(0x7f0000000900)=ANY=[@ANYBLOB="200200000000000000"], &(0x7f0000000940)={0x20, 0x85, 0x3, "cc2598"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002b40)={0x11, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fdt', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000240)="390000001000111867090707a640400f0021ff3f30000000170a0017ffc30000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) ioctl(r1, 0x8b1a, &(0x7f0000000040)) 3m1.99605675s ago: executing program 1 (id=944): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xc9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) keyctl$revoke(0x3, r0) read$watch_queue(r1, &(0x7f0000000280)=""/97, 0x61) 3m1.859959842s ago: executing program 1 (id=946): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0xc, 0x7, 0x4, 0xfffffffffffffffc, 0x4, 0x9, 0x6, 0x7, 0xa42c}) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[@ANYRESOCT=r1], 0x314}], 0x1, 0x0, 0x0, 0x20000000}, 0x800) 3m1.76430841s ago: executing program 1 (id=948): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3', @ANYRESDEC=0x0]) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x80000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0xa3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x25, &(0x7f00000001c0), 0x4) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x8a042, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) 3m1.529912706s ago: executing program 1 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000009580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=[@op={0x18, 0x117, 0x3, 0x2ec89bb510de33e6}], 0x18, 0x4004}], 0x1, 0x40800) syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd61f6ff0100442f00fe8000000000000000000000000000bb"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r9, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4) r10 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r11 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1000400, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB="2c6d6d61702c6163636573733d616e792c63616368653d667363616368652c6163636573f33d616e792c6673757569643d39373134303400302d623161322d363535642d003335632d6438f664653435302c61756469742c00e5ad26b983c827781987797681de24033cabb5"]) ioctl$IOMMU_VFIO_IOAS$GET(r10, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r10, 0x3b86, &(0x7f00000000c0)={0x18, r12}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @timestamp, @timestamp], 0x3) 3m1.119063208s ago: executing program 1 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000000000)="7f", 0x1, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r3, 0x0, &(0x7f0000000180)="e6", 0x1, 0x1000000007}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x50, r4, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x24001844) 3m0.863268273s ago: executing program 32 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x5, r3, 0x0, &(0x7f0000000000)="7f", 0x1, 0xfffffffffffffffe}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r3, 0x0, &(0x7f0000000180)="e6", 0x1, 0x1000000007}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x50, r4, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x24001844) 9.997222136s ago: executing program 2 (id=1996): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0x0, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x3, 0x80000000, 0x0, 0x4, 0x2, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x3, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0xfffffbff, 0x5, 0x1c, 0x120000, 0x1, 0x2006, 0x80a2ed, 0x4, 0x25], [0x7, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x4, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x3, 0x6, 0x4, 0xc8, 0x9, 0xffffb000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000580)={0x0, 0x0, 0x400, 0x0, 0x2d9}, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000400000008000000da"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000640)={r1, 0xff97, &(0x7f00000005c0)}, 0x10) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x800) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x80, 0x2, 0xf, 0x52, 0xffe00000000]}) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x2, 0xfffffffffffffffc}, 0x0) 9.931938947s ago: executing program 2 (id=1997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22bb6c2e63dec7ffef7e6923b827c18879dc08ee920d0ecc79ccd55ffe92c0c1f788d1fb40b60e29", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a0000eac9000000010000"], 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="51ca0b"], 0xfeb8) socket$inet6(0xa, 0x5, 0x6) r6 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0003040000000403e558"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x40, 0xf, 0x9, "8f0bd323cf71cd2084"}, 0x0, 0x0, 0x0, 0x0, 0x0}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140), 0x0, 0x2) capget(&(0x7f0000000200), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) accept$inet6(r0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x66db4142, 0x1) syz_emit_ethernet(0x1c0, &(0x7f0000000680)={@local, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv6={0x86dd, @tcp={0x9, 0x6, "655294", 0x186, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast1, {[@routing={0x52, 0x2, 0x0, 0x40, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}, @fragment={0x84, 0x0, 0x1, 0x0, 0x0, 0x5, 0x67}, @srh={0x3b, 0x4, 0x4, 0x2, 0x3, 0x8, 0x2, [@private1, @dev={0xfe, 0x80, '\x00', 0x11}]}, @routing={0x16, 0x4, 0x2, 0xf, 0x0, [@local, @empty]}, @fragment={0x2b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x66}, @fragment={0x67, 0x0, 0x40, 0x1, 0x0, 0xd, 0x68}], {{0x4e22, 0x4e20, r8, 0x41424344, 0x0, 0x0, 0xc, 0xc2, 0x2, 0x0, 0x8, {[@window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "448115002c894e52b2ab521e4777eee0"}, @sack_perm={0x4, 0x2}]}}, {"2020704783ad4591391b6537111a3cddd55f2eb20500451723d2e0c84cffc98c550816d01ca8c64b83b5b45860c9a7c3988914c580dbaf74f60abb780c18b6e0828a7937216c6f9c304779e071236c9e54cc3eddd2db6b506327db1e045401be30e090d5026a1af322ad058d1c9733cde30995eaf4c76e4f02a375cb6e70e7f9f463a5a4d8776451a0621169bdb1b2a8d25ca9b0d3fa55c7251ac57e8916c7ed3e9c21219f8b4be7c4acd00be1381b4a552425adef78c02d043174d0ad9e9c21446cc8b5d8cf"}}}}}}}, 0x0) 7.099091417s ago: executing program 3 (id=2023): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 6.9080033s ago: executing program 3 (id=2024): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}, {@version_9p2000}]}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r3}, 0x18) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="8022", 0x2}], 0x1}}], 0x1, 0x800) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000013c0)="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", 0x4fb}], 0x1}}], 0x1, 0x42054) 6.575427631s ago: executing program 2 (id=2029): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="400501000000ce"]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r10 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r10, 0x0, 0x0, 0xd08, &(0x7f0000000040)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000a361cb2f54601e0b9dfd799a9007eac1925e84273790b33a9cc5b193292a698810f60100000000000000c380c383b97c1654353ce56ff01e9995e22579870cc5ea6c1ab585741a25fa2491a6591ccc64f6390264a58de8d5dd859002eb62d9628a6ffb1ad2c8cada733a703dbfc9015045714909195c72ad0b7e55f69a49f063b2a45f0112955977bcc40987201a183b8a340634ae953fd2f85c522840e8404870793266e439f012029642a0b9ce42f7f0b7797bbe002a1cc768c48ef8b4ba9ce362", @ANYRES16=r9, @ANYRES64=0x0, @ANYRES32=r11, @ANYBLOB="22003300d0000800ffffffffffff080211000000ffffffffffff0040040400030ef90000", @ANYRES64=r7], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socket$rds(0x15, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10) socket(0x2, 0x80805, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00@\x00', @ANYRES16=r12, @ANYBLOB="000426bd7000fddbdf250300000008003900ff03000008003a000600000005002f0000000000060028000100000008000b0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x38, r12, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff00}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 6.027978912s ago: executing program 0 (id=2040): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x400000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0x5, 0x2}, {0x1}, {0xb, 0x2}]}, @ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @enum64={0x6, 0x2, 0x0, 0x13, 0x1, 0xc, [{0x10, 0x4, 0x4}, {0xb, 0x6, 0x3}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x2e]}}, 0x0, 0xa2}, 0x28) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000440)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16, 0x94da, 0x9, 0x6}}, @wr_crn={0x67, 0x20, {0x3}}], 0x58}) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x9}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000480)=""/142) bind$inet(r0, &(0x7f0000001600)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) 5.988105978s ago: executing program 3 (id=2041): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000540)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="000101010000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000cc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 4.762912459s ago: executing program 4 (id=2045): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t', @ANYRES32=r0], 0x44}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 4.722525569s ago: executing program 4 (id=2046): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020650443c3000000000001090224000100004087090400efd15c6d01b2720e81001f01222800090581034000ffc300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) unshare(0x400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000a0000000000", @ANYRESHEX=r1, @ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="120000000420ff956a0064e8a21f5c6e329500009224084fe8e7f4465c23d8", @ANYRESDEC=r5, @ANYRES8=r2, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r5, r6, 0x7, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) close(r6) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r7, 0xffffffffffffffff, 0x0) io_submit(r1, 0xffffff66, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept4$inet6(r4, 0x0, 0x0, 0x1000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa0000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000001c0)={'syzkaller0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "4f63658fc10e3ff840b3977adb57276045271c348de9fcc1319e46ab4fc0f262", "ed89bd92077cc4e1ebab6665ead7e62cc4ec716f2f700e1388718a554f15a71b", "4e0ca675760e7bb4292428ae125fd7953d8bf502f68af1b47dfbf2b563101858", "09fe7f450ba4225e96815cb8aceaa83986945038b7b740f94f850699a75a1795", "d86e80b1cb00bcaddb1d3f916262f3e72936aa388460af417400707c1df01c99", "ecbdb6c1e93e59bd493248ef", 0x19ea05dd, 0x0, 0x9, 0x6, 0x400}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000080), 0x0}, 0x20) 4.616400016s ago: executing program 0 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 4.616022317s ago: executing program 0 (id=2048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42402, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r6, &(0x7f0000000940)=[{&(0x7f0000000140)='1', 0x1}], 0x1, 0x9, 0x7fff) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000340)) r9 = fsopen(&(0x7f0000000080)='nfs\x00', 0x1) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r10, 0x40383d0c, &(0x7f00000002c0)={{0xffffffffffffffff, 0xfffffffe}, {0xfffffffffffffe29, 0x5}, 0xfffffe29, 0x6}) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x1000, &(0x7f000000f000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xeeef6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) creat(&(0x7f0000001fc0)='./file0\x00', 0xa8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.896491091s ago: executing program 4 (id=2050): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000180)={"f4eac391382878bfd29aca6b45ac1c57acb7d025cffe5f56d81f6c27947c", 0x5, 0x1, 0x401, 0x6, 0xfffffffc, 0xff000000, 0x1, 0x4cb0ba810f92ba5f, [0x2, 0x8, 0x5, 0x9, 0x3, 0xbe, 0x80000001, 0x5, 0x7, 0x6837, 0x7, 0xba3, 0x10001, 0x6, 0x4, 0x5, 0x6, 0x2, 0xb]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x38, r2, 0x101, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x38}}, 0x50) keyctl$set_reqkey_keyring(0xe, 0x1) 3.824110854s ago: executing program 4 (id=2051): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) splice(r4, 0x0, r1, 0x0, 0x317e, 0x4) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0) 3.579510859s ago: executing program 4 (id=2052): r0 = syz_usb_connect$hid(0x6, 0xfffffffffffffe0e, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x4b, 0x6}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$midi(0x2, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="120150020000002030144b4740000102030109024d0001010610010904000002010330010d2403010203f50707090a037f09050b00ff0302ff071025010c4eeb92f8f710000100040c2501087d7219b470f3e48e00"/95], &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x7, 0x2, 0x7, 0x20, 0x4}, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x5, 0x0, 0x5}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1809}}]}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYRESHEX=r2], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x201, 0x0, 0xa, 0x42, 0x5c}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB='@$('], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.517040556s ago: executing program 0 (id=2053): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x103d, 0x8, 0x401, 0x483}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_clone3(&(0x7f00000016c0)={0xa4281200, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) getsockopt$inet6_tcp_buf(r3, 0x6, 0x5, 0x0, &(0x7f0000003580)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) getpid() r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="1600"/18, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4000000}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00'}, 0x90) sched_setscheduler(r4, 0x3, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$packet(0x11, 0x3, 0x300) 3.255971365s ago: executing program 2 (id=2054): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x1, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) setresgid(0xee00, 0xee01, 0x0) setregid(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @mcast2, 0x2}, 0x1c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0xc9) r5 = socket$unix(0x1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r8 = dup(r6) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) sendmmsg$unix(r5, &(0x7f0000000640)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)="4c7731118a8e5973ffa9ca5464e9ce54819f7edee036cc1e5d6a19a19ad1e22afede349b190607237682141483360e14c560b13bd24c5dbf6718166908e334374d53ff758f22dfd0b7c1df6528b92fa463", 0x51}, {&(0x7f0000000540)="392504bc1982ad3ca5bae2ee62df4ba307f23e6e37d66f1bc04508638d64aef934f665e449d2bcbf9e0b50fca8e3db90e0089c4155713145e63fcd50c300ca1b90e4f7ae003977bff271e24e76e3cf2ef6e9550fb80bb9aff24c268307a97cdbf4cda01b41fe0f4c6ef8c53730880897639cb13b1797692c01087710703695a099a2a9d0f41d15a95c6e837d7d1cbc6781024f8cb1a6fc5982a2397aa98da7602ef048c0c74779624200b7c09014f705e36033dc55e235e7ec4c0c", 0xbb}], 0x3, 0x0, 0x0, 0x54}}], 0x1, 0x2004c0d1) 3.120310727s ago: executing program 3 (id=2055): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x80, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x100, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x18}}, {{&(0x7f0000001400)={0xa, 0x4e21, 0x5, @remote, 0x101}, 0x1c, 0x0, 0x0, &(0x7f0000001540)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x62, 0x0, 0x2, 0xf}}}], 0x18}}], 0x2, 0xff00) 3.089928281s ago: executing program 2 (id=2056): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001800010000000001fddbdf251d01020008000a00", @ANYRES32, @ANYBLOB='\b\x00\t', @ANYRES32=r0], 0x44}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) 2.752286802s ago: executing program 3 (id=2057): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) r1 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005240000000d240f0100000000000000000007241400000000042413fa042406"], 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x4ff8, 0x8000, 0x1, 0x80000000, r3}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x20) 2.728324056s ago: executing program 5 (id=2058): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000000000000048712ac7c0100000000000000000000000000bbff020000000000000000000000000001020090"], 0x0) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000000)=0xfffffffffffffe40) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.690503094s ago: executing program 5 (id=2059): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd700000dcdf25037c00000400c280100001800c00108008000b00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa514f6f9450bc9618180600fe8000000000000000000000000000aafe8000000000000000000000000000aaf9034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/freeze_filesystems', 0x8000, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800b9", @ANYRES16=r9, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r12, @ANYBLOB="0500030000000000"], 0x28}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xaf, 0x0, r3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x8, 0x401, 0x31c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400001, 0x10, 0x1, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) r13 = syz_open_dev$usbfs(0x0, 0x2000000000000000, 0x202800) ioctl$USBDEVFS_RESET(r13, 0x5514) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000010000000000000006000000000be0ff0400000018110000", @ANYRES32, @ANYBLOB="0040000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7b56804000001000000850000008200007318000000f30100000000bb84e4d6c1ac0000000000004cf5e3827f8777731308b3c1532e0000000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0xf9, &(0x7f0000000640)=""/249, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x7, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[r3, r10, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x7, 0x5, 0x4}, {0x4, 0x4, 0x8, 0x3}, {0x5, 0x2, 0x1, 0x8}, {0x3, 0x4, 0x9}, {0x2, 0x4, 0xa, 0x6}, {0x4, 0x2, 0xe, 0x3}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd2, &(0x7f00000003c0)=""/210, 0x41000, 0x2f, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r14}, 0x94) 2.663763383s ago: executing program 2 (id=2060): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8cfb}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000006008500000082000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x12dc, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x100}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2fc6000000200000040000", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5}, 0x22, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r8], 0x20}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000080000000300000003000006"], 0x0, 0x3c, 0x0, 0x1}, 0x28) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 2.378330067s ago: executing program 0 (id=2061): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'pim6reg\x00', &(0x7f0000000280)=@ethtool_link_settings={0x4c, 0x4, 0x0, 0x6, 0x4, 0x4, 0x10, 0xb, 0x1, 0x7, [0x7, 0x8, 0x0, 0x426530ee, 0xb, 0x6, 0xdef, 0x3], [0x1, 0x10000003, 0xdb3, 0x5, 0x81, 0xfffffffb]}}) alarm(0x5) sendmsg$nl_route_sched(r4, 0x0, 0x4000890) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000001000000"], 0x0, 0x42}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x15, 0xc5fb, @name="3e0dade6fecfaeab46f0f3b1f0d890d027f39619cda002c12783006ca2f41fd4"}) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc", 0x11, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000002300)={0x2, &(0x7f0000000040)=[{0x3, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x9, 0x7}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.524216183s ago: executing program 5 (id=2062): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x3fe, 0x5, &(0x7f00000001c0)="3c2f7f4462", 0xe0c0845c683fbcdb}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x4c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000080)) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x1, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0xffffac1414aa}, [@srh={0xbf, 0x0, 0x4, 0x0, 0x5, 0x20, 0xff}]}}}}}}}, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000001000)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={r6, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x40, @mcast1, 0x8}, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) listen(r2, 0x2) 1.415142495s ago: executing program 0 (id=2063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x1, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000002000000000000001ff0200000000000000000000000000014f194e20"], 0x52) 1.334353747s ago: executing program 5 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b54300000000000000004a0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000980)={'tunl0\x00', 0x0, 0x20, 0x1, 0x9, 0x0, {{0x3b, 0x4, 0x2, 0x20, 0xec, 0x68, 0x0, 0x0, 0x5c, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0xbf, 0x1, 0xd, [{@multicast1}]}, @timestamp_prespec={0x44, 0x24, 0x62, 0x3, 0x7, [{@local, 0xa}, {@broadcast, 0x7}, {@multicast1, 0xfffffffd}, {@multicast1, 0xd}]}, @timestamp_prespec={0x44, 0x4, 0xad}, @timestamp_addr={0x44, 0x14, 0x70, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x1}, {@rand_addr=0x64010102, 0x80000001}]}, @timestamp_prespec={0x44, 0x3c, 0xf1, 0x3, 0x3, [{@local, 0x10000}, {@private=0xa010102, 0x1}, {@loopback, 0x4}, {@local, 0x9}, {@multicast2, 0x6}, {@broadcast, 0x7201}, {@private=0xa010100, 0x5}]}, @timestamp_prespec={0x44, 0x3c, 0x84, 0x3, 0x0, [{@multicast2, 0x6}, {@loopback, 0x3ff}, {@multicast1, 0xed1}, {@multicast2, 0x10000}, {@multicast1, 0x9d}, {@remote}, {@broadcast, 0x486}]}, @lsrr={0x83, 0x17, 0xbe, [@empty, @dev={0xac, 0x14, 0x14, 0x38}, @local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x80, 0x0, 0x0, 0xa, "eaffffff"}, 0x2000000, 0x2, {}, 0x20800}) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r8, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, 0x4e20, 0x7, 0x4e20, 0x4, 0xa, 0x0, 0xa0, 0x3c, r4}, {0x7, 0x5, 0xaacc, 0x5, 0x7, 0x310, 0x7, 0x40}, {0x8, 0x40, 0xd3f5, 0x1}, 0x7, 0x6e6bbd, 0x0, 0x0, 0x1, 0x3}, {{@in6=@mcast1, 0x4d3, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x3500, 0x2, 0x0, 0x7, 0x8, 0x1, 0x3ff}}, 0xe4) sendmsg$nl_generic(r0, &(0x7f0000003900)={&(0x7f0000000100), 0xc, &(0x7f00000038c0)={0x0, 0x1014}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 791.987433ms ago: executing program 3 (id=2065): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="34ef9f3a305a8a4d18b4391c23d8fcf9235bfd9433ddfd57abe11d71eae4e0ba60dca1469b7e19f723b34d51ea07c3a4807253121efbc858aa59fd9d63100c2d7a3f4491ddc4f41d9a8a8f482d71e1ab43e27a98d0c0e1ee034106643632ac540ffa9fed393c967121176649a90545cf7e3a4d7cca5f709ed546b3c0be3978e8dae2", 0x82) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0xe, 0x0, 0x3fc, 0x10000000, 0x0, 0x2}, 0x9c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0x3232, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x18000, 0x0, 0x2b) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x248400) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) unshare(0x8040480) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xd) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r7, 0x0, 0xee01) 226.804454ms ago: executing program 5 (id=2066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0xfffffffffffffff0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xcc}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 135.703608ms ago: executing program 4 (id=2067): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0x3, r3}) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000240)='\x00', 0xfeef, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x2, 0xfe, 0x49, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x0, 0x1, 0xd, 0xfff, 0x200, 0x1, 0x8001, 0x7]}}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) keyctl$revoke(0x3, r4) read$watch_queue(r5, &(0x7f0000000280)=""/97, 0x61) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x6000, 0x1) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r8, r8, r8) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x300, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xffff, 0x1}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r9 = dup(r1) write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x2000}) 0s ago: executing program 5 (id=2068): syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r2, 0x2a926f98730b6fbb, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x20, 0x2f}, {0x3, 0x0, 0x0, 0x0, 0x1, 0x10000000000}, {0x7fd, 0x0, 0x6}, 0x2, 0x6e6bba}, {{@in6=@private0, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1b}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x30}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) kernel console output (not intermixed with test programs): 287.124864][ T9] scsi host1: usb-storage 6-1:1.0 [ 288.265410][T10133] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 288.297967][T10133] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 288.310009][ T29] audit: type=1400 audit(279.433:2622): avc: denied { map } for pid=11311 comm="syz.5.1436" path="/dev/sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 288.344109][ T29] audit: type=1400 audit(279.433:2623): avc: denied { execute } for pid=11311 comm="syz.5.1436" path="/dev/sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 288.689162][T11351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1444'. [ 288.794603][ T29] audit: type=1326 audit(279.876:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.2.1432" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2a79ce59 code=0x7fc00000 [ 289.559660][ T29] audit: type=1400 audit(280.587:2625): avc: denied { remount } for pid=11371 comm="syz.3.1450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 290.797554][T11328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.867880][ T1219] usb 6-1: USB disconnect, device number 17 [ 290.873846][T11321] sddr09: could not read card info [ 290.928595][ T76] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 290.939190][ T76] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 290.945242][ T76] sd 1:0:0:0: [sdb] Write Protect is off [ 290.952566][ T76] sd 1:0:0:0: [sdb] Asking for cache data failed [ 290.958975][ T76] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 290.999166][ T76] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 291.051086][ T29] audit: type=1400 audit(281.954:2626): avc: denied { ioctl } for pid=11383 comm="syz.3.1452" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 291.638881][T11391] overlayfs: missing 'lowerdir' [ 292.899969][ T1219] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 293.139828][ T1219] usb 6-1: Using ep0 maxpacket: 32 [ 293.164287][ T1219] usb 6-1: config 6 has an invalid interface number: 132 but max is 0 [ 293.185733][T11427] overlayfs: failed to resolve './file2': -2 [ 293.193421][ T29] audit: type=1400 audit(283.948:2627): avc: denied { read } for pid=11425 comm="syz.3.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.216670][ T1219] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 293.239421][ T1219] usb 6-1: config 6 has no interface number 0 [ 293.265045][ T1219] usb 6-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 293.293278][ T29] audit: type=1400 audit(284.031:2628): avc: denied { create } for pid=11431 comm="syz.0.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 293.316985][ T1219] usb 6-1: config 6 interface 132 altsetting 6 endpoint 0xA has invalid wMaxPacketSize 0 [ 293.339821][ T1219] usb 6-1: config 6 interface 132 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.365794][ T1219] usb 6-1: config 6 interface 132 has no altsetting 0 [ 293.390150][ T1219] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 293.405692][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.414751][ T1219] usb 6-1: Product: syz [ 293.418931][ T1219] usb 6-1: Manufacturer: syz [ 293.426334][ T1219] usb 6-1: SerialNumber: syz [ 293.501466][ T29] audit: type=1400 audit(284.225:2629): avc: denied { remount } for pid=11439 comm="syz.2.1465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 293.675451][ T1219] usbtest 6-1:6.132: couldn't get endpoints, -22 [ 293.690899][ T1219] usbtest 6-1:6.132: probe with driver usbtest failed with error -22 [ 293.717559][ T1219] usb 6-1: USB disconnect, device number 18 [ 294.066011][T11452] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 294.131332][T11452] nfs4: Unknown parameter 'tcpjS֑%||zT 剿#2`Ӯ^ /scripts/get_dvb_firmware to get the firmware [ 306.399584][ T24] usb 1-1: USB disconnect, device number 44 [ 306.401629][ T5678] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 306.543676][T11767] tipc: Enabling of bearer rejected, already enabled [ 306.556408][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.568357][T11767] macsec0: entered promiscuous mode [ 306.574157][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.582444][T11767] macsec0: entered allmulticast mode [ 306.596792][ T5730] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 306.636499][T11767] veth1_macvtap: entered allmulticast mode [ 306.698509][ T29] audit: type=1400 audit(296.402:2651): avc: denied { write } for pid=11760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.786342][ T24] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 306.854020][ T29] audit: type=1400 audit(296.540:2652): avc: denied { write } for pid=11781 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.893875][T11785] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1537'. [ 307.988644][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 308.000253][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 308.012993][ T24] usb 1-1: config 127 has an invalid interface number: 1 but max is 0 [ 308.029704][ C0] usblp0: nonzero read bulk status received: -71 [ 308.030507][ T24] usb 1-1: config 127 has no interface number 0 [ 308.036515][ T10] usb 4-1: USB disconnect, device number 65 [ 308.107673][ T24] usb 1-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 308.119965][ T24] usb 1-1: config 127 interface 1 has no altsetting 0 [ 308.120014][T11792] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1539'. [ 308.128187][ T24] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89 [ 308.145302][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.154805][ T24] usb 1-1: Product: syz [ 308.158999][ T24] usb 1-1: Manufacturer: syz [ 308.165864][ T24] usb 1-1: SerialNumber: syz [ 308.178215][T11801] fuse: fd is not a fuse device [ 308.183870][T11716] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 308.267777][T11681] usblp0: removed [ 308.462419][T11809] netlink: 'syz.5.1541': attribute type 11 has an invalid length. [ 308.470355][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1541'. [ 308.489936][T11809] netlink: 'syz.5.1541': attribute type 11 has an invalid length. [ 308.497822][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1541'. [ 309.410280][ T76] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.423070][ T76] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.435004][ T76] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.437764][ T24] redrat3 1-1:127.1: Couldn't find all endpoints [ 309.448274][ T76] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.456163][ T24] usb 1-1: USB disconnect, device number 45 [ 309.745930][T11814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.800833][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1547'. [ 309.865088][T11818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1547'. [ 309.922689][T11827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1549'. [ 310.068545][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 310.068565][ T29] audit: type=1400 audit(299.522:2655): avc: denied { connect } for pid=11817 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 310.474288][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.493092][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.947441][T11864] netlink: 768 bytes leftover after parsing attributes in process `syz.0.1561'. [ 312.099396][T11411] Bluetooth: hci5: Frame reassembly failed (-84) [ 312.418897][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 312.592202][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 312.599064][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 312.610339][ T24] usb 6-1: config 7 has an invalid interface number: 87 but max is 0 [ 312.618709][ T24] usb 6-1: config 7 has no interface number 0 [ 312.625016][ T24] usb 6-1: config 7 interface 87 has no altsetting 0 [ 312.633434][ T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=7111, bcdDevice=72.c5 [ 312.643119][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.651300][ T24] usb 6-1: Product: syz [ 312.659396][ T24] usb 6-1: Manufacturer: syz [ 312.666589][ T24] usb 6-1: SerialNumber: syz [ 312.685132][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 312.695609][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 313.272814][ T24] usb 6-1: USB disconnect, device number 23 [ 313.492034][T11900] 9p: Bad value for 'wfdno' [ 314.349449][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 314.436839][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.445620][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.468281][T11926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1579'. [ 314.671931][ T5730] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 314.835485][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.846407][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.856347][ T5730] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 314.865405][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.874479][ T5730] usb 4-1: config 0 descriptor?? [ 315.047248][T11933] 0x000000000006-0x0000000084c1 : "" [ 315.065284][T11933] ftl_cs: FTL header corrupt! [ 315.085763][ T29] audit: type=1400 audit(304.110:2656): avc: denied { ioctl } for pid=11932 comm="syz.5.1583" path="/106/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 315.205453][T11940] syzkaller0: left promiscuous mode [ 315.250784][T11940] syzkaller0: left allmulticast mode [ 315.275698][ T29] audit: type=1400 audit(304.286:2657): avc: denied { create } for pid=11934 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.344306][T11940] tipc: Resetting bearer [ 315.462542][T11940] binder: 11939:11940 ioctl c0306201 2000000001c0 returned -14 [ 315.476910][ T29] audit: type=1400 audit(304.286:2658): avc: denied { write } for pid=11934 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 315.521353][T11949] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 315.590329][ T5730] usb 4-1: string descriptor 0 read error: -22 [ 315.966726][ T5730] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0011/input/input28 [ 316.080190][ T1219] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 316.177352][T11924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.227102][T11924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.286558][ T1219] usb 6-1: Using ep0 maxpacket: 32 [ 316.346437][ T5730] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0011/input/input29 [ 316.405485][ T1219] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 316.547658][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.575877][ T5730] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0011/input/input30 [ 316.610720][ T1219] usb 6-1: Product: syz [ 316.619731][ T1219] usb 6-1: Manufacturer: syz [ 316.653478][ T5730] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0011/input/input31 [ 316.667503][ T1219] usb 6-1: SerialNumber: syz [ 316.690236][ T1219] usb 6-1: config 0 descriptor?? [ 316.697247][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1584'. [ 316.711353][ T1219] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 316.721621][ T1219] dvb-usb: bulk message failed: -22 (4/0) [ 316.729509][ T1219] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 316.741506][ T1219] dvb-usb: bulk message failed: -22 (5/0) [ 316.756663][ T5730] uclogic 0003:256C:006D.0011: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 316.758608][T11972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.792119][T11972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.818689][ T1219] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 316.832601][ T5730] usb 4-1: USB disconnect, device number 66 [ 316.863580][ T1219] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 316.879532][T11973] fido_id[11973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 316.898126][ T1219] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 316.912169][ T1219] usb 6-1: media controller created [ 316.952978][ T1219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.018827][ T1219] usb 6-1: selecting invalid altsetting 3 [ 317.060344][ T1219] ttusb2: set interface to alts=3 failed [ 317.060526][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.109530][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.126062][ T1219] DVB: Unable to find symbol tda10086_attach() [ 317.156074][ T1219] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 317.180715][ T1219] dvb-usb: bulk message failed: -22 (4/0) [ 317.189794][ T1219] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 317.199972][ T1219] dvb-usb: bulk message failed: -22 (5/0) [ 317.205747][ T1219] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 317.219026][ T1219] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 317.229118][ T29] audit: type=1400 audit(306.132:2659): avc: denied { getopt } for pid=11988 comm="syz.0.1595" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.251113][ T1219] usb 6-1: USB disconnect, device number 24 [ 317.269685][ T1219] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 317.358362][T11995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1597'. [ 317.597136][T12003] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1598'. [ 319.615450][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 319.668264][T12016] bond3: entered promiscuous mode [ 319.682861][T12016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.754638][T12016] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.777381][T12016] bond3: (slave sit2): The slave device specified does not support setting the MAC address [ 319.795416][ T1219] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 319.810341][T12016] bond3: (slave sit2): Error -95 calling set_mac_address [ 319.810537][T12021] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1603'. [ 319.957901][ T1219] usb 6-1: device descriptor read/64, error -71 [ 320.228738][ T1219] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 320.369598][ T1219] usb 6-1: device descriptor read/64, error -71 [ 320.488753][ T1219] usb usb6-port1: attempt power cycle [ 320.801173][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.810231][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.857034][ T1219] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 320.879021][ T1219] usb 6-1: device descriptor read/8, error -71 [ 321.043644][T12036] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 321.138586][ T1219] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 321.171433][ T1219] usb 6-1: device descriptor read/8, error -71 [ 321.290313][ T1219] usb usb6-port1: unable to enumerate USB device [ 321.446579][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 321.533879][ T29] audit: type=1400 audit(310.102:2660): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 321.867056][ T9] libceph: connect (1)[c::]:6789 error -101 [ 321.876193][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 321.895334][ T29] audit: type=1400 audit(310.434:2661): avc: denied { write } for pid=12051 comm="syz.3.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 321.916081][ T29] audit: type=1400 audit(310.434:2662): avc: denied { read } for pid=12051 comm="syz.3.1614" path="socket:[34827]" dev="sockfs" ino=34827 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 321.919232][T12054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1613'. [ 321.940490][T12048] ceph: No mds server is up or the cluster is laggy [ 322.432551][T12061] syz.3.1616 (12061): drop_caches: 2 [ 322.584977][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.601333][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.681243][T12070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.694703][T12070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.024158][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.030976][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.267149][T12083] netlink: 'syz.2.1624': attribute type 13 has an invalid length. [ 323.940193][T12088] netlink: 'syz.5.1625': attribute type 2 has an invalid length. [ 325.313544][ T29] audit: type=1400 audit(313.592:2663): avc: denied { setopt } for pid=12095 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 325.391951][T12100] sctp: [Deprecated]: syz.3.1627 (pid 12100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.391951][T12100] Use struct sctp_sack_info instead [ 325.584897][T12096] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 325.614590][T12102] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.712840][T12113] net_ratelimit: 120 callbacks suppressed [ 325.712854][T12113] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 325.864891][ T29] audit: type=1326 audit(314.109:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="syz.0.1635" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 325.911319][ T29] audit: type=1326 audit(314.109:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="syz.0.1635" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 325.943832][ T29] audit: type=1326 audit(314.109:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="syz.0.1635" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 325.982948][ T29] audit: type=1326 audit(314.109:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="syz.0.1635" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 326.033051][ T29] audit: type=1326 audit(314.109:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="\" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 326.063933][ T5730] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 326.105571][ T29] audit: type=1326 audit(314.109:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="\" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 326.145373][ T29] audit: type=1326 audit(314.109:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="syz.0.1635" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 326.208218][ T29] audit: type=1326 audit(314.109:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="syz.0.1635" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 326.261389][ T29] audit: type=1326 audit(314.109:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12118 comm="\" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1500d9ce59 code=0x7ffc0000 [ 326.300686][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 326.310613][ T5730] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 326.331792][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 326.351575][ T5730] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 326.371950][ T5730] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 326.392360][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.412841][ T5730] usb 6-1: config 0 descriptor?? [ 326.486527][T12126] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1638'. [ 326.742952][ T5730] hdpvr 6-1:0.0: firmware version 0xd dated ­";W| [ 326.762020][T12132] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 326.791189][T12132] overlayfs: failed to set xattr on upper [ 326.814777][T12132] overlayfs: ...falling back to redirect_dir=nofollow. [ 326.864705][T12132] overlayfs: ...falling back to metacopy=off. [ 327.899048][ T5726] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 327.921011][T12132] overlayfs: ...falling back to index=off. [ 327.947375][T12136] netlink: 'syz.4.1641': attribute type 10 has an invalid length. [ 327.966436][T12136] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 327.983144][T12132] overlayfs: ...falling back to uuid=null. [ 327.986066][T12136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.022805][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.049543][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.060153][ T5726] usb 4-1: Using ep0 maxpacket: 16 [ 328.083999][ T5726] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 328.087835][ T5730] hdpvr 6-1:0.0: Could not setup controls [ 328.107141][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 328.118487][ T5730] hdpvr 6-1:0.0: registering videodev failed [ 328.131754][ T5730] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 328.140615][T12136] vim2m vim2m.0: vidioc_s_fmt queue busy [ 328.153804][ T5730] usb 6-1: USB disconnect, device number 29 [ 328.158776][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.170652][ T5726] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 328.190362][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.198400][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.209233][ T5726] usb 4-1: Product: syz [ 328.220197][ T5726] usb 4-1: Manufacturer: syz [ 328.231099][ T5726] usb 4-1: SerialNumber: syz [ 328.243971][ T5726] usb 4-1: config 0 descriptor?? [ 328.259421][ T5726] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 328.279973][ T5726] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 328.938198][ T5726] em28xx 4-1:0.0: chip ID is em2874 [ 329.236520][ T5726] usb 4-1: USB disconnect, device number 67 [ 329.335675][ T5726] em28xx 4-1:0.0: Disconnecting em28xx [ 329.348808][ T5726] em28xx 4-1:0.0: Freeing device [ 330.827870][T12181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1656'. [ 331.060580][ T5726] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 331.136545][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 331.201422][ T5726] usb 6-1: device descriptor read/64, error -71 [ 331.299036][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 331.312339][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 331.332461][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.341144][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1660'. [ 331.345237][ T10] usb 4-1: Product: syz [ 331.350593][T12190] openvswitch: netlink: EtherType 0 is less than min 600 [ 331.355113][ T10] usb 4-1: Manufacturer: syz [ 331.367463][ T10] usb 4-1: SerialNumber: syz [ 331.431318][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 331.431332][ T29] audit: type=1400 audit(319.242:2804): avc: denied { map } for pid=12193 comm="syz.2.1662" path="pipe:[34794]" dev="pipefs" ino=34794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 331.461734][ T5726] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 331.613916][ T5726] usb 6-1: device descriptor read/64, error -71 [ 331.765270][ T5726] usb usb6-port1: attempt power cycle [ 331.797158][ T5730] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 332.872207][T12215] fuse: fd is not a fuse device [ 332.877281][ T10] usb 4-1: unit 0 not found! [ 332.956138][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 333.252504][ T5730] usb 1-1: config 0 has an invalid interface descriptor of length 8, skipping [ 333.259621][ T10] usb 4-1: USB disconnect, device number 68 [ 333.302827][ T5726] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 333.303597][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 333.324801][ T5726] usb 6-1: device descriptor read/8, error -71 [ 333.335371][ T5730] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.349219][ T5730] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.361541][ T5730] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 333.366979][T12224] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.371315][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.394018][ T5730] usb 1-1: config 0 descriptor?? [ 333.405936][T12226] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 333.446375][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 333.456282][T12228] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1673'. [ 333.551789][T12234] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 333.584487][ T5726] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 333.629803][ T5726] usb 6-1: device descriptor read/8, error -71 [ 333.652490][ T29] audit: type=1400 audit(321.291:2805): avc: denied { ioctl } for pid=12223 comm="syz.4.1671" path="socket:[35847]" dev="sockfs" ino=35847 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 333.758173][ T5726] usb usb6-port1: unable to enumerate USB device [ 333.978627][T12245] SET target dimension over the limit! [ 334.293342][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1680'. [ 334.605007][T12253] openvswitch: netlink: Flow key attr not present in new flow. [ 334.821776][ T5726] usb 1-1: USB disconnect, device number 46 [ 334.966323][T12264] can0: slcan on ttyS3. [ 336.467606][ T5984] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 336.832539][ T5984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.934395][ T5984] usb 4-1: not running at top speed; connect to a high speed hub [ 336.969530][ T5984] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 234, changing to 4 [ 336.999915][ T5984] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 337.025841][ T5984] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 337.055621][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.075989][ T5984] usb 4-1: Product: syz [ 337.087316][ T5984] usb 4-1: Manufacturer: syz [ 337.103573][ T5984] usb 4-1: SerialNumber: syz [ 337.169033][T12298] IPVS: Unknown mcast interface: c/tty/drivers [ 337.204365][ T29] audit: type=1400 audit(324.578:2806): avc: denied { write } for pid=12273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.255055][T12302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 337.269096][T12302] block device autoloading is deprecated and will be removed. [ 337.299524][ T29] audit: type=1400 audit(324.652:2807): avc: denied { write } for pid=12305 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.372603][T12294] md: could not open device unknown-block(0,0). [ 337.385191][T12294] md: md_import_device returned -6 [ 337.396427][T12255] netlink: 'syz.3.1682': attribute type 21 has an invalid length. [ 337.414174][ T5984] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.424703][ T5984] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 337.430952][T12254] can0 (unregistered): slcan off ttyS3. [ 337.436519][ T5984] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.447486][ T5984] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 337.466034][ T5984] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.503852][ T5984] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 337.529069][ T5984] usb 4-1: USB disconnect, device number 69 [ 337.542740][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 337.606891][ T29] audit: type=1400 audit(324.947:2808): avc: denied { write } for pid=12311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.613870][ T5730] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 337.665051][ T29] audit: type=1400 audit(324.993:2809): avc: denied { write } for pid=12322 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.809993][ T5730] usb 6-1: Using ep0 maxpacket: 8 [ 337.825623][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 337.840243][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.850063][ T5730] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.860470][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 337.871825][ T5730] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 337.898804][ T29] audit: type=1400 audit(325.206:2810): avc: denied { write } for pid=12324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.925149][ T5730] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 337.956159][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.968607][ T29] audit: type=1400 audit(325.270:2811): avc: denied { accept } for pid=12337 comm="syz.4.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 337.995441][ T5730] usb 6-1: config 0 descriptor?? [ 338.005130][T12302] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 338.041431][ T29] audit: type=1400 audit(325.289:2812): avc: denied { write } for pid=12340 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.120116][T12346] can0: slcan on ttyS3. [ 340.062384][T12345] can0 (unregistered): slcan off ttyS3. [ 340.257014][ T5620] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 340.284924][ T29] audit: type=1400 audit(327.412:2813): avc: denied { create } for pid=12361 comm="syz.3.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 340.469192][T12373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.484512][T12373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.520379][T12357] infiniband syz2: set down [ 340.529743][T12357] infiniband syz2: added ipvlan0 [ 340.541179][T12357] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 340.559944][T12357] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 340.577432][T12357] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 340.602620][T12357] RDS/IB: syz2: added [ 340.604869][ T29] audit: type=1400 audit(327.717:2814): avc: denied { write } for pid=12360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.607402][T12357] smc: adding ib device syz2 with port count 1 [ 340.636141][T12357] smc: ib device syz2 port 1 has no pnetid [ 340.690123][ T5730] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 340.701791][ T29] audit: type=1400 audit(327.800:2815): avc: denied { write } for pid=12385 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.874291][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 340.884366][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.901366][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.928410][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 340.941683][ T5730] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 340.952482][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.968083][ T5730] usb 4-1: config 0 descriptor?? [ 341.203033][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.213488][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.220342][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.227559][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.234649][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.241787][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.248807][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.256225][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.263054][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.270538][ T5730] kone 0003:1E7D:2CED.0012: unknown main item tag 0x0 [ 341.279169][ T5730] kone 0003:1E7D:2CED.0012: hidraw0: USB HID v0.09 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 341.564791][ T5984] usb 4-1: USB disconnect, device number 70 [ 341.639494][T12421] can0: slcan on ttyS3. [ 342.024372][T12420] can0 (unregistered): slcan off ttyS3. [ 342.067430][ T5730] usb 6-1: USB disconnect, device number 34 [ 342.433115][T12449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.443117][T12449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.671218][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 342.671244][ T29] audit: type=1400 audit(329.618:2860): avc: denied { write } for pid=12450 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.814549][ T5730] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 342.940725][ T29] audit: type=1400 audit(329.868:2861): avc: denied { write } for pid=12454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.999672][ T1219] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 343.094847][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 343.108461][ T29] audit: type=1400 audit(330.025:2862): avc: denied { write } for pid=12470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.110342][ T5730] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 343.181610][ T1219] usb 4-1: Using ep0 maxpacket: 32 [ 343.199130][ T1219] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.216488][ T5730] usb 6-1: config 0 has no interface number 0 [ 343.228160][ T5730] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 343.241998][ T5730] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 343.254305][ T1219] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 343.266028][ T5730] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 343.287246][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.297004][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.332205][ T5730] usb 6-1: Product: syz [ 343.338024][ T1219] usb 4-1: Product: syz [ 343.345533][ T5730] usb 6-1: Manufacturer: syz [ 343.351698][ T1219] usb 4-1: Manufacturer: syz [ 343.356380][ T5730] usb 6-1: SerialNumber: syz [ 343.361014][ T1219] usb 4-1: SerialNumber: syz [ 343.381847][ T5730] usb 6-1: config 0 descriptor?? [ 343.386991][ T1219] usb 4-1: config 0 descriptor?? [ 343.397023][T12437] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 343.405552][ T1219] cdc_ether 4-1:0.0: missing cdc header descriptor [ 343.412319][T12437] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 343.419999][ T1219] usb 4-1: unsupported MDLM descriptors [ 343.590490][T12479] fuse: fd is not a fuse device [ 343.653574][T12437] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 343.659241][ T1219] usb 4-1: USB disconnect, device number 71 [ 343.661334][T12437] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 343.720547][T12486] libceph: resolve '0' (ret=-3): failed [ 343.810823][T12492] xt_hl: Unknown Hop Limit match mode: 206 [ 343.859010][T12489] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 343.868008][T12489] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 343.882856][T12489] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 343.892732][T12489] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 343.900238][ T5730] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 343.910483][T12489] tipc: Resetting bearer [ 343.916519][T12489] tipc: Resetting bearer [ 343.925054][T12489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.024833][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1728'. [ 344.038680][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1728'. [ 344.180076][T11402] tipc: Resetting bearer [ 344.788577][T12508] can: request_module (can-proto-0) failed. [ 345.181425][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 345.646675][ T29] audit: type=1400 audit(332.360:2863): avc: denied { map } for pid=12516 comm="syz.4.1733" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 345.685912][T12517] bridge_slave_0: left allmulticast mode [ 345.692114][T12517] bridge_slave_0: left promiscuous mode [ 345.698704][T12517] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.709923][T12517] bridge_slave_1: left allmulticast mode [ 345.717035][T12517] bridge_slave_1: left promiscuous mode [ 345.723169][T12517] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.736230][T12517] bond0: (slave bond_slave_0): Releasing backup interface [ 345.750009][T12517] bond_slave_0: left allmulticast mode [ 345.771483][T12517] bond0: (slave bond_slave_1): Releasing backup interface [ 345.779825][T12517] bond_slave_1: left allmulticast mode [ 345.806172][T12517] team0: Port device team_slave_0 removed [ 345.816623][T12517] team0: Port device team_slave_1 removed [ 345.832790][T12517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.845774][T12517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.855881][T12517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.864880][T12517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.875701][T12517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 345.875963][T12535] nvme_fabrics: unknown parameter or missing value 'system_u:object_r:policy_config_t:s0' in ctrl creation request [ 345.914438][T12532] can0: slcan on ttyS3. [ 345.975868][ T29] audit: type=1400 audit(332.665:2864): avc: denied { map } for pid=12534 comm="syz.3.1739" path="/dev/ublkc4" dev="devtmpfs" ino=3765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.999551][T12539] ublk4: read batch cmd buffer failed [ 346.010614][T12539] ublk4: read batch cmd buffer failed [ 346.250008][ T5730] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 346.265578][ T5730] asix 6-1:0.34: probe with driver asix failed with error -71 [ 346.278321][ T5730] usb 6-1: USB disconnect, device number 35 [ 346.355980][T12528] can0 (unregistered): slcan off ttyS3. [ 346.550168][ T24] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 346.680378][ T1219] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 346.713728][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 346.724755][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 346.733820][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.743088][ T24] usb 4-1: config 0 descriptor?? [ 346.856357][ T1219] usb 1-1: No LPM exit latency info found, disabling LPM. [ 346.865115][ T1219] usb 1-1: config 16 has an invalid interface number: 3 but max is 2 [ 346.873325][ T1219] usb 1-1: config 16 has an invalid interface number: 62 but max is 2 [ 346.882421][ T1219] usb 1-1: config 16 has an invalid interface number: 107 but max is 2 [ 346.892838][ T1219] usb 1-1: config 16 has no interface number 0 [ 346.899138][ T1219] usb 1-1: config 16 has no interface number 1 [ 346.905342][ T1219] usb 1-1: config 16 has no interface number 2 [ 346.911651][ T1219] usb 1-1: config 16 interface 3 has no altsetting 0 [ 346.918454][ T1219] usb 1-1: config 16 interface 62 has no altsetting 0 [ 346.925322][ T1219] usb 1-1: config 16 interface 107 has no altsetting 0 [ 346.934529][ T1219] usb 1-1: string descriptor 0 read error: -22 [ 346.940874][ T1219] usb 1-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 346.949973][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.973619][T12541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.982658][T12541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.993975][ T24] ath6kl: Failed to submit usb control message: -71 [ 347.010690][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 347.052317][ T24] ath6kl: Unable to send get target info: -71 [ 347.063696][ T24] ath6kl: Failed to init ath6kl core: -71 [ 347.070974][ T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 347.084769][ T24] usb 4-1: USB disconnect, device number 72 [ 347.210621][ T5984] usb 1-1: USB disconnect, device number 47 [ 347.401174][T12566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45335 sclass=netlink_route_socket pid=12566 comm=syz.2.1748 [ 347.480308][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 347.676678][ T24] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 347.828523][ T5730] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 347.851464][ T24] usb 6-1: config 0 has an invalid interface number: 13 but max is 0 [ 347.859564][ T24] usb 6-1: config 0 has no interface number 0 [ 347.866191][ T24] usb 6-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 347.877302][ T24] usb 6-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 347.890745][ T24] usb 6-1: config 0 interface 13 has no altsetting 0 [ 347.899217][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 347.908415][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.916608][ T24] usb 6-1: Product: syz [ 347.920771][ T24] usb 6-1: Manufacturer: syz [ 347.925366][ T24] usb 6-1: SerialNumber: syz [ 347.931111][ T24] usb 6-1: config 0 descriptor?? [ 347.937514][ T24] ftdi_sio 6-1:0.13: FTDI USB Serial Device converter detected [ 347.945510][ T24] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 348.013562][ T5730] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 348.024632][ T5730] usb 4-1: config 0 interface 0 has no altsetting 0 [ 348.032691][ T5730] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.041811][ T42] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 348.049398][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 348.057637][ T5730] usb 4-1: Product: syz [ 348.061827][ T5730] usb 4-1: Manufacturer: syz [ 348.066566][ T5730] usb 4-1: SerialNumber: syz [ 348.072252][ T5730] usb 4-1: config 0 descriptor?? [ 348.080598][ T5730] usb 4-1: selecting invalid altsetting 0 [ 348.218294][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 348.224567][ T42] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 348.236244][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 348.248607][ T42] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 348.257687][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.265736][ T42] usb 1-1: Product: syz [ 348.269901][ T42] usb 1-1: Manufacturer: syz [ 348.274524][ T42] usb 1-1: SerialNumber: syz [ 348.280140][ T42] usb 1-1: config 0 descriptor?? [ 348.286937][ T42] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 348.296216][ T42] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 348.336750][ T29] audit: type=1400 audit(334.844:2865): avc: denied { read } for pid=12570 comm="syz.3.1750" name="usbmon0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 348.369149][ T10] usb 4-1: USB disconnect, device number 73 [ 348.378618][ T29] audit: type=1400 audit(334.844:2866): avc: denied { open } for pid=12570 comm="syz.3.1750" path="/dev/usbmon0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 348.419929][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 348.428862][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1752'. [ 348.895836][T12524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.912004][ T5984] usb 6-1: USB disconnect, device number 36 [ 348.944230][T12573] binder: 12572:12573 unknown command 0 [ 348.951624][ T5984] ftdi_sio 6-1:0.13: device disconnected [ 348.982893][T12573] binder: 12572:12573 ioctl c0306201 200000000080 returned -22 [ 349.029739][ T42] em28xx 1-1:0.0: unknown em28xx chip ID (209) [ 349.060939][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.069998][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.138416][T12605] netlink: 'syz.3.1758': attribute type 5 has an invalid length. [ 349.162456][ T29] audit: type=1400 audit(335.601:2867): avc: denied { write } for pid=12586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.233277][ T29] audit: type=1400 audit(335.675:2868): avc: denied { write } for pid=12610 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.246264][T12612] netlink: 163868 bytes leftover after parsing attributes in process `syz.3.1759'. [ 349.267065][T12612] openvswitch: netlink: Message has 512 unknown bytes. [ 349.274205][ T42] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 349.283437][ T42] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 349.292427][ T42] em28xx 1-1:0.0: No AC97 audio processor [ 349.300303][ T42] usb 1-1: USB disconnect, device number 48 [ 349.311801][ T42] em28xx 1-1:0.0: Disconnecting em28xx [ 349.323649][ T42] em28xx 1-1:0.0: Freeing device [ 349.438849][ T29] audit: type=1400 audit(335.868:2869): avc: denied { write } for pid=12614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.489475][ T29] audit: type=1400 audit(335.915:2870): avc: denied { write } for pid=12625 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.662658][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 349.678212][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 349.695029][ T29] audit: type=1400 audit(336.109:2871): avc: denied { ioctl } for pid=12633 comm="syz.4.1763" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 349.795029][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.813821][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.908220][ T42] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 349.971914][T12646] netlink: 528 bytes leftover after parsing attributes in process `syz.2.1767'. [ 349.981657][T12646] netlink: 'syz.2.1767': attribute type 1 has an invalid length. [ 350.041320][T12651] syz_tun: left allmulticast mode [ 350.046368][T12651] syz_tun: left promiscuous mode [ 350.051729][T12651] bridge0: port 4(syz_tun) entered disabled state [ 350.061676][T12651] dummy0: left allmulticast mode [ 350.066731][T12651] dummy0: left promiscuous mode [ 350.073457][T12651] bridge0: port 3(dummy0) entered disabled state [ 350.084426][T12651] bridge_slave_0: left allmulticast mode [ 350.090075][T12651] bridge_slave_0: left promiscuous mode [ 350.096241][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 350.101377][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.110249][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 350.114769][T12651] bridge_slave_1: left allmulticast mode [ 350.124192][T12651] bridge_slave_1: left promiscuous mode [ 350.130130][ T42] usb 6-1: config 6 has an invalid interface number: 96 but max is 1 [ 350.130239][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.138662][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 350.153845][ T42] usb 6-1: config 6 has an invalid interface number: 225 but max is 1 [ 350.162262][ T42] usb 6-1: config 6 has no interface number 0 [ 350.169359][ T42] usb 6-1: config 6 has no interface number 1 [ 350.169453][T12651] bond0: (slave bond_slave_1): Releasing backup interface [ 350.175514][ T42] usb 6-1: config 6 interface 96 has no altsetting 0 [ 350.175534][ T42] usb 6-1: config 6 interface 225 has no altsetting 0 [ 350.198947][ T42] usb 6-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=72.cc [ 350.210040][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.218323][ T42] usb 6-1: Product: syz [ 350.224042][T12651] team0: Port device team_slave_0 removed [ 350.238424][ T42] usb 6-1: Manufacturer: syz [ 350.243860][ T42] usb 6-1: SerialNumber: syz [ 350.254100][T12651] team0: Port device team_slave_1 removed [ 350.267939][T12651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.275380][T12651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.283799][T12651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.291294][T12651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.300137][T12651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 350.332906][T12652] team0: Port device xfrm0 added [ 350.352398][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 350.360629][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.370133][ T24] usb 1-1: config 5 has an invalid interface number: 34 but max is 0 [ 350.380202][ T24] usb 1-1: config 5 has no interface number 0 [ 350.386836][ T24] usb 1-1: config 5 interface 34 has no altsetting 0 [ 350.395326][ T24] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=65.57 [ 350.408618][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.417638][ T24] usb 1-1: Product: syz [ 350.421842][ T24] usb 1-1: Manufacturer: syz [ 350.430473][ T24] usb 1-1: SerialNumber: syz [ 350.484868][T12632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.500938][T12632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.521212][ T42] usb 6-1: USB disconnect, device number 37 [ 350.557143][T12664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.567847][T12664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.589573][T12664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.598897][T12664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.613275][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1775'. [ 350.630739][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1775'. [ 350.677784][ T5984] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 350.729205][T12669] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 350.740173][T12669] block device autoloading is deprecated and will be removed. [ 350.831647][ T24] usb 1-1: No union descriptors [ 350.838823][ T24] usb 1-1: USB disconnect, device number 49 [ 350.851926][ T5984] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 350.871415][ T5984] usb 4-1: config 0 has no interface number 0 [ 350.886986][ T5984] usb 4-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 350.907778][ T5984] usb 4-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 350.939657][ T5984] usb 4-1: config 0 interface 13 has no altsetting 0 [ 350.953355][ T5984] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 350.966951][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.981017][ T5984] usb 4-1: Product: syz [ 350.988361][ T5984] usb 4-1: Manufacturer: syz [ 351.000181][ T5984] usb 4-1: SerialNumber: syz [ 351.018754][ T5984] usb 4-1: config 0 descriptor?? [ 351.036108][ T5984] ftdi_sio 4-1:0.13: FTDI USB Serial Device converter detected [ 351.045792][ T5984] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 351.276257][ T1219] usb 4-1: USB disconnect, device number 74 [ 351.291517][ T1219] ftdi_sio 4-1:0.13: device disconnected [ 352.128765][ T24] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 352.150339][ T1219] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 352.213810][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 352.225494][T12708] batadv0: entered promiscuous mode [ 352.230775][T12708] macsec1: entered promiscuous mode [ 352.236059][T12708] macsec1: entered allmulticast mode [ 352.241359][T12708] batadv0: entered allmulticast mode [ 352.247311][T12708] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 352.367001][T12708] batadv0: left allmulticast mode [ 352.372152][T12708] batadv0: left promiscuous mode [ 352.590526][T12710] netlink: 'syz.0.1788': attribute type 3 has an invalid length. [ 352.617205][ T1219] usb 4-1: config 127 has an invalid interface number: 119 but max is 0 [ 352.625712][ T1219] usb 4-1: config 127 has no interface number 0 [ 352.632195][ T1219] usb 4-1: config 127 interface 119 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 352.644985][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 352.658114][ T1219] usb 4-1: New USB device found, idVendor=0499, idProduct=1050, bcdDevice=7b.df [ 352.672057][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.683814][ T24] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 352.697359][ T1219] usb 4-1: Product: syz [ 352.703698][ T1219] usb 4-1: Manufacturer: syz [ 352.708504][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.716718][ T1219] usb 4-1: SerialNumber: syz [ 352.721372][ T24] usb 6-1: Product: syz [ 352.728903][ T24] usb 6-1: Manufacturer: syz [ 352.734773][ T24] usb 6-1: SerialNumber: syz [ 352.951236][ T1219] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 352.987347][ T1219] snd-usb-audio 4-1:127.119: probe with driver snd-usb-audio failed with error -2 [ 353.004060][ T1219] usb 4-1: USB disconnect, device number 75 [ 353.020249][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:127.119/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 353.197661][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 353.886291][T12732] xt_l2tp: unknown flags: 17 [ 354.197817][ T1219] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 354.385657][ T1219] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 354.437642][ T1219] usb 1-1: config 0 has no interface number 0 [ 354.471597][ T1219] usb 1-1: too many endpoints for config 0 interface 13 altsetting 233: 211, using maximum allowed: 30 [ 354.526145][ T1219] usb 1-1: config 0 interface 13 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 211 [ 354.551622][ T1219] usb 1-1: config 0 interface 13 has no altsetting 0 [ 354.613665][ T1219] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 354.639737][T12745] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 354.651560][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.679294][ T1219] usb 1-1: Product: syz [ 354.709215][ T1219] usb 1-1: Manufacturer: syz [ 354.722962][ T1219] usb 1-1: SerialNumber: syz [ 354.738632][ T1219] usb 1-1: config 0 descriptor?? [ 354.762091][T12745] syzkaller0: entered promiscuous mode [ 354.767907][T12745] syzkaller0: entered allmulticast mode [ 354.828670][T12745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.849967][T12745] bond1: (slave bond2): making interface the new active one [ 354.859352][ T1219] ftdi_sio 1-1:0.13: FTDI USB Serial Device converter detected [ 354.871825][T12745] bond1: (slave bond2): Enslaving as an active interface with an up link [ 354.882047][ T1219] ftdi_sio ttyUSB0: unknown device type: 0x223 [ 354.897071][T12748] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 355.810489][ T24] usb 6-1: USB disconnect, device number 38 [ 356.033701][ T24] usblp0: removed [ 356.037502][ T1219] usb 1-1: USB disconnect, device number 50 [ 356.067064][ T1219] ftdi_sio 1-1:0.13: device disconnected [ 356.713414][ T29] audit: type=1400 audit(342.580:2872): avc: denied { write } for pid=12764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.780897][ T29] audit: type=1400 audit(342.645:2873): avc: denied { write } for pid=12789 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.151852][ T1219] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 357.274253][ T10] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 357.280668][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.301804][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.407295][ T29] audit: type=1400 audit(343.060:2874): avc: denied { bind } for pid=12798 comm="syz.4.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.535104][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.547876][ T10] usb 1-1: config 0 has no interface number 0 [ 357.558815][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 357.579112][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.596750][ T10] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.618756][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 357.621419][ T1219] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 357.636898][ T1219] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 357.652335][ T10] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 357.662595][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.673638][ T10] usb 1-1: config 0 descriptor?? [ 357.681497][ T1219] usb 4-1: config 0 interface 0 has no altsetting 0 [ 357.696185][ T1219] usb 4-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 357.715738][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.738464][ T1219] usb 4-1: config 0 descriptor?? [ 357.765344][ T29] audit: type=1400 audit(343.559:2875): avc: denied { connect } for pid=12808 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.785399][ T29] audit: type=1400 audit(343.577:2876): avc: denied { shutdown } for pid=12808 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.811112][ T29] audit: type=1400 audit(343.596:2877): avc: denied { watch watch_reads } for pid=12808 comm="syz.2.1812" path="pipe:[37472]" dev="pipefs" ino=37472 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 358.105074][T12815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1814'. [ 358.118157][T12815] batadv0: entered promiscuous mode [ 358.123557][T12815] macsec1: entered promiscuous mode [ 358.128960][T12815] macsec1: entered allmulticast mode [ 358.134416][T12815] batadv0: entered allmulticast mode [ 358.140635][T12815] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 358.148445][T12815] batadv0: left allmulticast mode [ 358.153780][T12815] batadv0: left promiscuous mode [ 358.192230][ T1219] logitech-hidpp-device 0003:046D:C343.0013: collection stack underflow [ 358.203255][ T1219] logitech-hidpp-device 0003:046D:C343.0013: item 0 2 0 12 parsing failed [ 358.215748][ T1219] logitech-hidpp-device 0003:046D:C343.0013: hidpp_probe:parse failed [ 358.234340][ T1219] logitech-hidpp-device 0003:046D:C343.0013: probe with driver logitech-hidpp-device failed with error -22 [ 358.463839][ T29] audit: type=1400 audit(344.196:2878): avc: denied { shutdown } for pid=12821 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.148249][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 359.288509][ T24] usb 6-1: device descriptor read/64, error -71 [ 359.503773][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 359.526337][ T1219] usb 4-1: USB disconnect, device number 76 [ 359.559261][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 359.568104][T12838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1822'. [ 359.578725][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1822'. [ 359.700102][ T24] usb 6-1: device descriptor read/64, error -71 [ 359.819415][ T24] usb usb6-port1: attempt power cycle [ 359.938370][ T1219] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 360.100850][ T1219] usb 4-1: Using ep0 maxpacket: 32 [ 360.107141][ T1219] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 360.116512][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.126405][ T1219] usb 4-1: config 0 descriptor?? [ 360.137195][ T1219] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 360.193820][ T10] usbhid 1-1:0.1: can't add hid device: -71 [ 360.198327][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 360.213375][ T10] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 360.239824][ T10] usb 1-1: USB disconnect, device number 51 [ 360.253336][ T24] usb 6-1: device descriptor read/8, error -71 [ 360.345548][ T29] audit: type=1400 audit(345.931:2879): avc: denied { nosuid_transition } for pid=12846 comm="syz.0.1826" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 360.380742][ T29] audit: type=1400 audit(345.931:2880): avc: denied { transition } for pid=12846 comm="syz.0.1826" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 360.480038][ T29] audit: type=1400 audit(345.931:2881): avc: denied { entrypoint } for pid=12846 comm="syz.0.1826" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=192 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 360.591694][ T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 360.623867][ T24] usb 6-1: device descriptor read/8, error -71 [ 360.740566][ T24] usb usb6-port1: unable to enumerate USB device [ 360.818818][ T1219] gspca_vc032x: reg_w err -71 [ 360.823720][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.838989][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.858831][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.881049][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.900509][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.921504][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.941312][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.957697][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.974159][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.986295][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.002731][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.017256][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.029263][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.039796][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.050684][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.061144][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.072857][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.085607][ T1219] gspca_vc032x: I2c Bus Busy Wait 00 [ 361.096389][ T1219] gspca_vc032x: Unknown sensor... [ 361.105946][ T1219] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 361.130099][ T1219] usb 4-1: USB disconnect, device number 77 [ 361.219402][T12863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1831'. [ 361.337147][ T1219] hid_parser_main: 34 callbacks suppressed [ 361.337163][ T1219] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 361.376700][ T1219] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.381890][T12872] FAULT_INJECTION: forcing a failure. [ 361.381890][T12872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.498854][T12872] CPU: 0 UID: 0 PID: 12872 Comm: syz.0.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.498883][T12872] Tainted: [L]=SOFTLOCKUP [ 361.498889][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.498899][T12872] Call Trace: [ 361.498904][T12872] [ 361.498910][T12872] dump_stack_lvl+0x100/0x190 [ 361.498935][T12872] should_fail_ex.cold+0x5/0xa [ 361.498957][T12872] _copy_from_user+0x2e/0xd0 [ 361.498980][T12872] do_tcp_setsockopt+0x73e/0x2b50 [ 361.499004][T12872] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 361.499025][T12872] ? proc_fail_nth_write+0x9f/0x220 [ 361.499048][T12872] ? __pfx_sock_has_perm+0x10/0x10 [ 361.499069][T12872] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 361.499102][T12872] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 361.499128][T12872] ? rcu_is_watching+0x12/0xc0 [ 361.499150][T12872] ? rcu_is_watching+0x12/0xc0 [ 361.499171][T12872] ? __fget_files+0x215/0x3d0 [ 361.499194][T12872] ? rcu_is_watching+0x12/0xc0 [ 361.499217][T12872] tcp_setsockopt+0xe2/0x100 [ 361.499240][T12872] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 361.499267][T12872] do_sock_setsockopt+0xf3/0x1d0 [ 361.499292][T12872] __sys_setsockopt+0x195/0x220 [ 361.499314][T12872] __x64_sys_setsockopt+0xbd/0x160 [ 361.499334][T12872] ? trace_irq_enable.constprop.0+0x122/0x160 [ 361.499357][T12872] do_syscall_64+0x115/0x870 [ 361.499373][T12872] ? clear_bhb_loop+0x40/0x90 [ 361.499393][T12872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.499410][T12872] RIP: 0033:0x7f1500d9ce59 [ 361.499423][T12872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.499439][T12872] RSP: 002b:00007f1501d34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.499456][T12872] RAX: ffffffffffffffda RBX: 00007f1501015fa0 RCX: 00007f1500d9ce59 [ 361.499468][T12872] RDX: 2000000000000020 RSI: 0000000000000006 RDI: 0000000000000003 [ 361.499478][T12872] RBP: 00007f1501d34090 R08: 000000001959cc36 R09: 0000000000000000 [ 361.499489][T12872] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 361.499499][T12872] R13: 00007f1501016038 R14: 00007f1501015fa0 R15: 00007ffc9d4f0458 [ 361.499515][T12872] [ 361.613083][T12882] tmpfs: Unknown parameter ']k`ԅZ:R ~(uhY ?d ٓ|D(? [ 361.613083][T12882] f&OVNe;ֵ y@g@ /žl}}OxY!'|OF)>qCwӈtޙM ߶$%"*"hSXlxZ! $S\1*85ڑ_+~R^p-N3Aʓ• L{Ҝ' [ 361.873761][T12892] tipc: Enabled bearer , priority 10 [ 361.906407][T12894] syzkaller0: entered promiscuous mode [ 361.912595][T12894] syzkaller0: entered allmulticast mode [ 361.919562][T12894] tipc: Resetting bearer [ 361.996116][T12901] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 362.037138][T12901] CIFS mount error: No usable UNC path provided in device string! [ 362.037138][T12901] [ 362.061123][T12901] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 362.093943][ T1219] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 362.342437][ T1219] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 362.359221][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.381988][ T1219] usb 1-1: Product: syz [ 362.391837][ T1219] usb 1-1: Manufacturer: syz [ 362.409054][ T1219] usb 1-1: SerialNumber: syz [ 362.431382][ T1219] usb 1-1: config 0 descriptor?? [ 362.465816][T12922] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1852'. [ 362.594206][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1853'. [ 362.633319][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 362.633332][ T29] audit: type=1400 audit(348.045:2885): avc: denied { create } for pid=12927 comm="syz.3.1855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 362.635701][T12925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1853'. [ 362.827898][T12938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 362.902499][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.925701][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.353139][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.228123][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.392290][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.440991][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.473469][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.507227][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.611906][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1870'. [ 364.626240][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'. [ 364.694046][ T1219] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 364.724152][ T1219] f81604 1-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 364.741329][ T1219] f81604 1-1:0.0: probe with driver f81604 failed with error -110 [ 364.757626][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.779394][T12982] 8021q: VLANs not supported on vcan0 [ 364.786123][ T29] audit: type=1400 audit(350.021:2886): avc: denied { getopt } for pid=12981 comm="syz.3.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 364.814656][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.825165][T12980] comedi comedi0: s526: I/O base address not correctly aligned [ 364.874116][ T29] audit: type=1400 audit(350.095:2887): avc: denied { create } for pid=12941 comm="syz.4.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 364.904394][T12982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.930697][T12982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.949191][ T29] audit: type=1400 audit(350.113:2888): avc: denied { sys_admin } for pid=12941 comm="syz.4.1860" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 365.015949][T12982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.043985][T12982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.070816][ T29] audit: type=1400 audit(350.298:2889): avc: denied { read } for pid=12981 comm="syz.3.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.164986][ T1219] usb 1-1: USB disconnect, device number 52 [ 365.305579][T13004] openvswitch: netlink: Actions may not be safe on all matching packets [ 365.893718][ T29] audit: type=1400 audit(351.055:2890): avc: denied { watch } for pid=13023 comm="syz.2.1886" path="/491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 365.969382][ T29] audit: type=1400 audit(351.055:2891): avc: denied { watch_sb watch_reads } for pid=13023 comm="syz.2.1886" path="/491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 366.119221][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.129096][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.231738][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 366.395473][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.406676][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.416831][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 366.426068][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.437742][ T10] usb 6-1: config 0 descriptor?? [ 366.535111][ T1219] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 366.698576][ T1219] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 366.711272][ T1219] usb 4-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 366.720474][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.728532][ T1219] usb 4-1: Product: syz [ 366.732797][ T1219] usb 4-1: Manufacturer: syz [ 366.737417][ T1219] usb 4-1: SerialNumber: syz [ 366.880675][ T10] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 366.888941][ T10] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 366.897679][ T10] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 366.905067][ T10] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 366.912120][ T10] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 366.928710][ T10] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 366.939075][ T10] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 366.949342][ T10] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 366.965035][ T29] audit: type=1400 audit(352.043:2892): avc: denied { read } for pid=13036 comm="syz.3.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 367.225832][ T1219] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 367.238077][ T1219] usb 4-1: USB disconnect, device number 78 [ 367.565409][ T29] audit: type=1400 audit(352.421:2893): avc: denied { write } for pid=13049 comm="syz.4.1896" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 367.638614][ T29] audit: type=1400 audit(352.661:2894): avc: denied { read } for pid=13057 comm="syz.2.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 367.674010][ T5730] usb 6-1: USB disconnect, device number 43 [ 367.710103][T13064] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1900'. [ 367.997297][ T1219] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 368.111678][T13070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1902'. [ 368.160992][ T1219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.171975][ T1219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.181855][ T1219] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 368.191293][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.201239][ T1219] usb 4-1: config 0 descriptor?? [ 368.342537][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 368.662599][ T1219] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 368.671836][ T1219] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 368.679457][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1906'. [ 368.690037][ T1219] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0016/input/input32 [ 368.704528][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1906'. [ 368.723203][ T1219] cm6533_jd 0003:0D8C:0022.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 369.057629][T13096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1907'. [ 369.468575][T13098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.486682][T13098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.131205][ T803] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 370.309206][ T803] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 370.321073][ T803] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 370.336014][ T803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.346338][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 370.354864][ T803] usb 1-1: SerialNumber: syz [ 370.362388][T13095] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 370.377548][ T803] usb 1-1: No union descriptors [ 370.454003][ T1219] usb 4-1: reset high-speed USB device number 79 using dummy_hcd [ 370.479549][T13102] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 370.496873][T13102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.598453][ T10] usb 1-1: USB disconnect, device number 53 [ 370.770286][ T803] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 370.906832][T13109] overlayfs: failed to resolve './file1': -2 [ 371.120877][ T803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.132642][ T803] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 371.143065][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.159497][ T803] usb 6-1: config 0 descriptor?? [ 371.179403][ T803] pwc: Askey VC010 type 2 USB webcam detected. [ 371.400981][ T803] pwc: send_video_command error -71 [ 371.410062][ T803] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 371.418047][ T803] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 371.435691][ T803] usb 6-1: USB disconnect, device number 44 [ 371.636914][ T1219] usb 4-1: device descriptor read/64, error -71 [ 371.708297][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'. [ 371.723239][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1917'. [ 371.792868][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 371.803957][T13151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1918'. [ 371.918481][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 371.926113][ T1219] usb 4-1: reset high-speed USB device number 79 using dummy_hcd [ 372.126615][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.137972][ T1219] usb 4-1: device firmware changed [ 372.143246][ T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 372.153364][ T5730] usb 4-1: USB disconnect, device number 79 [ 372.159871][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.270531][ T24] usb 6-1: config 0 descriptor?? [ 372.300401][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 372.611789][ T5730] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 373.038655][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 373.066383][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 373.086509][ T5730] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 373.106095][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 373.123668][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.138630][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 373.155247][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1924'. [ 373.168867][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 373.179086][ T5730] pwc: Logitech QuickCam Zoom USB webcam detected. [ 373.196299][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 373.204083][T13170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.228414][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 373.235911][T13170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.251892][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 373.483315][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 373.483329][ T29] audit: type=1400 audit(358.062:2896): avc: denied { create } for pid=13101 comm="syz.5.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 373.546596][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 373.556581][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 373.570625][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 373.590442][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 373.592633][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 373.617677][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 373.617837][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1927'. [ 373.636950][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1927'. [ 373.637834][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 373.722052][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 373.757790][T13180] autofs4:pid:13180:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 373.779358][ T24] pwc: Registered as video103. [ 373.799424][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 373.855827][ T24] usb 6-1: USB disconnect, device number 45 [ 375.342025][ T5616] Bluetooth: hci4: command 0x0419 tx timeout [ 375.584297][ T5730] pwc: Failed to set LED on/off time (-71) [ 375.602665][ T5730] pwc: send_video_command error -71 [ 375.870024][ T5730] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 375.907845][ T5730] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71 [ 375.931895][T13217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1938'. [ 375.942089][ T5730] usb 4-1: USB disconnect, device number 80 [ 376.226866][T13226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1943'. [ 376.323741][ T29] audit: type=1400 audit(360.684:2897): avc: denied { load_policy } for pid=13227 comm="syz.4.1944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 376.326293][T13228] SELinux: failed to load policy [ 376.362629][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.373117][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.489625][ T5730] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 376.663341][ T5730] usb 6-1: device descriptor read/64, error -71 [ 376.933599][ T5730] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 377.074448][ T5730] usb 6-1: device descriptor read/64, error -71 [ 377.244456][ T5730] usb usb6-port1: attempt power cycle [ 377.705375][T13265] openvswitch: netlink: IP tunnel dst address not specified [ 378.027278][ T5730] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 378.052417][T13264] binder: 13258:13264 ioctl 4018620d 0 returned -22 [ 378.093977][ T5730] usb 6-1: device descriptor read/8, error -71 [ 378.154041][T13268] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1957'. [ 378.225038][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 378.334226][T13274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.368173][T13274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.426094][ T29] audit: type=1400 audit(362.623:2898): avc: denied { ioctl } for pid=13276 comm="syz.0.1960" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 378.452447][ T5730] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 378.511611][ T5730] usb 6-1: device descriptor read/8, error -71 [ 378.594549][ T29] audit: type=1400 audit(362.780:2899): avc: denied { read write } for pid=13295 comm="syz.0.1967" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 378.626206][ T29] audit: type=1400 audit(362.807:2900): avc: denied { open } for pid=13295 comm="syz.0.1967" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 378.650569][ T5730] usb usb6-port1: unable to enumerate USB device [ 378.679303][T13296] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1967'. [ 378.698510][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.718213][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.726131][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.734135][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.741772][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.754559][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.762005][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.769494][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.777365][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.785404][ T5730] hid-generic 0006:0008:0008.0017: unknown main item tag 0x0 [ 378.800079][ T5730] hid-generic 0006:0008:0008.0017: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 378.850905][T13302] fido_id[13302]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 378.936026][T13309] fuse: Bad value for 'group_id' [ 378.944570][T13309] fuse: Bad value for 'group_id' [ 378.952592][T13309] siw: device registration error -23 [ 378.958946][T13309] smc: removing ib device syz2 [ 378.972174][T13309] smbdirect: ib_dev[syz2] removed [ 380.308526][ T29] audit: type=1400 audit(364.368:2901): avc: denied { append } for pid=13332 comm="syz.0.1978" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 380.400730][ T5730] libceph: connect (1)[c::]:6789 error -101 [ 380.408479][ T5730] libceph: mon0 (1)[c::]:6789 connect error [ 380.433260][T13334] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.450354][T13334] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 380.693207][ T5730] libceph: connect (1)[c::]:6789 error -101 [ 380.714676][ T5730] libceph: mon0 (1)[c::]:6789 connect error [ 380.723505][T13330] ceph: No mds server is up or the cluster is laggy [ 380.955940][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.964495][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.704510][T13355] binder: 13354:13355 ioctl c0306201 200000000080 returned -14 [ 381.714537][T13355] binder: 13354:13355 ioctl c0306201 2000000003c0 returned -14 [ 381.839270][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1985'. [ 382.089658][ T10] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 382.251924][T13374] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.1989'. [ 382.261412][T13374] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.1989'. [ 382.271123][T13374] netlink: 640 bytes leftover after parsing attributes in process `syz.2.1989'. [ 382.283587][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 382.292971][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.301320][ T10] usb 1-1: Product: syz [ 382.305604][ T10] usb 1-1: Manufacturer: syz [ 382.310395][ T10] usb 1-1: SerialNumber: syz [ 382.631292][ T5620] Bluetooth: hci4: command 0x0419 tx timeout [ 382.754600][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 382.770545][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 382.784853][T13377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13377 comm=syz.3.1990 [ 382.971625][T13380] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1991'. [ 383.072562][ T29] audit: type=1400 audit(366.916:2902): avc: denied { getopt } for pid=13385 comm="syz.2.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 383.094791][T13386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1993'. [ 383.241713][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1998'. [ 383.746988][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2003'. [ 383.889670][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 383.925942][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 383.950616][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 384.022207][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 384.138344][ T10] usb 1-1: USB disconnect, device number 54 [ 384.393276][ T29] audit: type=1326 audit(368.042:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.4.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec379ce59 code=0x7ffc0000 [ 384.422147][ T29] audit: type=1326 audit(368.042:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.4.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0ec379ce59 code=0x7ffc0000 [ 384.448580][ T29] audit: type=1326 audit(368.051:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.4.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec379ce59 code=0x7ffc0000 [ 384.475244][ T29] audit: type=1326 audit(368.051:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.4.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f0ec379ce59 code=0x7ffc0000 [ 384.524736][ T29] audit: type=1326 audit(368.051:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.4.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec379ce59 code=0x7ffc0000 [ 384.553174][ T29] audit: type=1326 audit(368.051:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.4.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ec379ce59 code=0x7ffc0000 [ 384.580965][ T29] audit: type=1326 audit(368.051:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.4.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec379ce59 code=0x7ffc0000 [ 384.607622][ T29] audit: type=1326 audit(368.051:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13429 comm="syz.4.2008" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ec379ce59 code=0x7ffc0000 [ 384.790216][T13444] o2cb: This node has not been configured. [ 384.796223][T13444] o2cb: Cluster check failed. Fix errors before retrying. [ 384.803889][T13444] (syz.0.2011,13444,0):user_dlm_register:674 ERROR: status = -22 [ 384.811945][T13444] (syz.0.2011,13444,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 384.896239][ T5616] Bluetooth: hci4: command 0x0419 tx timeout [ 385.010477][T13446] netlink: 'syz.5.2012': attribute type 3 has an invalid length. [ 385.901583][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 385.901596][ T29] audit: type=1400 audit(369.528:2941): avc: denied { write } for pid=13464 comm="syz.5.2018" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 386.075370][T13478] netlink: 'syz.3.2023': attribute type 12 has an invalid length. [ 386.095901][T13478] netlink: 'syz.3.2023': attribute type 29 has an invalid length. [ 386.117721][T13478] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2023'. [ 386.133141][T13478] netlink: 'syz.3.2023': attribute type 3 has an invalid length. [ 386.143437][T13478] netlink: 'syz.3.2023': attribute type 3 has an invalid length. [ 386.553548][T13496] 9p: Bad value for 'rfdno' [ 386.714076][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.744717][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.772689][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.785718][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.792956][T13507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2033'. [ 386.831106][ T29] audit: type=1804 audit(370.387:2942): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2035" name="bus" dev="ramfs" ino=39912 res=1 errno=0 [ 386.896816][T13515] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.904067][T13515] IPv6: NLM_F_CREATE should be set when creating new route [ 386.994729][T11406] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x17 [ 387.072361][T12267] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 387.137238][ T5620] Bluetooth: hci4: command 0x0419 tx timeout [ 387.245581][T12267] usb 6-1: Using ep0 maxpacket: 8 [ 387.251943][T12267] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.263333][T12267] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.272785][T12267] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.282316][T12267] usb 6-1: config 0 descriptor?? [ 387.408265][ T10] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 387.451927][ T803] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 387.511575][T12267] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 387.573943][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 387.592857][ T10] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 387.604969][ T10] usb 1-1: Product: syz [ 387.613920][ T10] usb 1-1: Manufacturer: syz [ 387.621873][ T803] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 387.631118][ T10] usb 1-1: SerialNumber: syz [ 387.646390][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.655904][ T10] usb 1-1: config 0 descriptor?? [ 387.666921][ T803] usb 4-1: Product: syz [ 387.676200][ T803] usb 4-1: Manufacturer: syz [ 387.689772][ T803] usb 4-1: SerialNumber: syz [ 387.701370][ T803] usb 4-1: config 0 descriptor?? [ 387.895512][ T29] audit: type=1400 audit(371.366:2943): avc: denied { name_bind } for pid=13524 comm="syz.0.2040" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 387.918442][ T24] usb 1-1: USB disconnect, device number 55 [ 388.108529][T13532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.122384][T13532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.139754][T13509] netlink: 'syz.5.2034': attribute type 4 has an invalid length. [ 388.147770][T13509] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2034'. [ 388.160079][T13509] .`: renamed from bond0 (while UP) [ 388.184286][T13509] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2034' resets device [ 388.196097][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 388.207949][ T24] usb 6-1: USB disconnect, device number 50 [ 388.396240][T13538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2045'. [ 388.430729][T13540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.439952][T13540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.055097][ T10] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 389.093514][ T803] usb 4-1: f81604_read: reg: 100f failed: -EPROTO [ 389.105493][ T803] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 389.116918][ T803] usb 4-1: USB disconnect, device number 81 [ 389.125440][ T5271] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 389.136443][ T5271] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 389.144329][ T803] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 389.154357][ T5271] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 389.162423][ T5271] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 389.186099][ T803] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 389.217085][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 389.226672][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 389.260116][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.281546][ T10] usb 6-1: Product: syz [ 389.299331][ T10] usb 6-1: Manufacturer: syz [ 389.314809][ T10] usb 6-1: SerialNumber: syz [ 389.333499][ T10] usb 6-1: config 0 descriptor?? [ 389.343881][ T10] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 389.351934][ T10] uvcvideo 6-1:0.0: No valid video chain found. [ 389.429197][ T29] audit: type=1400 audit(372.787:2944): avc: denied { write } for pid=13550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.512188][ T29] audit: type=1400 audit(372.861:2945): avc: denied { write } for pid=13567 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.610533][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.617634][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.635719][ T803] usb 6-1: USB disconnect, device number 51 [ 389.697689][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.721542][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.890003][ T29] audit: type=1400 audit(373.203:2946): avc: denied { write } for pid=13570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.026517][T13577] binder: 13575:13577 ioctl c0306201 200000000080 returned -14 [ 390.167249][ T29] audit: type=1400 audit(373.424:2947): avc: denied { write } for pid=13573 comm="syz.4.2052" name="file0" dev="tmpfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 390.348706][ T29] audit: type=1400 audit(373.424:2948): avc: denied { open } for pid=13573 comm="syz.4.2052" path="/398/file0" dev="tmpfs" ino=2091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 390.351082][T13595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2056'. [ 390.373262][ T29] audit: type=1400 audit(373.433:2949): avc: denied { ioctl } for pid=13573 comm="syz.4.2052" path="/398/file0" dev="tmpfs" ino=2091 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 390.436664][ T29] audit: type=1400 audit(373.664:2950): avc: denied { write } for pid=13594 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.564220][T13603] netlink: 'syz.5.2059': attribute type 3 has an invalid length. [ 390.573598][T13603] netlink: 'syz.5.2059': attribute type 1 has an invalid length. [ 390.581697][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2059'. [ 390.744266][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 391.288718][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 391.296050][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.342909][ T24] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 391.380010][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.413702][ T24] usb 4-1: Product: syz [ 391.430190][ T24] usb 4-1: Manufacturer: syz [ 391.443162][ T24] usb 4-1: SerialNumber: syz [ 391.456917][ T24] usb 4-1: config 0 descriptor?? [ 391.467672][ T24] cdc_ether 4-1:0.0: Descriptor too short [ 391.484488][ T24] usb 4-1: unsupported MDLM descriptors [ 391.741706][ T24] usb 4-1: USB disconnect, device number 82 [ 391.960416][ T29] audit: type=1400 audit(375.123:2951): avc: denied { write } for pid=13644 comm="syz.5.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 392.054518][T13663] loop5: detected capacity change from 0 to 7 [ 392.081938][T13663] Dev loop5: unable to read RDB block 7 [ 392.100862][T13663] loop5: AHDI p2 [ 392.113890][T13663] loop5: partition table partially beyond EOD, truncated [ 392.210806][T13648] [U] [ 392.215847][T13648] [U] [ 392.222154][T13648] [U] DDp% [ 392.229952][T13648] [U]  [ 392.236437][T13648] [U]  [ 392.239300][T13648] [U] [ 392.241981][T13648] [U] [ 392.254632][T13648] [U] [ 392.257326][T13648] [U] [ 392.260006][T13648] [U] [ 392.262689][T13648] [U] [ 392.279976][T13648] [U] [ 392.282678][T13648] [U] [ 392.285362][T13648] [U] [ 392.288040][T13648] [U] [ 392.312364][T13648] [U] [ 392.315058][T13648] [U] [ 392.317741][T13648] [U] [ 392.320424][T13648] [U] [ 392.335616][T13648] [U] [ 392.338305][T13648] [U] [ 392.340974][T13648] [U] [ 392.343643][T13648] [U] [ 392.363713][T13648] [U] [ 392.366411][T13648] [U] [ 392.369098][T13648] [U] [ 392.371780][T13648] [U] [ 392.376622][T13648] [U] [ 392.379313][T13648] [U] [ 392.381995][T13648] [U] [ 392.384679][T13648] [U] [ 392.389214][T13648] [U] [ 392.391907][T13648] [U] [ 392.394589][T13648] [U] [ 392.397267][T13648] [U] [ 392.466869][T13648] [U] [ 392.469575][T13648] [U] [ 392.472259][T13648] [U] [ 392.474941][T13648] [U] [ 392.493623][T13648] [U] [ 392.496307][T13648] [U] [ 392.498982][T13648] [U] [ 392.501663][T13648] [U] [ 392.509075][T13648] [U] [ 392.511769][T13648] [U] [ 392.514451][T13648] [U] [ 392.517132][T13648] [U] [ 392.521912][T13648] [U] [ 392.524609][T13648] [U] [ 392.527293][T13648] [U] [ 392.529973][T13648] [U] [ 392.533558][T13648] [U] [ 392.536259][T13648] [U] [ 392.538946][T13648] [U] [ 392.541627][T13648] [U] [ 392.545710][T13648] [U] [ 392.548401][T13648] [U] [ 392.551083][T13648] [U] [ 392.553762][T13648] [U] [ 392.557651][T13648] [U] [ 392.560346][T13648] [U] [ 392.563025][T13648] [U] [ 392.565703][T13648] [U] [ 392.573183][T13648] [U] [ 392.575881][T13648] [U] [ 392.578558][T13648] [U] [ 392.581241][T13648] [U] [ 392.583920][T13648] [U] [ 392.618386][T13648] [U] [ 392.621078][T13648] [U] [ 392.623747][T13648] [U] [ 392.626411][T13648] [U] [ 392.648539][T13648] [U] [ 392.651239][T13648] [U] [ 392.653920][T13648] [U] [ 392.656601][T13648] [U] [ 392.680065][T13648] [U] [ 392.682758][T13648] [U] [ 392.685438][T13648] [U] [ 392.688118][T13648] [U] [ 392.708546][T13648] [U] [ 392.711239][T13648] [U] [ 392.713918][T13648] [U] [ 392.716593][T13648] [U] [ 392.736766][T13648] [U] [ 392.739459][T13648] [U] [ 392.742138][T13648] [U] [ 392.744819][T13648] [U] [ 392.764832][T13648] [U] [ 392.767544][T13648] [U] [ 392.770219][T13648] [U] [ 392.772887][T13648] [U] [ 392.794580][T13648] [U] [ 392.797272][T13648] [U] [ 392.799953][T13648] [U] [ 392.802630][T13648] [U] [ 392.832630][T13648] [U] [ 392.835332][T13648] [U] [ 392.838014][T13648] [U] [ 392.840694][T13648] [U] [ 392.863553][T13648] [U] [ 392.991097][T13670] binder: 13669:13670 unknown command 0 [ 393.011537][T13670] binder: 13669:13670 ioctl c0306201 200000000180 returned -22 [ 393.046468][T13672] loop6: detected capacity change from 0 to 2640 [ 393.064435][T13672] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.079409][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.087840][T13672] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.097258][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.113542][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.137474][T13672] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.146776][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.161426][T13672] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.170348][ T5842] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.184194][T13672] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.203630][T13672] ldm_validate_partition_table(): Disk read failed. [ 393.235911][T13672] Dev loop6: unable to read RDB block 0 [ 393.246873][T13672] loop6: unable to read partition table [ 393.252857][T13606] tipc: Resetting bearer [ 393.267546][T13606] ------------[ cut here ]------------ [ 393.271037][T13672] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 393.273052][T13606] sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt [ 393.273064][T13606] WARNING: net/mac80211/key.c:1171 at ieee80211_free_keys+0x4ed/0x640, CPU#1: syz.2.2060/13606 [ 393.301318][T13606] Modules linked in: [ 393.305231][T13606] CPU: 1 UID: 0 PID: 13606 Comm: syz.2.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.316564][T13606] Tainted: [L]=SOFTLOCKUP [ 393.321309][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.331418][T13606] RIP: 0010:ieee80211_free_keys+0x4ed/0x640 [ 393.337573][T13606] Code: c0 74 08 3c 03 0f 8e 26 01 00 00 8b 9d 78 fb ff ff 44 89 ef 89 de e8 e2 ce f1 f6 41 39 dd 0f 84 6b fe ff ff e8 e4 d4 f1 f6 90 <0f> 0b 90 e9 5d fe ff ff e8 d6 d4 f1 f6 4c 89 fa 48 b8 00 00 00 00 [ 393.357283][T13606] RSP: 0018:ffffc90005586988 EFLAGS: 00010246 [ 393.363373][T13606] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc900084c1000 [ 393.371539][T13606] RDX: 0000000000080000 RSI: ffffffff8b178a3c RDI: ffff88802ade8000 [ 393.379625][T13606] RBP: ffff8880564e1d88 R08: 0000000000000004 R09: 0000000000000001 [ 393.387647][T13606] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000ab0d33 [ 393.395661][T13606] R13: 0000000000000001 R14: ffffc900055869b8 R15: ffffc900055869a0 [ 393.403694][T13606] FS: 00007f8c2b5b96c0(0000) GS:ffff88812441a000(0000) knlGS:0000000000000000 [ 393.412687][T13606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.419297][T13606] CR2: 00007f70a3417dac CR3: 000000004a39d000 CR4: 00000000003526f0 [ 393.419762][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 393.427319][T13606] Call Trace: [ 393.427329][T13606] [ 393.427337][T13606] ? __rwlock_init+0x121/0x150 [ 393.427364][T13606] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 393.427391][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.427417][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.427441][T13606] ? trace_irq_enable.constprop.0+0x122/0x160 [ 393.427465][T13606] ieee80211_do_stop+0x1b9c/0x29a0 [ 393.427493][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.427519][T13606] ? ieee80211_stop+0xc5/0x2f0 [ 393.427545][T13606] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 393.427572][T13606] ? do_raw_spin_lock+0x128/0x260 [ 393.427596][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.497299][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.502080][T13606] ? trace_irq_enable.constprop.0+0x122/0x160 [ 393.508183][T13606] ? __pfx_ieee80211_stop+0x10/0x10 [ 393.513404][T13606] ieee80211_stop+0x165/0x2f0 [ 393.518123][T13606] ? __pfx_ieee80211_stop+0x10/0x10 [ 393.523344][T13606] __dev_close_many+0x312/0x710 [ 393.528233][T13606] ? __pfx___dev_close_many+0x10/0x10 [ 393.533635][T13606] netif_close_many+0x233/0x630 [ 393.538510][T13606] ? __pfx_autoremove_wake_function+0x10/0x10 [ 393.544620][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.549403][T13606] ? __pfx_netif_close_many+0x10/0x10 [ 393.554848][T13606] ? do_raw_spin_lock+0x128/0x260 [ 393.559887][T13606] ? dev_deactivate_many+0x8ec/0x1050 [ 393.565301][T13606] ? dev_deactivate_many+0x8ec/0x1050 [ 393.570704][T13606] netif_close+0x17f/0x230 [ 393.575163][T13606] ? __pfx_netif_close+0x10/0x10 [ 393.580119][T13606] dev_close+0xaa/0x240 [ 393.584303][T13606] ieee80211_stop+0x1ff/0x2f0 [ 393.588996][T13606] ? __pfx_ieee80211_stop+0x10/0x10 [ 393.594226][T13606] __dev_close_many+0x312/0x710 [ 393.599098][T13606] ? __pfx___dev_close_many+0x10/0x10 [ 393.604498][T13606] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 393.610493][T13606] __dev_change_flags+0x307/0x850 [ 393.614706][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 393.615544][T13606] ? __pfx___dev_change_flags+0x10/0x10 [ 393.622520][ T10] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 393.626124][T13606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.626148][T13606] ? netif_rx_mode_clean+0x17b/0x1e0 [ 393.626168][T13606] ? __pfx_validate_linkmsg+0x10/0x10 [ 393.626193][T13606] netif_change_flags+0x8d/0x160 [ 393.626216][T13606] do_setlink.isra.0+0x1ac4/0x3e60 [ 393.626244][T13606] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 393.626267][T13606] ? stack_trace_save+0x8e/0xc0 [ 393.635282][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.640419][T13606] ? __pfx_stack_trace_save+0x10/0x10 [ 393.640451][T13606] ? is_bpf_text_address+0x94/0x1a0 [ 393.640474][T13606] ? stack_depot_save_flags+0x27/0x9d0 [ 393.640501][T13606] ? __kernel_text_address+0xd/0x30 [ 393.640520][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.640545][T13606] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 393.640567][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.640592][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.640614][T13606] ? lock_acquire+0x301/0x370 [ 393.640634][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.640657][T13606] ? trace_contention_end+0x126/0x160 [ 393.640679][T13606] ? __mutex_lock+0x26d/0x1bd0 [ 393.640698][T13606] ? rtnl_newlink+0x8bb/0x2380 [ 393.640723][T13606] ? __pfx___mutex_lock+0x10/0x10 [ 393.640741][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.640764][T13606] ? cap_capable+0x107/0x430 [ 393.640792][T13606] rtnl_newlink+0x1b7e/0x2380 [ 393.649761][ T10] usb 6-1: config 0 has no interface number 0 [ 393.651500][T13606] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.657222][ T10] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 393.661564][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.661593][T13606] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 393.661614][T13606] ? lock_release+0x24d/0x310 [ 393.661635][T13606] ? avc_has_perm_noaudit+0x145/0x3b0 [ 393.661657][T13606] ? cred_has_capability.isra.0+0x186/0x300 [ 393.661687][T13606] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 393.661733][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.661756][T13606] ? cap_capable+0x107/0x430 [ 393.698182][ T10] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 393.703347][T13606] ? __dev_queue_xmit+0x9f0/0x4940 [ 393.703371][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.703396][T13606] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 393.703421][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.703445][T13606] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 393.703469][T13606] ? lock_release+0x24d/0x310 [ 393.703489][T13606] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.703514][T13606] rtnetlink_rcv_msg+0x95e/0xe90 [ 393.703540][T13606] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.713740][ T10] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 393.718462][T13606] ? ref_tracker_free+0x37e/0x6c0 [ 393.718492][T13606] netlink_rcv_skb+0x159/0x420 [ 393.718511][T13606] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.718536][T13606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.718558][T13606] ? netlink_deliver_tap+0x1ae/0xcc0 [ 393.718588][T13606] netlink_unicast+0x585/0x850 [ 393.718607][T13606] ? __pfx_netlink_unicast+0x10/0x10 [ 393.718627][T13606] netlink_sendmsg+0x8b0/0xda0 [ 393.724201][ T10] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 393.728072][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.728096][T13606] ____sys_sendmsg+0xa4d/0xbe0 [ 393.728123][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.728142][T13606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.728172][T13606] ? plist_check_list+0x1b8/0x280 [ 393.728197][T13606] ? plist_del+0x308/0x510 [ 393.733151][ T10] usb 6-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 393.738434][T13606] ___sys_sendmsg+0x190/0x1e0 [ 393.738455][T13606] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.738473][T13606] ? futex_wake+0x220/0x5e0 [ 393.738504][T13606] ? percpu_counter_add_batch+0xb9/0x230 [ 393.738531][T13606] ? __pfx_do_futex+0x10/0x10 [ 393.738556][T13606] __sys_sendmsg+0x160/0x210 [ 393.749194][ T10] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 393.753098][T13606] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.753128][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.753154][T13606] do_syscall_64+0x115/0x870 [ 393.753173][T13606] ? clear_bhb_loop+0x40/0x90 [ 393.753195][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.753214][T13606] RIP: 0033:0x7f8c2a79ce59 [ 393.753229][T13606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.758893][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.762589][T13606] RSP: 002b:00007f8c2b5b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.762612][T13606] RAX: ffffffffffffffda RBX: 00007f8c2aa16090 RCX: 00007f8c2a79ce59 [ 393.762625][T13606] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000d [ 393.762637][T13606] RBP: 00007f8c2a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 393.762649][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.762661][T13606] R13: 00007f8c2aa16128 R14: 00007f8c2aa16090 R15: 00007ffe89523e78 [ 393.762679][T13606] [ 393.762689][T13606] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 393.762704][T13606] CPU: 1 UID: 0 PID: 13606 Comm: syz.2.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.762728][T13606] Tainted: [L]=SOFTLOCKUP [ 393.762735][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.762747][T13606] Call Trace: [ 393.762752][T13606] [ 393.762759][T13606] dump_stack_lvl+0x100/0x190 [ 393.762778][T13606] vpanic+0x552/0x970 [ 393.762798][T13606] ? __pfx_vpanic+0x10/0x10 [ 393.762812][T13606] ? lock_release+0x24d/0x310 [ 393.762832][T13606] panic+0xd1/0xe0 [ 393.762846][T13606] ? __pfx_panic+0x10/0x10 [ 393.762864][T13606] check_panic_on_warn.cold+0x19/0x34 [ 393.762881][T13606] ? ieee80211_free_keys+0x4ed/0x640 [ 393.762903][T13606] __warn.cold+0x191/0x318 [ 393.762920][T13606] __report_bug+0x30f/0x440 [ 393.762934][T13606] ? ieee80211_free_keys+0x4ed/0x640 [ 393.762956][T13606] ? __pfx___report_bug+0x10/0x10 [ 393.762971][T13606] ? preempt_schedule_common+0x42/0xc0 [ 393.762995][T13606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.763012][T13606] ? __pfx___might_resched+0x10/0x10 [ 393.763029][T13606] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 393.763052][T13606] ? ieee80211_free_keys+0x4ed/0x640 [ 393.763073][T13606] report_bug+0xb2/0x220 [ 393.763088][T13606] ? ieee80211_free_keys+0x4ed/0x640 [ 393.763109][T13606] handle_bug+0x16a/0x2a0 [ 393.763127][T13606] exc_invalid_op+0x17/0x50 [ 393.763144][T13606] asm_exc_invalid_op+0x1a/0x20 [ 393.763159][T13606] RIP: 0010:ieee80211_free_keys+0x4ed/0x640 [ 393.763182][T13606] Code: c0 74 08 3c 03 0f 8e 26 01 00 00 8b 9d 78 fb ff ff 44 89 ef 89 de e8 e2 ce f1 f6 41 39 dd 0f 84 6b fe ff ff e8 e4 d4 f1 f6 90 <0f> 0b 90 e9 5d fe ff ff e8 d6 d4 f1 f6 4c 89 fa 48 b8 00 00 00 00 [ 393.763197][T13606] RSP: 0018:ffffc90005586988 EFLAGS: 00010246 [ 393.763210][T13606] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc900084c1000 [ 393.763220][T13606] RDX: 0000000000080000 RSI: ffffffff8b178a3c RDI: ffff88802ade8000 [ 393.763231][T13606] RBP: ffff8880564e1d88 R08: 0000000000000004 R09: 0000000000000001 [ 393.763241][T13606] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000ab0d33 [ 393.763251][T13606] R13: 0000000000000001 R14: ffffc900055869b8 R15: ffffc900055869a0 [ 393.763265][T13606] ? ieee80211_free_keys+0x4ec/0x640 [ 393.763288][T13606] ? ieee80211_free_keys+0x4ec/0x640 [ 393.763309][T13606] ? __rwlock_init+0x121/0x150 [ 393.763327][T13606] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 393.763349][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.763369][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.763389][T13606] ? trace_irq_enable.constprop.0+0x122/0x160 [ 393.763409][T13606] ieee80211_do_stop+0x1b9c/0x29a0 [ 393.763432][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.763454][T13606] ? ieee80211_stop+0xc5/0x2f0 [ 393.763478][T13606] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 393.763501][T13606] ? do_raw_spin_lock+0x128/0x260 [ 393.763523][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.763543][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.763563][T13606] ? trace_irq_enable.constprop.0+0x122/0x160 [ 393.763582][T13606] ? __pfx_ieee80211_stop+0x10/0x10 [ 393.763604][T13606] ieee80211_stop+0x165/0x2f0 [ 393.763625][T13606] ? __pfx_ieee80211_stop+0x10/0x10 [ 393.763646][T13606] __dev_close_many+0x312/0x710 [ 393.763669][T13606] ? __pfx___dev_close_many+0x10/0x10 [ 393.763694][T13606] netif_close_many+0x233/0x630 [ 393.763715][T13606] ? __pfx_autoremove_wake_function+0x10/0x10 [ 393.763740][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.763760][T13606] ? __pfx_netif_close_many+0x10/0x10 [ 393.763781][T13606] ? do_raw_spin_lock+0x128/0x260 [ 393.763805][T13606] ? dev_deactivate_many+0x8ec/0x1050 [ 393.763827][T13606] ? dev_deactivate_many+0x8ec/0x1050 [ 393.763849][T13606] netif_close+0x17f/0x230 [ 393.763870][T13606] ? __pfx_netif_close+0x10/0x10 [ 393.763894][T13606] dev_close+0xaa/0x240 [ 393.763914][T13606] ieee80211_stop+0x1ff/0x2f0 [ 393.763936][T13606] ? __pfx_ieee80211_stop+0x10/0x10 [ 393.763957][T13606] __dev_close_many+0x312/0x710 [ 393.763979][T13606] ? __pfx___dev_close_many+0x10/0x10 [ 393.764003][T13606] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 393.764022][T13606] __dev_change_flags+0x307/0x850 [ 393.764041][T13606] ? __pfx___dev_change_flags+0x10/0x10 [ 393.764059][T13606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.764074][T13606] ? netif_rx_mode_clean+0x17b/0x1e0 [ 393.764091][T13606] ? __pfx_validate_linkmsg+0x10/0x10 [ 393.764112][T13606] netif_change_flags+0x8d/0x160 [ 393.764131][T13606] do_setlink.isra.0+0x1ac4/0x3e60 [ 393.764153][T13606] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 393.764175][T13606] ? stack_trace_save+0x8e/0xc0 [ 393.764198][T13606] ? __pfx_stack_trace_save+0x10/0x10 [ 393.764221][T13606] ? is_bpf_text_address+0x94/0x1a0 [ 393.764239][T13606] ? stack_depot_save_flags+0x27/0x9d0 [ 393.764261][T13606] ? __kernel_text_address+0xd/0x30 [ 393.764277][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764298][T13606] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 393.764316][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764337][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764357][T13606] ? lock_acquire+0x301/0x370 [ 393.764373][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764393][T13606] ? trace_contention_end+0x126/0x160 [ 393.764412][T13606] ? __mutex_lock+0x26d/0x1bd0 [ 393.764427][T13606] ? rtnl_newlink+0x8bb/0x2380 [ 393.764448][T13606] ? __pfx___mutex_lock+0x10/0x10 [ 393.764463][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764483][T13606] ? cap_capable+0x107/0x430 [ 393.764508][T13606] rtnl_newlink+0x1b7e/0x2380 [ 393.764531][T13606] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.764551][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764571][T13606] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 393.764588][T13606] ? lock_release+0x24d/0x310 [ 393.764606][T13606] ? avc_has_perm_noaudit+0x145/0x3b0 [ 393.764624][T13606] ? cred_has_capability.isra.0+0x186/0x300 [ 393.764648][T13606] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 393.764675][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764695][T13606] ? cap_capable+0x107/0x430 [ 393.764713][T13606] ? __dev_queue_xmit+0x9f0/0x4940 [ 393.764728][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764748][T13606] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 393.764768][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.764788][T13606] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 393.764813][T13606] ? lock_release+0x24d/0x310 [ 393.764829][T13606] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.764850][T13606] rtnetlink_rcv_msg+0x95e/0xe90 [ 393.764871][T13606] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.764894][T13606] ? ref_tracker_free+0x37e/0x6c0 [ 393.764917][T13606] netlink_rcv_skb+0x159/0x420 [ 393.764933][T13606] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.764954][T13606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.764973][T13606] ? netlink_deliver_tap+0x1ae/0xcc0 [ 393.764997][T13606] netlink_unicast+0x585/0x850 [ 393.765013][T13606] ? __pfx_netlink_unicast+0x10/0x10 [ 393.765031][T13606] netlink_sendmsg+0x8b0/0xda0 [ 393.765047][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.765066][T13606] ____sys_sendmsg+0xa4d/0xbe0 [ 393.765088][T13606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.765104][T13606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.765128][T13606] ? plist_check_list+0x1b8/0x280 [ 393.765149][T13606] ? plist_del+0x308/0x510 [ 393.765169][T13606] ___sys_sendmsg+0x190/0x1e0 [ 393.765185][T13606] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.765200][T13606] ? futex_wake+0x220/0x5e0 [ 393.765226][T13606] ? percpu_counter_add_batch+0xb9/0x230 [ 393.765249][T13606] ? __pfx_do_futex+0x10/0x10 [ 393.765270][T13606] __sys_sendmsg+0x160/0x210 [ 393.765289][T13606] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.765311][T13606] ? rcu_is_watching+0x12/0xc0 [ 393.765332][T13606] do_syscall_64+0x115/0x870 [ 393.765347][T13606] ? clear_bhb_loop+0x40/0x90 [ 393.765364][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.765380][T13606] RIP: 0033:0x7f8c2a79ce59 [ 393.765392][T13606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.765407][T13606] RSP: 002b:00007f8c2b5b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.765422][T13606] RAX: ffffffffffffffda RBX: 00007f8c2aa16090 RCX: 00007f8c2a79ce59 [ 393.765433][T13606] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000d [ 393.765443][T13606] RBP: 00007f8c2a832e6f R08: 0000000000000000 R09: 0000000000000000 [ 393.765453][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.765463][T13606] R13: 00007f8c2aa16128 R14: 00007f8c2aa16090 R15: 00007ffe89523e78 [ 393.765478][T13606] [ 393.767553][T13606] Kernel Offset: disabled