last executing test programs: 23m11.253278213s ago: executing program 32 (id=853): socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xf401) 20m20.975743693s ago: executing program 33 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x0, 0x3, 0x0, 0xff, 0xfffffffa}, {0xfa, 0x1, 0x0, 0x1, 0x2, 0x2}, 0x8, 0x4, 0xac6}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 16m33.233404103s ago: executing program 34 (id=1574): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa101000100000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000001000/0x1000)=nil], &(0x7f0000000040)=[0x1], &(0x7f0000000080), 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/187}) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a40)={0x450, 0x13, 0x821, 0x70bd2b, 0x25dfdbfb, {0x29, 0x8, 0x8, 0xa, {0x4e24, 0x4e20, [0x5, 0x7f, 0x1ff, 0x2], [0x5, 0x9, 0x83c6, 0x1], r6, [0x0, 0x4]}, 0x200, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "10ac747fdab60805127c53ddeab6bafd219d7fc6fcde139b3fd73fd4784f65c176443448fd1c1f89e51729fbfd10d933af1645f95a75a4682ed2ccff5088ef0846e29a4d1a5f751e0254757648509de373954d16358d82dc118c25e07fe4adf744069aec4be9065c5fa053be601e5891adac7f9319b97ed798d633257fece4e3c57a70e22fa53d965f43755c433429f26ed022365b4adc1edaf222af027f295a194103e34d56a63184197fbebda3e20c2c301e84b02d13fcbffa96bd46e96adf13f05964e272dbf5da258f"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "286b6834547cdceef52920f7ba3fd4aebbb7e061584ddbf96aa08892b8424863ed6052e3d1363d70a102831cadc3ac03375b85c030c65ffadc41a7ca273daf5ff2aaf9f0633646c6a73953c527169e48d74aaa416c55d312eb9d2bf3df474b4ecc11263272da0d01"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "00d736d04d4e5c9a717d64d728106ec0d72e01d7b1e4f309c9d91f1d28bbe1865f55f95db0c480ed2ab951bf1edfa62ee8bf685f3a495ba28c23f587e54dbcff40781631c5799e71d545e66ffbad0748e039f88cc48334a0f01b2306ea9d8b97"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "cfa133c8f2d7889a95a539dad787ed4fed1e34d5c70b5872706c60247a76d49949d282d41da12c573adbc726d5847ce2fdf7820c9aaf40c8ab446d67c3d9c679be5ff42291c35774690b9d7b5045973c2f28a961de209a38616cc3c59d1c4f670f57c1c96e2872218540c5804e82a00971ea3e3da990a3f4042130f3944de076dd5adaa49ff03570e96431f7025097b967661c9a87eb2404b1446a0fbcf872c506106e78700c24f8ff3300117e91fc5c921bdab7118167c1fa39d183a281b267ecf91c462dfd08df75dea7fdd5bf598ed81b2c01f826386d4468a42cf3b05d5768e587a44cf184f626ef"}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "1d079fa812e6c0849c0f8fc2d445a724f953a24490994f3b3a6f0a98f2a3e8646dabb2c0eed3576d478de93f74c4d2d6554a7dd428866b77cb02"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "17206b59084321193c1ea14297b7b322209457c582f6f375f19eb23e89f9341156dc39e74441c6d69dc425df7e3493eee261adc2e19cde3d1b6d99f4e422cd7d7b0c16bb602c6f5c8b6554b6dab36412e566c463ccfa4a964afe89595ffc8235f2ba48d0cebfe8efafbd13ecafe3b1ef064260863b0f7ddc46f9a7576f0fdb43fb44810f7af429d1bcac36386d"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "b6f8b84b8efea999c32d9c72159e32bfc38080c22f"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "01c6e4ac2e179e241a17b490b6713d1ae2cf3175e72dcf2a69d95627c7e6270b5ee8d48f84047f3af62e44733d909a852a9b2dc32dc262b85430c29ac403f6a26869519764047f0cb2fe9b2f4c519faf0d2e78e26d735b0ed327760b7b303e69872fffed6652c803f028621c5799cf5c3be8c310af7acc6d937f0cf4423ff1"}]}, 0x450}, 0x1, 0x0, 0x0, 0x1}, 0x8030) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x1, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x62}], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x6}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r7) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_OKEY={0x8, 0x3, 0xfffffffc}, @IFLA_VTI_IKEY={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}]}, 0x50}}, 0x4044004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 15m26.219868879s ago: executing program 7 (id=1732): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0x7fff) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, r2) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000002000}}], 0x20}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8001}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_mempolicy(0x4000, 0x0, 0x571c) connect$netlink(0xffffffffffffffff, &(0x7f0000000140), 0x2) waitid(0x1, 0x0, 0x0, 0x4, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000140)={0x10001}) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000003c0)={0x0, 0x8, 0xba, {0xba, 0x40db9110d58a3419, "200273dffa6d54777a10fc7c77b494966ce83934536e2b2a4902ced4d40996fddd2683a64ec5d7cff305058e56e5b34f4b8b058e1920d15c6a9aa4d5fb43e4bad10218eb2f927eb6082b3c8a65d06119ff58a235cb66e0768a6f34a79dcd434312d694b18068016a89a024c7a9f98ea582f3fac49f0688f0c2ab6b7fcd385ad1ae04072608a7946e54379b3f33a207bf4b13247ac718b5a89c1a9ce33083e96b8edcd56b438171b1338e29a8071ea6ba9805aea9e25dcada"}}, &(0x7f00000004c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "47796dfb9d44585f13dab898a7315bfb9e2053677a5170595caeb17f3f33d33b069dbc9cbaa17aae0fe70fa6e460ca2562bb71e7a942a22e2a506693759689d7c700240fbf3636c8dca91e337d927ccbd1682d2c63958cf12246c556fc4ec84245a1c915d040cb069f8ccdd2f9b76c1d10568e98da1630cffdd172daa294248fa1bf11929b48e77416e9bff56d5515fd2d54d653d2f3c73386c683afa3fcef969add9299fc360802a628569842e2ece629ccfe85f74a19ac6ba72db11570b2b368b9f47108b75359b9c00e2dd02150b9dcef8e6b3002e6d3274d5d9a06034a207b1b4cd6bd98ab729ba4010d2d"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000600)={0x20, 0x8, 0xf1, "9b8158f0befdd8639b21036cb35feab7cb30ebfe14e532da3fc11cd59de13f57c9efce82f20470eaa1de3a7d246a6c5c911e5ccebfb50b6af1f8756c5cbfc1aa8211e3328434ef370e5cc8ae25fc62860950956bd5483378118b239134f782811283ae34b60c411dbc4b1bc45fdd6a6a08547be2d7b19abd0367148d4f1ce3eb53ce513a671aff212d797ea0799696f7ef96d0d6158a7a13acc2d096e7529d7b5774ca7e07e950d075d9c6b2ee3487fd4194ab1f74a42b314a7ad3308a762dd071586616b6f67d26aa25099e98df833b9b32b6a3c69867b8047f7796d0732b152aa8d2a51d939d96c191831b327951de55"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0xa}, &(0x7f0000000800)={0xc0, 0xa2, 0x2f, "bd7f9e4217ee3ba62099b88c7ee58e1cc70bbae8da7a769c6acc4c40038844c943dd4476adab018a0eb5950b3035b5"}}) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) 15m24.947058521s ago: executing program 35 (id=1708): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000400)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000006640)=0x80000001, 0x4) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) 15m22.511252195s ago: executing program 7 (id=1740): socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0xedbde134798091f0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="00142d0000005ed7c61f97a7dca107f9556c40bd76e41cf04fdf50"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x20, 0x83, 0x1, '1'}, 0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000000)={0xa091, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80046601, 0x0) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0xd8, &(0x7f0000002b80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x3, 0xe0, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x5, 0x20, 0xd6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8000, 0x2, 0x3f, 0x5}, [@mixer_unit={0x7, 0x24, 0x4, 0x1, 0x0, "94b2"}, @input_terminal={0x10, 0x24, 0x2, 0x5, 0x204, 0x3, 0x4, 0x0, 0x0, 0x65, 0x9, 0x4}, @multiply_unit={0x7, 0x24, 0xc, 0x0, 0x81, 0x40, 0xc}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x5, [0x7, 0x8, 0x4844bf5ee7ac19b5, 0x8]}, @sample_rate={0xb, 0x24, 0xd, 0x3, 0x2, 0x4, [0x3, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8, 0x8, 0x6, '`'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x3}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x1, 0x2, 0x9, 0xf, "134088", "6ceb"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x0, 0x16, 0x10, {0x8, 0x25, 0x1, 0x80, 0xf, 0xf, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2, 0x4, 0x6, {0x8, 0x25, 0x1, 0x3, 0x5f, 0x0, 0x4}}}}}}}}]}}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000002d00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002cc0)={0x0, 0x26c8}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1d, &(0x7f0000000040)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x5055, 0x20080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc}}}]}, 0x3c}}, 0x0) 15m14.124203396s ago: executing program 7 (id=1750): socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/227) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) mkdirat$cgroup(r4, 0x0, 0x1ff) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000640)={0x0, 0x8, 0x1, [0xbac1, 0x5, 0x7, 0x7, 0x6], [0x2, 0x1, 0x5, 0x8, 0x80, 0xaf7, 0x80000000, 0x3, 0x2, 0xe, 0x10001, 0x8000000000000000, 0x7, 0x8, 0x80000000, 0x0, 0x7e57, 0x8, 0x10000, 0xd, 0x3, 0x3, 0x8000000000000001, 0x8ee9, 0xf5, 0x0, 0x4, 0x2, 0xb1a, 0x0, 0x7fffffffffffffff, 0x7ff, 0x9, 0x5, 0x7, 0x1fe86b7, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x4, 0xffffffff, 0x2b, 0x5, 0x6, 0x9, 0x4, 0xf485, 0x6, 0x8, 0x2, 0xfffffffffffffee6, 0x8, 0x7, 0x10001, 0x8001, 0x1, 0x9, 0x2, 0x8, 0x9, 0xffff, 0x401, 0xfff, 0x8, 0x10000, 0xff, 0x2, 0x80000000, 0x7fffffffffffffff, 0x7, 0x5, 0x80000000, 0x7fffffff, 0x8000, 0x2, 0x3, 0x2, 0xaea, 0x2, 0x7, 0x3adc, 0x8, 0x0, 0x6, 0x5, 0x9, 0x8, 0xfffffffffffffff9, 0xffffffffffffffff, 0xf392, 0x1000, 0x401, 0x3, 0x800000000, 0x3, 0x2, 0x80000000, 0xfb8, 0x8001, 0xdaa, 0xfffffffffffffff7, 0x77, 0x800, 0x9, 0x9, 0x4, 0x8, 0x5, 0x7fffffff, 0x6, 0x3, 0x8000000000000000, 0x873, 0x0, 0x27b]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a80)={r6, 0x1d, 0x0, [0x0, 0x100, 0xffffffffffffffc0, 0xd6, 0x100000001], [0x3, 0x3, 0x2, 0x100, 0x4, 0x4, 0xfffffffffffffffd, 0x9, 0x972e106, 0xffffffffffff54cb, 0x3, 0x0, 0xffff, 0x1, 0x3, 0x0, 0xee, 0x0, 0x5, 0x9, 0x0, 0x8, 0x8000000000000000, 0x10, 0xffffffffffff38ff, 0x748, 0x2, 0x5d, 0x800, 0x0, 0xffffffffffffc29c, 0x8, 0x9, 0x5, 0x81, 0x3, 0xc, 0x7, 0x6, 0xfffffffffffffffa, 0x7, 0x1, 0x8, 0x9, 0x7, 0x8000000000000001, 0x101, 0x8, 0x40, 0x2, 0x6, 0x7, 0x9, 0x8001, 0x6, 0x5, 0x5, 0x9, 0x61184edd, 0x1, 0xcc, 0x7, 0xffffffffffffff58, 0x100000001, 0x10, 0x5, 0x3, 0x8, 0x7, 0x0, 0xea02, 0x7, 0x9, 0x3566, 0x3b6, 0x5, 0x4, 0x400, 0x88, 0x653, 0xf4b, 0x3, 0x8, 0xd, 0x7fffffffffffffff, 0x1000, 0x8, 0x5, 0x7, 0x1ff, 0x8, 0x2, 0x4, 0x7fffffff, 0x2, 0x9db, 0x0, 0x1, 0x0, 0x8, 0xbe, 0x7, 0x2, 0xd4, 0xf, 0x3, 0xe, 0x75588e59, 0x10001, 0x4, 0x200, 0x4, 0x3, 0xc, 0x6, 0x25a, 0x3, 0x0, 0xff, 0x5, 0x8de]}) 15m12.287713722s ago: executing program 7 (id=1752): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000001c0)={0xb6, 0x0, 0x8}) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) socket(0x1000000000000010, 0x80802, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x8280e0, &(0x7f00000004c0)=ANY=[@ANYBLOB='transdno=\x00\x00', @ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',\x00']) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0) 15m10.602892363s ago: executing program 7 (id=1756): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) unlink(&(0x7f0000000000)='./bus/\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000e7000000000000000900000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000065090100000000006600000020207025180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b7030000ffffffff56000000060000002c93000000000000b50300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 15m8.238653718s ago: executing program 36 (id=1738): openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet(0xa, 0x6, 0x84) r0 = syz_open_dev$sndctrl(0x0, 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc10c5541, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) unshare(0x8000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) 15m8.159798922s ago: executing program 7 (id=1758): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) 14m52.52795116s ago: executing program 37 (id=1758): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x400000009) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) 12m30.654779471s ago: executing program 6 (id=2076): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r4, 0x0) 12m23.386027824s ago: executing program 6 (id=2085): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f257f66922e03d008718f18daa14d8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0) unshare(0x400) getpid() mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x208010, 0x0) setns(0xffffffffffffffff, 0x24020000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000029000b0027bd700000000000050000"], 0x14}}, 0x0) r4 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x5) fallocate(r4, 0x3, 0x0, 0x200000) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x1c, 0x2, 0x0, "11010100111400000100b64cd11e005c4b7c1500"}) epoll_create(0x8) 12m22.391605925s ago: executing program 6 (id=2087): r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0) memfd_secret(0x80000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) read(r1, 0x0, 0x0) 12m21.239906132s ago: executing program 6 (id=2089): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_io_uring_setup(0x8d2, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000200)) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4980, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) r3 = io_uring_setup(0xf0b, &(0x7f00000003c0)={0x0, 0xc46e, 0x8000, 0x2, 0x1003}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x20000000) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) io_setup(0x30, &(0x7f00000001c0)) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4) 12m19.01924028s ago: executing program 6 (id=2093): openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r4, 0x0) 12m17.026995989s ago: executing program 6 (id=2099): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893", 0x10}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) write(r5, &(0x7f0000000000)="1c0000001a", 0x5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r6, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r3, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 12m1.896872063s ago: executing program 38 (id=2099): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893", 0x10}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0) write(r5, &(0x7f0000000000)="1c0000001a", 0x5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r6, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r3, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 7m25.501550437s ago: executing program 8 (id=2696): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xe, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000102c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000050000009d0900000000000055090100000000009500000000000000b7020000000000007b9a20fe00000000b609080090ffffff7b9a04ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000001500000086ffffffbf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 7m24.163136956s ago: executing program 8 (id=2698): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x80) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) socket$inet(0x2, 0x2, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "eba828", 0x14, 0x6, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7}}}}}}}, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) 7m22.896466452s ago: executing program 8 (id=2700): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000500)="baf80c66b89481a88c66efbafc0ced660f9b1c2e0f8e1200baf80c66b8f430fd8766efbafc0ced0f20e16736660f7c4d40f3aa66b9b80a000066b8e300000066ba000000000f306766c7442400008000006766c7442402000000006766c744240600000000670f011c240f019b57f5", 0x6f}], 0x1, 0x4, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/234, 0xfffffe85}], 0x1}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) setpriority(0x0, 0x1, 0xa7a8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7m21.239455046s ago: executing program 8 (id=2706): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x7fffffff, 0xda6a, {0xffffffffffffffff}, {}, 0x6}) prlimit64(r2, 0xb, &(0x7f0000000180)={0x2, 0x8}, &(0x7f00000001c0)) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0xffff, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f0000000140)="94", 0x1}], 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x2, 0x3, {0xa, 0x4e22, 0x0, @mcast1, 0x2}}}, 0x3a) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) unshare(0x22020400) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x20000) mknod$loop(&(0x7f00000003c0)='./file0\x00', 0x6000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="11340000000000000a004e2400000006ff02000000000000100096bf00000000000001070000000000000000000000000000009a5d00000000000000000000000000000000cd49c8c60000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000d0b9e58b0107624e123310a92a3a8d4d114b951cd039e767366e0500066c2d4ee677ea269a38d1fc0197e39a9b38108d2a09c81aad3d"], 0x90) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES16=r4, @ANYRESOCT=r7], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) 7m16.545517743s ago: executing program 8 (id=2716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000340)='gfs2\x00', 0x0, 0x0) r5 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) r6 = shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r7) 7m12.083677951s ago: executing program 8 (id=2724): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000010000006b0500000600000042000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xf}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb708, 0x58f}}, @TCA_U32_LINK={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r7, 0x541e, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04008000128009000100766c616e0000000070000280060001000400000004000380580004800c0001000a004000060000000c00010081000000080000000c00010000000000ffffffff0c00010004000000050000000c000100fbffffffff7f00000c00010003000000050000000c00010006000000000000000600050088a8000008000500", @ANYRES32=r8], 0xa8}}, 0x8000002) 6m55.368634292s ago: executing program 39 (id=2724): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000010000006b0500000600000042000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xf}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb708, 0x58f}}, @TCA_U32_LINK={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r7, 0x541e, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04008000128009000100766c616e0000000070000280060001000400000004000380580004800c0001000a004000060000000c00010081000000080000000c00010000000000ffffffff0c00010004000000050000000c000100fbffffffff7f00000c00010003000000050000000c00010006000000000000000600050088a8000008000500", @ANYRES32=r8], 0xa8}}, 0x8000002) 6m41.552701233s ago: executing program 1 (id=2777): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x0, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000080)={'vlan0\x00', 0x0}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x3, 0xcb9, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') preadv(r4, &(0x7f0000002540)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x47fff, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x2a0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000200)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000002c0)=0x28) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e020000001553"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m35.816680356s ago: executing program 1 (id=2785): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket(0x15, 0x80005, 0x0) getsockopt(r6, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0) getsockopt(r2, 0xfff, 0x8, &(0x7f0000000100)=""/134, &(0x7f00000001c0)=0x86) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) fchdir(r1) chroot(&(0x7f0000001640)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m35.094750439s ago: executing program 1 (id=2787): socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0800450000b000660000001190780800001cac1414aa000017c1009c907801000000020000004af1c787262f43baa44f6af78c8b7e82a2db1bcf423afe5d787928e21771ce0d7f859ffcd43656d39e09312599ccd911ad5b94275f847174da8535aa892a29c5f0c56fd89112f9cd5bf81496ea71c3ea26439207bdf5183a9ff4a72eca1ea4c0e943b2773be386948391815a945faa8a2e75e180155a3215d35f005699a38817e8ae9ec8aa3816cb67e7e226e9222dc9c5a324be389d9901ae71595f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x18}], 0x1, 0x0, 0x0, 0xc25f86718fa98117}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00007f7000/0x2000)=nil, 0x2000, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0x1, 0x4, 0x0, 0x3}, {0x800, 0x9, 0x4, 0xe}, {0x4, 0x5, 0x7, 0x7}, {0x1, 0x52, 0x1, 0x5}]}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) 6m33.104816766s ago: executing program 1 (id=2790): signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x7]}, 0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2010000}]}) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f0000000000)) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6m31.958891564s ago: executing program 1 (id=2791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r7, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000}}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2000000}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x8, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) userfaultfd(0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x8}, 0x77) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab6208000700", @ANYRES32=r9, @ANYBLOB="95551ba86f7007e253a3ef44a5005af974dc958f04c9"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 6m27.498755798s ago: executing program 1 (id=2801): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000825bd7000fbdbdf2536000000009900000001002600000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000884) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) 6m10.793891257s ago: executing program 40 (id=2801): r0 = openat$fb0(0xffffff9c, &(0x7f0000000380), 0x280a00, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x1, 0x3, 0x6, 0x5, r1}) socket$inet(0xa, 0x6, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc10c5541, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000002500090122bd7006f9ffffff0200000008003d80ffffffff0800030047000000080040"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) unshare(0x8000000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d696e747b726c656176655ff4a36ddb963d"]) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000825bd7000fbdbdf2536000000009900000001002600000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000884) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, 0x0) 1m21.333065964s ago: executing program 0 (id=4125): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000040) 1m20.957777562s ago: executing program 0 (id=4128): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r1, 0x5}, 0x8) 1m19.954983894s ago: executing program 0 (id=4131): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x800) 1m19.91332576s ago: executing program 0 (id=4132): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x4) 1m19.816288249s ago: executing program 0 (id=4134): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010162, 0x0) 1m18.528716426s ago: executing program 0 (id=4144): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd27, 0x40, {0x7, 0x0, 0x0, r1, 0x0, 0x40002}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m18.360526272s ago: executing program 41 (id=4144): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd27, 0x40, {0x7, 0x0, 0x0, r1, 0x0, 0x40002}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.873015195s ago: executing program 4 (id=4739): socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa00090581", @ANYRES32=r0], 0x0) 5.636814162s ago: executing program 2 (id=4741): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r0, &(0x7f0000000280)='A', 0x1, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.311386052s ago: executing program 3 (id=4747): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r2}) 5.259311115s ago: executing program 3 (id=4748): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x1, 0x0, 0x2, 0x4, 0x6}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 5.224900027s ago: executing program 3 (id=4749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x8000000000000000}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40008c5}, 0x0) 5.040832295s ago: executing program 3 (id=4751): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, r4, 0x24, 0x0, 0xffffffffffffffff, @void, @value=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0xffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000240)={0x4, 0x102, 0x0, {0x0, 0x1000, 0x7, 0xa0}}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003840)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}}, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) bind$xdp(r8, &(0x7f0000000040)={0x2c, 0x6, r2, 0x32, r0}, 0x10) 3.826320636s ago: executing program 3 (id=4754): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 3.76489514s ago: executing program 5 (id=4755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0xfdef, &(0x7f0000000900)=ANY=[], 0x0) 3.752872929s ago: executing program 5 (id=4756): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newchain={0x24, 0x64, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xd}, {0x3, 0xc}, {0xffe0, 0xe}}}, 0x24}}, 0x26000841) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_emit_ethernet(0x132, &(0x7f0000000a00)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0xf8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @loopback, @rand_addr=' \x01\x00', [@fragment={0x3b, 0x0, 0xc, 0x0, 0x0, 0x3, 0x65}, @hopopts={0xc, 0x17, '\x00', [@padn, @generic={0x2, 0x82, "4fc4823421498ad5d3c363f44472bae8657f1f7f2b84bcb5ab284b52c81287bfa970baf6f0c4cbe1b6a835017215445c63275b28bfd59659a3925be76476d00c84c3f6a70cfbdb5d4bdddca7e0fe2790f0fd4f70950000000008013be89270ed3c5eccc91257100ad48807a7850c43389c826b7a9a74606a4a1aa486f3a37e04a7bc"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x7fff, [0x0, 0xfffffffffffffffc, 0x91bc, 0x8, 0xe]}}]}]}}}}}}}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6}) quotactl_fd$Q_GETNEXTQUOTA(r5, 0x0, 0x0, &(0x7f0000000380)) ftruncate(0xffffffffffffffff, 0x1000006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe"], 0x1c}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.38143101s ago: executing program 5 (id=4757): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40), 0x0, 0xc044) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0xffffffffffffff09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() setpgid(r1, r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000040)=0xd, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 3.294615382s ago: executing program 2 (id=4758): openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3.21865519s ago: executing program 4 (id=4759): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r1, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r3, r3) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x2020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x2c83, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0xe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) socket$inet_udp(0x2, 0x2, 0x0) 3.094971152s ago: executing program 2 (id=4762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x1}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x100000, 0x3000, 0x1, 0x0, 0x2}) 2.981162707s ago: executing program 9 (id=4764): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x38d, &(0x7f0000000040)={0x0, 0x3e38, 0x4000, 0x1, 0x176}, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 2.939210705s ago: executing program 9 (id=4765): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @remote}, 0x10) close_range(r0, r0, 0x0) 2.9281546s ago: executing program 2 (id=4766): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lstat(&(0x7f00000005c0)='./file0/file1\x00', &(0x7f0000000600)) 2.220620171s ago: executing program 2 (id=4767): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newchain={0x24, 0x64, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xd}, {0x3, 0xc}, {0xffe0, 0xe}}}, 0x24}}, 0x26000841) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) syz_emit_ethernet(0x132, &(0x7f0000000a00)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0xf8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @loopback, @rand_addr=' \x01\x00', [@fragment={0x3b, 0x0, 0xc, 0x0, 0x0, 0x3, 0x65}, @hopopts={0xc, 0x17, '\x00', [@padn, @generic={0x2, 0x82, "4fc4823421498ad5d3c363f44472bae8657f1f7f2b84bcb5ab284b52c81287bfa970baf6f0c4cbe1b6a835017215445c63275b28bfd59659a3925be76476d00c84c3f6a70cfbdb5d4bdddca7e0fe2790f0fd4f70950000000008013be89270ed3c5eccc91257100ad48807a7850c43389c826b7a9a74606a4a1aa486f3a37e04a7bc"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x7fff, [0x0, 0xfffffffffffffffc, 0x91bc, 0x8, 0xe]}}]}]}}}}}}}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6}) quotactl_fd$Q_GETNEXTQUOTA(r5, 0x0, 0x0, &(0x7f0000000380)) ftruncate(0xffffffffffffffff, 0x1000006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe"], 0x1c}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.219101481s ago: executing program 9 (id=4768): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback, 0x0, 0x4}, 0x20) 1.783136581s ago: executing program 9 (id=4769): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 1.767104159s ago: executing program 2 (id=4770): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r1, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = dup2(r4, r4) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r5, &(0x7f0000002780)={0x2020}, 0x2020) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x2c83, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0xe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) socket$inet_udp(0x2, 0x2, 0x0) 1.746587859s ago: executing program 5 (id=4771): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x202, 0xd9) 1.637120196s ago: executing program 9 (id=4772): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000580)={0x40, 0xf, 0x1, "9f"}, 0x0, 0x0}) 1.633295506s ago: executing program 5 (id=4773): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.554765304s ago: executing program 4 (id=4774): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001880)={&(0x7f0000000880)=[0x0, 0x54, 0x3, 0x7, 0x8, 0x5, 0x8, 0x1000, 0xb11d, 0x0, 0x1, 0x2, 0x0, 0xb, 0x430c, 0x7, 0x1, 0x3, 0x5, 0x4, 0x8, 0x80000001, 0x9, 0x3, 0x81, 0x2, 0x5, 0xfffffff8, 0x10001, 0x825, 0x4, 0x80000001, 0xfffffffa, 0x10000, 0x8, 0x9, 0x80, 0x0, 0xfffffc01, 0x3, 0xc, 0x2, 0x7ff, 0x200, 0xd699, 0xc, 0x3, 0x7, 0xfffffff9, 0x4, 0x6, 0x6, 0x3, 0x9, 0x5, 0x7ff, 0x5, 0x8, 0x401, 0x9, 0x7fff, 0x6, 0x8, 0x1e, 0x3ff, 0x40, 0x10000, 0x7, 0xe7, 0x5, 0x7, 0x5, 0x2, 0x9ba, 0x6, 0x0, 0x200, 0xffffff01, 0xfff, 0x200, 0x10, 0x31c, 0x9, 0x2, 0x4, 0x9, 0x5, 0x6, 0xe63, 0x97, 0x4, 0x8, 0xe21, 0x2000000, 0x800, 0x2, 0x5, 0x10000, 0x3ff, 0x80000000, 0x3, 0xe, 0xfb, 0x6, 0x0, 0x8, 0x10001, 0x9, 0x7, 0x5, 0x3, 0x0, 0x8, 0x6c, 0x7, 0x2, 0xfffffffd, 0x5, 0x8, 0x2, 0x60b, 0x10000, 0x2, 0x4, 0x4f, 0x7, 0xa0e, 0xfffffff0, 0x0, 0x9, 0x1, 0x0, 0x48, 0x3ff, 0x3, 0x3ff, 0x9, 0x8, 0x1, 0x7d8, 0x0, 0x8, 0x1, 0x9, 0x8, 0x200, 0x5, 0x0, 0x1, 0x10000, 0x8, 0x2, 0x99a0, 0x2, 0x2, 0x2e1, 0x7, 0x4, 0x58, 0x3, 0xa, 0x4, 0x2, 0x400, 0xfffffff8, 0xfffffd40, 0x8, 0xe, 0x4a6d, 0x9, 0x7, 0x3, 0x6, 0x9, 0x1, 0x5bbc, 0x7, 0x7, 0x1, 0x5, 0x5a69, 0x101, 0x3, 0x10000, 0x5, 0x1ff, 0x5, 0x1, 0xfffffff8, 0x7, 0x2, 0xfffffff8, 0x5, 0xe, 0x2775, 0xfcff, 0x0, 0x1ff, 0x6, 0x80, 0x5, 0x1000, 0x4, 0x69, 0x6, 0xffff, 0x4, 0xffffffff, 0xa96, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x7, 0x9, 0xd, 0xfffffff7, 0x7fff, 0x3ffa, 0x45, 0x76, 0x3, 0x30000000, 0x3, 0x2, 0x4, 0x4, 0x3ff, 0x2, 0x2, 0x14, 0x3, 0x80, 0x2, 0x200, 0x8, 0x3754, 0xfff, 0xfff, 0xf8, 0x1, 0x81, 0x0, 0x7, 0x8000, 0x1ff, 0x29, 0x80000001, 0x40, 0x8, 0x3, 0x58ad, 0x2790, 0x4, 0x3, 0x1, 0xb, 0x6, 0xd4, 0x8, 0x6, 0x9, 0xe26, 0x7ff, 0xfffffffe, 0x7, 0x5, 0x6c, 0x6, 0xfffffffd, 0xf, 0x10, 0x630, 0x8ae2, 0xe, 0x5, 0x80000001, 0x6, 0x7, 0x4, 0x6, 0x12ece00, 0xe, 0xfffffffa, 0xbb6, 0x7, 0xffff, 0x8, 0x20000000, 0x9, 0x475, 0x5, 0x9, 0x0, 0x3, 0x3, 0x7, 0x101, 0x8, 0x9, 0xff, 0xb44d, 0x0, 0xfffffff9, 0x1, 0xda0, 0xff, 0x200, 0x10000, 0xf93, 0x4, 0xb, 0x6, 0x1ff, 0x8, 0x8, 0xfffffffb, 0xc8, 0x1, 0x9, 0x6, 0x8, 0x3, 0xfffffff8, 0x1, 0x40, 0x1, 0x3, 0x0, 0x2, 0x3, 0x8001, 0xfffffff8, 0x73, 0x5, 0x80000001, 0xe6bf, 0xd862, 0x7fff, 0x6, 0x0, 0x5, 0x4, 0xffffffff, 0x80000001, 0x5, 0x7, 0x4, 0x280, 0x8, 0x6, 0x88d8, 0xfffffff9, 0xffff, 0x463, 0xffff8000, 0x8, 0x3, 0x9, 0x3c6f, 0x8, 0x2, 0x91, 0x539a, 0x6, 0x8e1, 0x280, 0xbecb, 0x9, 0x1ff, 0x7ff, 0x3, 0xc, 0x5, 0x9, 0xffff7365, 0x724, 0x5, 0xfffffffb, 0x0, 0xe, 0x0, 0xfff, 0xa, 0x7f, 0x9, 0x2, 0x3, 0x8f4, 0x763c, 0x4, 0x8, 0x9, 0xfffff800, 0xc, 0x800, 0x6, 0x0, 0x4a, 0x1, 0x8, 0x7, 0x20, 0xef, 0xffffff90, 0x5, 0x1, 0x5, 0x6, 0xe81, 0x7d, 0x8, 0x10001, 0x6a, 0x4ab0, 0x4, 0x13, 0x6, 0x7, 0x5, 0xffffffff, 0x4, 0x6, 0xf, 0x2, 0x101, 0x80, 0x10001, 0x51bf, 0x2, 0x5, 0x80, 0x5, 0x1, 0xe, 0x81, 0x4, 0x6, 0x9, 0x1000, 0x4, 0x5f7, 0xf14, 0x6, 0x40, 0x4, 0x10001, 0x4, 0x80, 0x0, 0x9, 0x0, 0x9, 0x8, 0x11, 0xc, 0x3, 0xfffffffb, 0x0, 0x2, 0x5, 0x9, 0x8, 0x8, 0x12, 0xfffffffd, 0x10001, 0x7, 0x9, 0x5, 0x7f, 0x8, 0xd, 0x81b3, 0x101, 0x1000, 0x2000, 0x265, 0x2, 0x4, 0x7fff, 0x0, 0x3, 0xa91b, 0xa7, 0x84d1, 0x5, 0x9, 0x9, 0x5, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x7, 0x0, 0x4ef7, 0x7fff, 0x8, 0x3, 0xedb1, 0x6, 0xffffffff, 0x9, 0xbf, 0xfffffff9, 0x81, 0x200, 0x4, 0x3, 0x101, 0x101, 0x9f, 0x7, 0x7, 0x7a9, 0x83, 0x1, 0x1, 0xffffffff, 0x38, 0x7f, 0x4, 0x1000, 0x7f, 0x100, 0xffff8000, 0x0, 0x9532, 0x1000, 0x9, 0x4, 0xfffffff4, 0xcf8c, 0x5, 0xffffffff, 0xd, 0x3, 0xd, 0x800, 0x5, 0x3b854e9d, 0x7ff, 0x5, 0x3, 0x6, 0x81, 0x9, 0x5, 0x8, 0xb9a8, 0x50e0, 0x6, 0x3, 0x1, 0x7fffffff, 0x3, 0x1000, 0xfffffff9, 0xffff, 0x1, 0x4, 0x939, 0x8000, 0x2, 0x1, 0x7fffffff, 0x9, 0x9b42, 0xe, 0x4, 0x5, 0x10001, 0x1, 0x7, 0x0, 0xffffffff, 0xe4, 0x5, 0x1, 0x5, 0x7, 0x45c, 0x8, 0x1, 0x1, 0x3, 0x100, 0x10000, 0x7, 0x4, 0x5, 0x9, 0x5, 0x8, 0xffbe, 0x1000, 0x4, 0xe, 0xf, 0x2, 0x5, 0x8001, 0x9, 0x3, 0x3, 0x40, 0x1e06, 0x2, 0x4, 0x100, 0x7, 0x7, 0x7, 0x4, 0x200, 0xfffffffb, 0x8e1, 0xc, 0x2, 0x6, 0x2b, 0x6, 0xb5a, 0x5, 0x4, 0x9, 0x3ff, 0xff, 0x6, 0x5, 0x8, 0xd7, 0xfffff801, 0xe, 0x101, 0x2, 0x0, 0x6, 0xba, 0x80000001, 0xbf, 0xc0000000, 0x6, 0x5, 0x1ff, 0x8, 0xc, 0x5, 0x6, 0x8, 0x2, 0x19, 0x80000001, 0x7d7, 0x2, 0x9, 0x9, 0x8, 0x3, 0x0, 0x4, 0x1, 0x8, 0xe, 0x80000001, 0x81, 0xfff, 0x3, 0x3, 0x4, 0x1, 0x0, 0x9, 0x13, 0x81, 0x1, 0x8000, 0x7, 0x1, 0x6, 0x2, 0x395, 0x207, 0x2, 0x9, 0x9, 0x5, 0xee, 0x1, 0xd4, 0x6, 0x2, 0xc1, 0x1, 0x0, 0x1, 0x9, 0x5, 0xe752, 0x8, 0x1, 0xe69, 0x3, 0x9, 0x80, 0x7f, 0x8, 0xf57, 0x55d, 0xffd, 0x5, 0x2, 0xf1a, 0x7, 0xfffff99a, 0x7f, 0xfffffffc, 0xd, 0x8c19, 0xc62a, 0x9, 0x3, 0x100, 0x2, 0x10000, 0x9, 0x7fff, 0xaf, 0x2, 0x971f, 0x5, 0xc420, 0x5, 0x7fff, 0x5, 0x0, 0x2, 0xb4b, 0x1, 0x101, 0xa2, 0x40, 0x8, 0xffff, 0x58e84d4b, 0x1c, 0x9, 0x3ff, 0x1, 0x4, 0x7fff, 0x4, 0x1615, 0x4, 0x4, 0x6, 0x4, 0x9e17, 0x893, 0xfff, 0xfffffffa, 0xf4a0, 0xc7d0, 0x3, 0x3, 0x9, 0x2, 0x3, 0xe7c, 0x5, 0x5, 0x8, 0x2, 0x1, 0x40, 0x5, 0x4, 0x3, 0x2, 0x7, 0x6, 0x1, 0x401, 0x63, 0x4, 0x6, 0x2, 0x0, 0x5, 0x5, 0x7fffffff, 0xc, 0x80, 0x56, 0x4, 0x29a2, 0x7, 0x9, 0xcee, 0x7, 0x1, 0x3, 0x7fffffff, 0x8001, 0x3, 0x2, 0x0, 0x7, 0x4, 0x1, 0x6, 0x2, 0x90, 0x2, 0x667, 0x6, 0x6, 0x8, 0x3, 0xffffffff, 0xfff, 0xdb54, 0x1, 0x4, 0x200, 0xff, 0xde95, 0x709c593c, 0x6d, 0xe, 0x5cfdf5b2, 0x7789, 0x9, 0x770a, 0x1, 0xd15, 0xdd0, 0xe, 0xffffffd7, 0x8, 0x9dd, 0x3, 0x3, 0x4, 0x5, 0x1000, 0x1, 0x950, 0x0, 0x5, 0x6, 0x3, 0x5, 0x0, 0x4, 0x0, 0x8, 0x3384, 0x10001, 0x3, 0x4, 0x5, 0x0, 0x2, 0x7fce, 0x9, 0x2f, 0x5dfc, 0xab, 0x7, 0x1, 0x236, 0x0, 0x3, 0x2, 0xb53, 0x7, 0x7, 0x6, 0xf, 0x7fffffff, 0xc, 0x4, 0x3, 0xbdb5, 0x1174, 0x7, 0xb325, 0x7fffffff, 0x5, 0x5, 0x809, 0x4, 0x9, 0xffff2878, 0x4e4c, 0x80000001, 0x80, 0x2, 0xc186, 0x6, 0x0, 0x4, 0x7ff, 0x9, 0x4, 0x1, 0x3, 0x2, 0x4, 0x9, 0x8, 0x3, 0x6, 0x1, 0x10000, 0xd5, 0x1, 0x3, 0x337a1f48, 0x0, 0x57, 0xfdc, 0x0, 0x9, 0x89, 0x8001, 0xfff, 0x3, 0x4, 0x2941, 0x0, 0x480, 0x9, 0x6, 0x0, 0x1000000, 0x100000, 0x3ff, 0x2, 0x0, 0xe, 0x2, 0x3, 0x13, 0x22, 0x5, 0x8, 0x5, 0x5b0831fc, 0x8001, 0xfffffff7, 0x10, 0x76c6, 0x101, 0x81, 0x5, 0x3, 0x7, 0x6b2d, 0x2c1, 0xfffffff9, 0x0, 0x9, 0xb0, 0x2b88000, 0x2, 0x0, 0xa9, 0x1, 0xfffffff7, 0x1, 0x1e2, 0x0, 0x80, 0x6, 0x800, 0x622, 0x3, 0x7, 0x0, 0x8, 0x0, 0xffffff32, 0x21d, 0x21fa, 0xd, 0x0, 0x80000001, 0x0, 0x5d4, 0x2, 0x200, 0xc50, 0x8, 0x3, 0xc30, 0xb441, 0x30, 0x1, 0x7, 0x7, 0xff, 0x7fff, 0x80000000, 0x9, 0x8, 0x2, 0x7a, 0x800000, 0x2, 0x5, 0x3, 0x4, 0x8, 0x4, 0x1, 0x7, 0x100, 0xe4a8, 0x8], 0x6, 0x400, 0x8}) 1.507921162s ago: executing program 4 (id=4775): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40), 0x0, 0xc044) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0xffffffffffffff09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setpgid(r1, r1) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000040)=0xd, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 212.384174ms ago: executing program 5 (id=4776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x84, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x1d, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x13}, 0x5, 0x42, @broadcast, 0x1, 0xa}}, @supported_rates]}]]}, 0x84}}, 0x0) 168.023379ms ago: executing program 9 (id=4777): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = dup2(r2, r2) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x2020) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0xe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) socket$inet_udp(0x2, 0x2, 0x0) 166.964531ms ago: executing program 4 (id=4778): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000500)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read(r0, 0x0, 0x0) 145.415242ms ago: executing program 3 (id=4779): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 4 (id=4780): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 27] scsi host1: usb-storage 5-1:0.0 [ 1734.745891][T24038] netlink: 'syz.9.3953': attribute type 10 has an invalid length. [ 1734.796909][T24042] netlink: 'syz.9.3953': attribute type 10 has an invalid length. [ 1734.916108][T19427] usb 5-1: USB disconnect, device number 54 [ 1735.122183][T24038] bond0: (slave netdevsim1): Releasing backup interface [ 1735.361967][T24038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1735.420326][T24038] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 1735.484973][T24038] team0: Port device netdevsim1 added [ 1735.514790][T24042] netdevsim netdevsim9 netdevsim1: left promiscuous mode [ 1735.532603][T24042] netdevsim netdevsim9 netdevsim1: left allmulticast mode [ 1735.554128][T24042] team0: Port device netdevsim1 removed [ 1735.579483][T24042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1735.601874][T24042] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1735.618143][T24042] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1735.711436][T19427] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1735.795105][ T30] audit: type=1400 audit(1779925552.521:3577): avc: denied { write } for pid=24047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1735.891164][T24075] kAFS: unable to lookup cell ' ' [ 1735.936174][ T30] audit: type=1400 audit(1779925552.652:3578): avc: denied { bind } for pid=24076 comm="syz.5.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1735.959085][T19427] usb 1-1: Using ep0 maxpacket: 16 [ 1735.987520][T19427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1736.000892][ T30] audit: type=1400 audit(1779925552.652:3579): avc: denied { getopt } for pid=24076 comm="syz.5.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1736.023319][T19427] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1736.036917][T19427] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1736.065850][T19427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.114173][T24080] netlink: 'syz.4.3963': attribute type 10 has an invalid length. [ 1736.134651][ T30] audit: type=1400 audit(1779925552.839:3580): avc: denied { write } for pid=24078 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1736.168180][T24075] netlink: 'syz.4.3963': attribute type 10 has an invalid length. [ 1736.183663][T24083] kAFS: unable to lookup cell ' ' [ 1736.191517][T19427] usb 1-1: config 0 descriptor?? [ 1736.206448][T24075] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1736.258187][T24080] bond0: (slave netdevsim1): Releasing backup interface [ 1736.368231][T24087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1736.409519][T24087] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1736.426041][T24087] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1736.478328][T24087] team0: Port device netdevsim1 added [ 1736.491258][T24089] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1736.520083][T24089] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1736.548301][T24089] team0: Port device netdevsim1 removed [ 1736.554095][T24087] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1736.706422][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.730128][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.754914][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.782309][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.799821][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.811299][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.821169][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.829723][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.846447][T19427] apple 0003:05AC:024B.000A: unknown main item tag 0x0 [ 1736.990801][T24103] validate_nla: 2 callbacks suppressed [ 1736.990820][T24103] netlink: 'syz.9.3972': attribute type 9 has an invalid length. [ 1736.993033][T19427] apple 0003:05AC:024B.000A: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 1737.074800][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3972'. [ 1737.079271][T19427] usb 1-1: USB disconnect, device number 32 [ 1737.745177][T19427] kernel write not supported for file /input/event2 (pid: 19427 comm: kworker/1:9) [ 1738.062912][T19427] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1738.248514][T19427] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1738.276355][T19427] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1738.297802][T19427] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.309256][T19427] usb 1-1: config 220 has no interface number 2 [ 1738.315574][T19427] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1738.338471][T19427] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1738.359430][T19427] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1738.374271][T19427] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1738.393346][T19427] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1738.403439][T24146] kAFS: unable to lookup cell ' ' [ 1738.408726][T19427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.418455][T19427] usb 1-1: Product: syz [ 1738.422675][T19427] usb 1-1: Manufacturer: syz [ 1738.428761][T19427] usb 1-1: SerialNumber: syz [ 1738.515087][T24149] netlink: 'syz.4.3989': attribute type 10 has an invalid length. [ 1738.538244][T24149] netlink: 'syz.4.3989': attribute type 10 has an invalid length. [ 1738.584648][T24149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1738.613125][T24152] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1738.627293][T24149] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1738.668729][T19427] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1738.700163][T19427] uvcvideo 1-1:220.0: No valid video chain found. [ 1738.709153][T19427] usb 1-1: selecting invalid altsetting 0 [ 1738.724359][T19427] usb 1-1: selecting invalid altsetting 0 [ 1738.730597][T19427] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1738.754317][T24154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3994'. [ 1738.773076][T19427] usb 1-1: USB disconnect, device number 33 [ 1738.908357][T24159] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1739.160531][T24172] kAFS: unable to lookup cell ' ' [ 1739.215291][T24172] netlink: 'syz.9.3999': attribute type 10 has an invalid length. [ 1739.318184][T24172] bond0: (slave netdevsim1): Releasing backup interface [ 1739.414553][T24172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1739.424292][T24181] netlink: 'syz.9.3999': attribute type 10 has an invalid length. [ 1739.509676][T24172] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 1739.566559][T24172] team0: Port device netdevsim1 added [ 1739.578095][T24184] kAFS: unable to lookup cell ' ' [ 1739.616995][T24181] netdevsim netdevsim9 netdevsim1: left promiscuous mode [ 1739.648560][T24181] netdevsim netdevsim9 netdevsim1: left allmulticast mode [ 1739.708860][T24181] team0: Port device netdevsim1 removed [ 1739.728981][T24191] netlink: 'syz.0.4005': attribute type 10 has an invalid length. [ 1739.759678][T24181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1739.810687][T24196] netlink: 'syz.0.4005': attribute type 10 has an invalid length. [ 1739.824431][T24181] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1739.839095][T24181] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1739.954962][T24198] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1739.964249][T24191] bond0: (slave netdevsim1): Releasing backup interface [ 1739.986741][T20122] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 1739.986790][T20122] Bluetooth: hci0: Dropping invalid advertising data [ 1740.001528][T20122] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1740.033793][T24191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.086971][T24191] team0: Port device netdevsim1 added [ 1740.106398][T24196] team0: Port device netdevsim1 removed [ 1740.135619][T24196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.187031][T24196] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1740.413398][T24209] kAFS: unable to lookup cell ' ' [ 1740.500880][T24210] netlink: 'syz.3.4012': attribute type 10 has an invalid length. [ 1740.620241][T24211] netlink: 'syz.3.4012': attribute type 10 has an invalid length. [ 1740.661569][T24210] bond0: (slave netdevsim1): Releasing backup interface [ 1740.686989][T24209] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1740.711739][T24210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.747737][T24210] team0: Port device netdevsim1 added [ 1740.817178][T24211] team0: Port device netdevsim1 removed [ 1740.855144][T24211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.884566][T24211] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1741.064183][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4018'. [ 1741.257632][T19427] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1741.449929][T19427] usb 5-1: Using ep0 maxpacket: 16 [ 1741.467668][T19427] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1741.480278][T24241] kAFS: unable to lookup cell ' ' [ 1741.488358][T19427] usb 5-1: config 1 has an invalid interface number: 237 but max is 0 [ 1741.499607][T19427] usb 5-1: config 1 has no interface number 0 [ 1741.514053][T19427] usb 5-1: config 1 interface 237 has no altsetting 0 [ 1741.521447][T24241] netlink: 'syz.5.4023': attribute type 10 has an invalid length. [ 1741.535052][T19427] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 1741.545192][T19427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.564782][T19427] usb 5-1: Product: syz [ 1741.573300][T19427] usb 5-1: Manufacturer: syz [ 1741.581019][T24241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1741.599179][T19427] usb 5-1: SerialNumber: syz [ 1741.655868][T24241] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1741.684317][T24245] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1741.724662][T24241] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1741.767076][T24241] team0: Port device netdevsim1 added [ 1741.776132][T24243] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1741.903196][T24243] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1741.945037][T24243] team0: Port device netdevsim1 removed [ 1741.999290][T19425] IPVS: starting estimator thread 0... [ 1742.112433][T24254] IPVS: using max 49 ests per chain, 117600 per kthread [ 1742.211609][T24262] kAFS: unable to lookup cell ' ' [ 1742.236424][T24264] vxcan0: tx address claim with dest, not broadcast [ 1742.328470][T19427] ipaq 5-1:1.237: PocketPC PDA converter detected [ 1742.355075][T24266] validate_nla: 2 callbacks suppressed [ 1742.355095][T24266] netlink: 'syz.9.4030': attribute type 10 has an invalid length. [ 1742.418708][ T30] audit: type=1400 audit(1779925558.725:3581): avc: denied { watch } for pid=24265 comm="syz.0.4033" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1742.446831][T24262] bond0: (slave netdevsim1): Releasing backup interface [ 1742.501313][T19427] usb 5-1: PocketPC PDA converter now attached to ttyUSB0 [ 1742.615124][T19427] usb 5-1: USB disconnect, device number 55 [ 1742.626498][T24262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1742.644624][T19427] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1742.676008][T19427] ipaq 5-1:1.237: device disconnected [ 1742.709344][T24272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4035'. [ 1742.720220][T24262] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 1742.734809][T24262] team0: Port device netdevsim1 added [ 1742.755142][T24266] netdevsim netdevsim9 netdevsim1: left promiscuous mode [ 1742.781591][T24266] netdevsim netdevsim9 netdevsim1: left allmulticast mode [ 1742.815305][T24266] team0: Port device netdevsim1 removed [ 1742.839945][T24266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1742.870066][T24266] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1742.884997][T24266] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1742.991270][T24274] netlink: 167080 bytes leftover after parsing attributes in process `syz.0.4036'. [ 1743.443617][T24290] kAFS: unable to lookup cell ' ' [ 1743.557149][T24298] netlink: 'syz.5.4041': attribute type 10 has an invalid length. [ 1743.584850][T24298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1743.596760][T24298] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1743.610270][T24298] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1743.625296][T24298] team0: Port device netdevsim1 added [ 1743.642445][T24302] netlink: 'syz.5.4041': attribute type 10 has an invalid length. [ 1743.653812][T24302] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1743.673840][T19427] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1743.682232][T24302] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1743.795559][T24307] kAFS: unable to lookup cell ' ' [ 1743.803959][T24302] team0: Port device netdevsim1 removed [ 1743.819055][T24298] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1743.829248][T24307] netlink: 'syz.9.4048': attribute type 10 has an invalid length. [ 1743.838932][ T5828] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1743.861629][T24307] bond0: (slave netdevsim1): Releasing backup interface [ 1743.887783][T19427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1743.905321][T19427] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1743.917600][T24307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1743.925605][T24309] netlink: 'syz.9.4048': attribute type 10 has an invalid length. [ 1743.936867][T19427] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 1743.946312][T19427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.957552][T24307] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 1743.966969][T19427] usb 5-1: config 0 descriptor?? [ 1743.976423][T24289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1744.009389][T24307] team0: Port device netdevsim1 added [ 1744.019389][T24309] netdevsim netdevsim9 netdevsim1: left promiscuous mode [ 1744.034177][T24309] netdevsim netdevsim9 netdevsim1: left allmulticast mode [ 1744.049378][ T5828] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1744.075698][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.088707][T24309] team0: Port device netdevsim1 removed [ 1744.105794][T24309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1744.114111][ T5828] usb 1-1: Product: syz [ 1744.128138][ T5828] usb 1-1: Manufacturer: syz [ 1744.137489][T24309] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1744.150457][ T5828] usb 1-1: SerialNumber: syz [ 1744.160594][T24309] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1744.181505][ T5828] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1744.465055][T19427] hid_parser_main: 60 callbacks suppressed [ 1744.465069][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.484960][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.515200][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.652566][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.661665][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.676397][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.727622][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.728401][ T803] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1744.770851][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.801166][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.830313][T19427] cypress 0003:04B4:BCA1.000B: unknown main item tag 0x0 [ 1744.867680][T19427] cypress 0003:04B4:BCA1.000B: hidraw0: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.4-1/input0 [ 1744.919505][T19427] usb 5-1: USB disconnect, device number 56 [ 1745.011244][T19424] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1745.052300][T24313] fido_id[24313]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1745.200629][T19424] usb 4-1: Using ep0 maxpacket: 16 [ 1745.216717][T19424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.262131][T19424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.292008][T19424] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1745.317569][T19424] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1745.348556][T19424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.373878][T19424] usb 4-1: config 0 descriptor?? [ 1745.460706][T24329] SELinux: failed to load policy [ 1745.496782][ T9540] usb 1-1: USB disconnect, device number 34 [ 1745.665239][T24339] kAFS: unable to lookup cell ' ' [ 1745.709071][T24339] netlink: 'syz.9.4058': attribute type 10 has an invalid length. [ 1745.758982][T24339] bond0: (slave netdevsim1): Releasing backup interface [ 1745.790189][T24344] netlink: 'syz.9.4058': attribute type 10 has an invalid length. [ 1745.819481][T24346] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1745.833978][T24339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1745.862206][T24346] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1745.899106][T19424] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input47 [ 1745.911720][T24339] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 1745.931653][T24346] overlayfs: failed to get uuid (813/file2, err=-13); falling back to uuid=null. [ 1746.001290][T24339] team0: Port device netdevsim1 added [ 1746.053534][T24344] netdevsim netdevsim9 netdevsim1: left promiscuous mode [ 1746.114106][T24344] netdevsim netdevsim9 netdevsim1: left allmulticast mode [ 1746.173930][ T803] usb 1-1: Service connection timeout for: 256 [ 1746.231491][ T803] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1746.236918][T24344] team0: Port device netdevsim1 removed [ 1746.250113][T19424] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1746.289972][T24344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1746.422426][ T803] ath9k_htc: Failed to initialize the device [ 1746.424905][T19424] usb 4-1: USB disconnect, device number 32 [ 1746.861809][ T9540] usb 1-1: ath9k_htc: USB layer deinitialized [ 1746.903779][T24344] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1746.934472][T24344] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1747.122140][T24352] fido_id[24352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1747.547080][T20122] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 1747.547116][T20122] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 1747.560157][T20122] Bluetooth: hci1: Dropping invalid advertising data [ 1747.574547][T20122] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1747.624180][ T30] audit: type=1400 audit(1779925563.591:3582): avc: denied { getopt } for pid=24372 comm="syz.4.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1748.280935][T24396] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1748.532225][T24409] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4088'. [ 1748.638203][T24413] kAFS: unable to lookup cell ' ' [ 1748.685263][T24413] netlink: 'syz.9.4087': attribute type 10 has an invalid length. [ 1748.762077][T24413] bond0: (slave netdevsim1): Releasing backup interface [ 1748.784051][T24420] netlink: 'syz.9.4087': attribute type 10 has an invalid length. [ 1748.824892][T24413] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1748.853588][T24426] kAFS: unable to lookup cell ' ' [ 1748.910473][T24413] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 1748.936315][T24413] team0: Port device netdevsim1 added [ 1748.966049][T24420] netdevsim netdevsim9 netdevsim1: left promiscuous mode [ 1748.976692][ T30] audit: type=1400 audit(1779925564.845:3583): avc: denied { unmount } for pid=19554 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1749.000881][T24420] netdevsim netdevsim9 netdevsim1: left allmulticast mode [ 1749.063431][T24420] team0: Port device netdevsim1 removed [ 1749.080690][T24420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1749.088629][T24433] netlink: 'syz.4.4090': attribute type 10 has an invalid length. [ 1749.105084][T24432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1749.115299][T24420] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1749.129617][T24420] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1749.200771][T24438] netlink: 'syz.4.4090': attribute type 10 has an invalid length. [ 1749.232615][T24433] bond0: (slave netdevsim1): Releasing backup interface [ 1749.291379][T24438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1749.323188][T24438] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1749.518159][T19427] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1749.678208][T19424] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1749.699511][ T9540] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1749.710188][T19427] usb 4-1: Using ep0 maxpacket: 16 [ 1749.719759][T19427] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.750962][T19427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1749.760256][T19427] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1749.790924][T19427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.860335][ T9540] usb 6-1: Using ep0 maxpacket: 8 [ 1749.867924][ T9540] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1749.877566][ T9540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.900268][ T9540] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1749.918639][ T9540] pvrusb2: ********** [ 1749.922827][ T9540] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1749.934823][T19424] usb 1-1: Using ep0 maxpacket: 32 [ 1749.940648][T19427] usb 4-1: config 0 descriptor?? [ 1749.948147][ T9540] pvrusb2: Important functionality might not be entirely working. [ 1749.950236][T19424] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1749.979683][T19424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.988014][T19424] usb 1-1: Product: syz [ 1749.993805][T19424] usb 1-1: Manufacturer: syz [ 1749.995363][ T9540] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1749.998495][T19424] usb 1-1: SerialNumber: syz [ 1750.043726][T24452] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4102'. [ 1750.059697][T19424] usb 1-1: config 0 descriptor?? [ 1750.066484][ T9540] pvrusb2: ********** [ 1750.078337][T19424] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1750.126273][ T2357] pvrusb2: Invalid write control endpoint [ 1750.430440][ T2357] pvrusb2: Invalid write control endpoint [ 1750.438151][T19427] mcp2221 0003:04D8:00DD.000D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1750.458210][ T2357] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1750.478514][ T2357] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1750.500790][ T2357] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1750.517922][ T2357] pvrusb2: Device being rendered inoperable [ 1750.541692][T24448] pvrusb2: Attempted to execute control transfer when device not ok [ 1750.556412][T19425] usb 6-1: USB disconnect, device number 29 [ 1750.587520][ T2357] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1750.613049][ T2357] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1750.665897][ T2357] pvrusb2: Attached sub-driver cx25840 [ 1750.688725][ T2357] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1750.715277][ T2357] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1750.982137][T19424] gspca_ov534_9: reg_w failed -71 [ 1751.001337][T19427] usb 4-1: USB disconnect, device number 33 [ 1751.294184][T24472] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.346205][T19424] gspca_ov534_9: Unknown sensor 0000 [ 1751.346283][T19424] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1751.393823][T19424] usb 1-1: USB disconnect, device number 35 [ 1751.447186][T24472] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.554080][T24472] bond0: (slave netdevsim1): Releasing backup interface [ 1751.567409][T24472] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1751.914545][T24492] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1752.095960][T24502] kAFS: unable to lookup cell ' ' [ 1752.333469][T24512] netlink: 'syz.3.4122': attribute type 10 has an invalid length. [ 1752.411336][T24517] netlink: 'syz.3.4122': attribute type 10 has an invalid length. [ 1752.490943][T24512] bond0: (slave netdevsim1): Releasing backup interface [ 1752.517554][T24512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1752.535671][T24502] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1752.564627][T24522] kAFS: unable to lookup cell ' ' [ 1752.573275][T24512] team0: Port device netdevsim1 added [ 1752.599344][ T1164] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.638737][T24517] team0: Port device netdevsim1 removed [ 1752.698235][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4129'. [ 1752.708454][T24517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1752.723176][T24524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4129'. [ 1752.736422][T24517] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1752.886714][T24526] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1752.932408][ T1164] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.028735][T24530] kAFS: unable to lookup cell ' ' [ 1753.053215][ T1164] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.097041][ T1164] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.179540][T24531] netlink: 'syz.4.4130': attribute type 10 has an invalid length. [ 1753.195618][T24531] bond0: (slave netdevsim1): Releasing backup interface [ 1753.259270][T24530] netlink: 'syz.4.4130': attribute type 10 has an invalid length. [ 1753.293421][T24530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1753.322092][T24531] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1753.360657][T24530] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1754.390622][ T5828] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1754.476130][ T9540] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1754.554417][T21463] syz_tun (unregistering): left allmulticast mode [ 1754.559386][T24559] kAFS: unable to lookup cell ' ' [ 1754.565784][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.581205][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.607288][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1754.637524][ T9540] usb 6-1: Using ep0 maxpacket: 16 [ 1754.644377][ T9540] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1754.659457][ T5828] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1754.668619][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.679026][T24560] netlink: 'syz.4.4143': attribute type 10 has an invalid length. [ 1754.688212][ T9540] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1754.701832][T24560] bond0: (slave netdevsim1): Releasing backup interface [ 1754.710379][ T5828] usb 4-1: config 0 descriptor?? [ 1754.715414][ T9540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.782171][T24559] netlink: 'syz.4.4143': attribute type 10 has an invalid length. [ 1754.796248][ T9540] usb 6-1: config 0 descriptor?? [ 1754.850311][T24560] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1754.918058][T24559] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1754.972015][T24559] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1755.266153][ T5828] plantronics 0003:047F:FFFF.000E: unbalanced delimiter at end of report description [ 1755.303551][ T5828] plantronics 0003:047F:FFFF.000E: parse failed [ 1755.312706][ T5828] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 1755.392251][T17695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.455407][ T9540] hid_parser_main: 209 callbacks suppressed [ 1755.455429][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.511404][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1755.526383][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1755.538148][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1755.547159][ T5802] usb 4-1: USB disconnect, device number 34 [ 1755.556229][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1755.563993][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.572595][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1755.584306][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.593574][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.601569][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.609356][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.623535][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.646781][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.654118][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.661360][ T9540] greenasia 0003:0E8F:0012.000F: unknown main item tag 0x0 [ 1755.682150][ T9540] greenasia 0003:0E8F:0012.000F: item fetching failed at offset 10/44 [ 1755.705545][ T9540] greenasia 0003:0E8F:0012.000F: parse failed [ 1755.715177][ T9540] greenasia 0003:0E8F:0012.000F: probe with driver greenasia failed with error -22 [ 1755.772316][ T9540] usb 6-1: USB disconnect, device number 30 [ 1755.929207][T17695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.062381][T24579] kAFS: unable to lookup cell ' ' [ 1756.104345][T24579] netlink: 'syz.9.4148': attribute type 10 has an invalid length. [ 1756.171351][T24582] netlink: 'syz.9.4148': attribute type 10 has an invalid length. [ 1756.184280][T17695] bond0: (slave netdevsim1): Releasing backup interface [ 1756.203935][T17695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.320414][T24592] kAFS: unable to lookup cell ' ' [ 1756.476543][ T30] audit: type=1400 audit(1779925571.882:3584): avc: denied { create } for pid=24598 comm="syz.5.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1756.538752][ T30] audit: type=1400 audit(1779925571.901:3585): avc: denied { write } for pid=24598 comm="syz.5.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1756.677147][T24592] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1756.794747][T17695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.021627][T24564] lo speed is unknown, defaulting to 1000 [ 1757.730074][T24623] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1757.779123][T24623] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 1757.801147][T20122] Bluetooth: hci1: command tx timeout [ 1758.057429][T17695] bridge_slave_1: left allmulticast mode [ 1758.664434][T17695] bridge_slave_1: left promiscuous mode [ 1758.691235][T17695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.715890][T17695] bridge_slave_0: left allmulticast mode [ 1758.731696][T17695] bridge_slave_0: left promiscuous mode [ 1758.744976][T17695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.972699][T24660] kAFS: unable to lookup cell ' ' [ 1759.826657][T24660] netlink: 'syz.5.4171': attribute type 10 has an invalid length. [ 1759.846745][ T30] audit: type=1400 audit(1779925574.998:3586): avc: denied { write } for pid=24631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1759.874886][T24668] netlink: 'syz.5.4171': attribute type 10 has an invalid length. [ 1759.941543][T24674] kAFS: unable to lookup cell ' ' [ 1759.997710][T24675] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1760.024462][T20122] Bluetooth: hci1: command tx timeout [ 1760.073525][ T30] audit: type=1400 audit(1779925575.242:3587): avc: denied { write } for pid=24673 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1760.385190][T17695] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1760.394324][T17695] geneve2 (unregistering): left allmulticast mode [ 1760.488815][T17695] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1760.634271][T17695] bond2 (unregistering): (slave bond0): Releasing active interface [ 1760.659507][T17695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1760.672791][T17695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1760.691627][T17695] bond0 (unregistering): Released all slaves [ 1760.732063][T17695] bond1 (unregistering): Released all slaves [ 1760.751980][T17695] bond2 (unregistering): Released all slaves [ 1760.867798][T24660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1760.949247][T24660] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1761.031843][T24660] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1761.086394][T24660] team0: Port device netdevsim1 added [ 1761.152382][T24668] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1761.168355][T24668] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1761.195416][T24668] team0: Port device netdevsim1 removed [ 1761.213628][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1761.242277][T24702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4181'. [ 1761.335049][T17695] : left promiscuous mode [ 1761.416777][T24707] kAFS: unable to lookup cell ' ' [ 1761.467942][T24707] netlink: 'syz.9.4183': attribute type 10 has an invalid length. [ 1761.529264][T24710] kAFS: unable to lookup cell ' ' [ 1761.539128][T24564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.551606][T24564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.560099][T24711] netlink: 'syz.9.4183': attribute type 10 has an invalid length. [ 1761.579556][T24564] bridge_slave_0: entered allmulticast mode [ 1761.629109][T24564] bridge_slave_0: entered promiscuous mode [ 1761.661387][T24564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.691838][T24564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.714177][T24564] bridge_slave_1: entered allmulticast mode [ 1761.726245][T24564] bridge_slave_1: entered promiscuous mode [ 1761.815785][T24721] kAFS: unable to lookup cell ' ' [ 1761.853278][T24710] netlink: 'syz.3.4184': attribute type 10 has an invalid length. [ 1761.915252][T24722] netlink: 'syz.3.4184': attribute type 10 has an invalid length. [ 1762.083716][T24731] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1762.244939][T20122] Bluetooth: hci1: command tx timeout [ 1762.481886][T24710] bond0: (slave netdevsim1): Releasing backup interface [ 1762.501813][ T9540] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1762.556609][T24710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1762.662502][T24710] team0: Port device netdevsim1 added [ 1762.697989][ T30] audit: type=1400 audit(1779925577.684:3588): avc: denied { write } for pid=24719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1762.725090][ T9540] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1762.753411][ T9540] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.777596][T24722] team0: Port device netdevsim1 removed [ 1762.794046][ T9540] usb 6-1: Product: syz [ 1762.811352][ T9540] usb 6-1: Manufacturer: syz [ 1762.818710][T24722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1762.840987][ T9540] usb 6-1: SerialNumber: syz [ 1762.862465][T24722] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1763.032757][ T30] audit: type=1400 audit(1779925578.012:3589): avc: denied { watch_mount } for pid=24746 comm="syz.9.4191" path="/553" dev="tmpfs" ino=2963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1763.075000][T24564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1763.121385][ T30] audit: type=1400 audit(1779925578.040:3590): avc: denied { write } for pid=24745 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1763.245865][T24564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.258596][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1763.332464][T24564] team0: Port device team_slave_0 added [ 1763.383450][T24564] team0: Port device team_slave_1 added [ 1763.492020][T24564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1763.509965][T24564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.578703][T24564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1763.655960][T24564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.678302][T24564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.750298][T24564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.804132][ T9540] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1763.855627][ T9540] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1763.893800][ T9540] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1764.010539][ T9540] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1764.021491][T17695] hsr_slave_0: left promiscuous mode [ 1764.041312][T17695] hsr_slave_1: left promiscuous mode [ 1764.055169][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1764.064895][ T9540] usb 6-1: USB disconnect, device number 31 [ 1764.073135][T17695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1764.109725][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1764.137557][T17695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1764.254412][ T5736] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1764.298111][T17695] veth0_macvtap: left promiscuous mode [ 1764.303908][T17695] veth1_vlan: left promiscuous mode [ 1764.309965][T17695] veth0_vlan: left promiscuous mode [ 1764.316171][ T30] audit: type=1400 audit(1779925579.210:3591): avc: denied { write } for pid=24754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1764.446651][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 1764.453730][ T5736] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1764.461522][ T5736] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1764.473672][T20122] Bluetooth: hci1: command tx timeout [ 1764.495501][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.517053][ T5736] usb 4-1: config 0 descriptor?? [ 1764.539687][ T30] audit: type=1400 audit(1779925579.425:3592): avc: denied { write } for pid=24778 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1764.627932][ T9540] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1764.809915][ T9540] usb 5-1: Using ep0 maxpacket: 32 [ 1764.831977][ T9540] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1764.843647][ T9540] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1764.850387][ T9540] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1764.855411][T17695] team0 (unregistering): Port device team_slave_1 removed [ 1764.861648][ T9540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.881529][T17695] team0 (unregistering): Port device team_slave_0 removed [ 1764.885707][ T9540] usb 5-1: config 0 descriptor?? [ 1764.994334][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.001721][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.039882][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.047665][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.055084][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.073933][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.081729][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.094850][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.102488][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.110098][ T5736] waterforce 0003:1044:7A4D.0010: unknown main item tag 0x0 [ 1765.147457][ T5736] waterforce 0003:1044:7A4D.0010: hidraw0: USB HID v0.04 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 1765.187179][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1765.238523][ T5736] waterforce 0003:1044:7A4D.0010: fw version request failed with -38 [ 1765.253746][T24564] hsr_slave_0: entered promiscuous mode [ 1765.277512][T24564] hsr_slave_1: entered promiscuous mode [ 1765.296503][T24564] debugfs: 'hsr0' already exists in 'hsr' [ 1765.303426][T24564] Cannot create hsr debugfs directory [ 1765.315846][ T5736] usb 4-1: USB disconnect, device number 35 [ 1765.748749][T17695] IPVS: stop unused estimator thread 0... [ 1765.766762][ T9540] corsair-cpro 0003:1B1C:0C10.0011: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1765.846448][ T803] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1766.031201][ T803] usb 6-1: Using ep0 maxpacket: 8 [ 1766.042174][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1766.062892][ T803] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1766.095157][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.127273][ T803] usb 6-1: config 0 descriptor?? [ 1766.231844][T24812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4205'. [ 1766.303516][ T9540] corsair-cpro 0003:1B1C:0C10.0011: probe with driver corsair-cpro failed with error -110 [ 1766.319473][ T30] audit: type=1400 audit(1779925581.091:3593): avc: denied { write } for pid=24792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.341259][ T9540] usb 5-1: USB disconnect, device number 57 [ 1766.403204][ T803] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1766.537933][ T30] audit: type=1400 audit(1779925581.287:3594): avc: denied { write } for pid=24818 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.706976][ T9540] usb 6-1: USB disconnect, device number 32 [ 1766.746953][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1766.914182][ T30] audit: type=1400 audit(1779925581.643:3595): avc: denied { remount } for pid=24835 comm="syz.3.4211" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1766.934676][ T5736] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1767.109997][ T30] audit: type=1400 audit(1779925581.830:3596): avc: denied { write } for pid=24829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.163931][ T5736] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1767.172848][ T5736] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 1767.181410][ T5736] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 1767.200283][ T5736] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1767.221059][ T5736] usb 5-1: config 129 has no interface number 0 [ 1767.233446][ T5736] usb 5-1: config 129 has no interface number 1 [ 1767.245580][ T5736] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1767.265994][ T5736] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1767.277251][ T5736] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1767.343749][ T30] audit: type=1400 audit(1779925582.054:3597): avc: denied { write } for pid=24850 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.367563][ T5736] usb 5-1: config 129 interface 135 has no altsetting 0 [ 1767.382704][ T5736] usb 5-1: config 129 interface 5 has no altsetting 0 [ 1767.530303][ T5736] usb 5-1: string descriptor 0 read error: -22 [ 1767.538316][ T5736] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1767.540880][T24857] random: crng reseeded on system resumption [ 1767.547494][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.556516][ T5736] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1768.106276][ T5736] usb 5-1: MIDIStreaming interface descriptor not found [ 1768.385658][ T5736] usb 5-1: USB disconnect, device number 58 [ 1769.121717][T24564] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1769.272190][T24564] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1769.281409][T24564] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1769.298254][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1769.298273][ T30] audit: type=1400 audit(1779925583.879:3599): avc: denied { write } for pid=24860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.358064][T24564] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1769.413037][T24564] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1769.413749][T24903] kAFS: unable to lookup cell ' ' [ 1769.533194][T24564] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1769.558540][ T30] audit: type=1400 audit(1779925584.123:3600): avc: denied { write } for pid=24902 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.560721][T24564] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1769.637418][T24564] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1769.734322][T24913] netlink: 'syz.3.4225': attribute type 10 has an invalid length. [ 1769.783127][T24913] bond0: (slave netdevsim1): Releasing backup interface [ 1770.202698][ T5736] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1770.230444][T24903] netlink: 'syz.3.4225': attribute type 10 has an invalid length. [ 1770.244124][T24913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1770.264020][T24913] team0: Port device netdevsim1 added [ 1770.292918][T24913] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1770.315410][T24903] team0: Port device netdevsim1 removed [ 1770.327244][T24903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1770.365354][T24903] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1770.381413][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4233'. [ 1770.392273][ T5736] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1770.422966][ T5736] usb 5-1: config 0 has no interface number 0 [ 1770.441657][ T5736] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1770.526532][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.578839][ T5736] usb 5-1: Product: syz [ 1770.600126][ T5736] usb 5-1: Manufacturer: syz [ 1770.617638][ T5736] usb 5-1: SerialNumber: syz [ 1770.649340][ T5736] usb 5-1: config 0 descriptor?? [ 1770.693045][T24564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.736299][T24564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1770.797849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.805142][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.878714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.885917][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.902060][ T5736] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1770.936671][ T5736] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1770.983368][ T5736] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1771.022174][ T5736] usb 5-1: media controller created [ 1771.077099][ T30] audit: type=1400 audit(1779925585.545:3601): avc: denied { write } for pid=24925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1771.153932][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1771.273504][ T30] audit: type=1400 audit(1779925585.723:3602): avc: denied { write } for pid=24953 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1771.414595][ T30] audit: type=1400 audit(1779925585.863:3603): avc: denied { accept } for pid=24961 comm="syz.5.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1771.513571][ T5736] usb 5-1: USB disconnect, device number 59 [ 1772.057104][ T30] audit: type=1400 audit(1779925586.462:3604): avc: denied { read write } for pid=24995 comm="syz.5.4253" name="cgroup.max.descendants" dev="cgroup2" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1772.141436][ T30] audit: type=1400 audit(1779925586.462:3605): avc: denied { open } for pid=24995 comm="syz.5.4253" path="" dev="cgroup2" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1772.182639][T25006] 9p: Bad value for 'rfdno' [ 1772.778683][T24564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1772.825707][ T30] audit: type=1400 audit(1779925587.173:3606): avc: denied { write } for pid=24975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.967283][T24564] veth0_vlan: entered promiscuous mode [ 1773.022922][T24564] veth1_vlan: entered promiscuous mode [ 1774.100120][T24564] veth0_macvtap: entered promiscuous mode [ 1774.162988][T24564] veth1_macvtap: entered promiscuous mode [ 1774.171802][ T30] audit: type=1400 audit(1779925588.437:3607): avc: denied { write } for pid=25035 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1774.556504][T24564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1774.596027][T24564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1774.658288][T10956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.682729][T10956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.709776][T10956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.711669][T25058] binder: BC_ACQUIRE_RESULT not supported [ 1774.722479][T10956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.774968][T25058] binder: 25057:25058 ioctl c0306201 2000000001c0 returned -22 [ 1775.032967][T10956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.059940][T10956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.147050][T12442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.173860][T12442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.185839][T25075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25075 comm=syz.9.4279 [ 1775.401710][ T30] audit: type=1400 audit(1779925589.588:3608): avc: denied { write } for pid=25055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.099555][ T30] audit: type=1400 audit(1779925590.243:3609): avc: denied { write } for pid=25094 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1776.728493][T25128] kAFS: unable to lookup cell ' ' [ 1776.762579][T25131] lo speed is unknown, defaulting to 1000 [ 1776.971506][T25128] netlink: 'syz.4.4290': attribute type 10 has an invalid length. [ 1777.045065][ T5802] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1777.069128][T25146] netlink: 'syz.4.4290': attribute type 10 has an invalid length. [ 1777.143303][T25139] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1777.223166][ T5802] usb 6-1: config 0 has no interfaces? [ 1777.255214][ T30] audit: type=1400 audit(1779925591.319:3610): avc: denied { write } for pid=25106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.283103][ T5802] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1777.301548][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.383654][ T5802] usb 6-1: config 0 descriptor?? [ 1777.516360][T25128] bond0: (slave netdevsim1): Releasing backup interface [ 1777.701816][T25146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1777.730776][ T30] audit: type=1400 audit(1779925591.768:3611): avc: denied { write } for pid=25154 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.772995][T25146] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1777.857916][ T803] usb 6-1: USB disconnect, device number 33 [ 1778.652762][ T30] audit: type=1400 audit(1779925592.620:3612): avc: denied { write } for pid=25166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.900492][ T30] audit: type=1400 audit(1779925592.863:3613): avc: denied { write } for pid=25209 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.923942][ T5802] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1779.058033][ T30] audit: type=1400 audit(1779925593.013:3614): avc: denied { map } for pid=25225 comm="syz.3.4323" path="socket:[88474]" dev="sockfs" ino=88474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1779.099874][ T5802] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1779.107105][T20122] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 1779.108642][T20122] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 1779.130085][T20122] Bluetooth: hci1: Dropping invalid advertising data [ 1779.139225][ T5802] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1779.146644][T20122] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1779.252641][ T5802] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1779.333755][ T5802] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1779.359094][ T5802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1779.370604][ T5802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1779.384779][ T5802] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1779.395806][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1779.424222][ T5802] usb 6-1: Product: syz [ 1779.438884][ T5802] usb 6-1: Manufacturer: syz [ 1779.447728][T25200] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1779.458346][ T5802] cdc_wdm 6-1:1.0: skipping garbage [ 1779.464918][ T5802] cdc_wdm 6-1:1.0: skipping garbage [ 1779.474203][ T5802] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1779.480283][ T5802] cdc_wdm 6-1:1.0: Unknown control protocol [ 1779.492379][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1779.640371][T25242] kAFS: unable to lookup cell ' ' [ 1779.683106][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1779.725089][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.740607][T25244] overlayfs: failed to clone upperpath [ 1779.751419][ T24] usb 4-1: Product: syz [ 1779.760777][ T24] usb 4-1: Manufacturer: syz [ 1779.788819][ T24] usb 4-1: SerialNumber: syz [ 1779.821381][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1779.885823][T25242] netlink: 'syz.4.4325': attribute type 10 has an invalid length. [ 1779.901576][ T5736] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1779.944849][ T30] audit: type=1400 audit(1779925593.827:3615): avc: denied { read write } for pid=25197 comm="syz.5.4314" name="cdc-wdm0" dev="devtmpfs" ino=3607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1779.986542][T25245] netlink: 'syz.4.4325': attribute type 10 has an invalid length. [ 1780.050169][ T5729] usb 6-1: USB disconnect, device number 34 [ 1780.074838][T25242] bond0: (slave netdevsim1): Releasing backup interface [ 1780.091605][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1780.098483][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1780.104567][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1780.121059][ T30] audit: type=1400 audit(1779925593.827:3616): avc: denied { open } for pid=25197 comm="syz.5.4314" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1780.193576][T25245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1780.214826][T25242] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1780.303434][T25245] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1780.317709][ T30] audit: type=1400 audit(1779925594.192:3617): avc: denied { write } for pid=25230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1780.353791][T25258] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 1780.753370][T25266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.800491][T25266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.111550][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1781.111572][ T30] audit: type=1400 audit(1779925594.922:3619): avc: denied { mount } for pid=25276 comm="syz.5.4336" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1781.140573][ T5736] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1781.171138][ T5736] ath9k_htc: Failed to initialize the device [ 1781.247080][T25285] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4337'. [ 1781.272074][T25286] netlink: 'syz.9.4338': attribute type 3 has an invalid length. [ 1781.615709][T25305] kAFS: unable to lookup cell ' ' [ 1781.690940][ T30] audit: type=1400 audit(1779925595.474:3620): avc: denied { write } for pid=25270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.733888][ T5736] usb 4-1: ath9k_htc: USB layer deinitialized [ 1781.915746][ T30] audit: type=1400 audit(1779925595.680:3621): avc: denied { write } for pid=25311 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.999024][T25308] netlink: 'syz.2.4342': attribute type 10 has an invalid length. [ 1782.056779][T25319] netlink: 'syz.2.4342': attribute type 10 has an invalid length. [ 1782.138348][ T30] audit: type=1400 audit(1779925595.867:3622): avc: denied { write } for pid=25320 comm="syz.4.4350" path="socket:[88553]" dev="sockfs" ino=88553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1782.170432][T25308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1782.185353][ T24] usb 4-1: USB disconnect, device number 36 [ 1782.206115][T25308] team0: Port device netdevsim1 added [ 1782.246064][T25319] team0: Port device netdevsim1 removed [ 1782.274474][T25319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1782.288572][T25323] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.4353'. [ 1782.303318][T25319] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1782.314571][T25323] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.4353'. [ 1782.495073][ T803] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1782.591766][T25338] netlink: 'syz.4.4357': attribute type 6 has an invalid length. [ 1782.613007][T25338] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4357'. [ 1782.802422][T25343] netlink: 5252 bytes leftover after parsing attributes in process `syz.4.4357'. [ 1782.802494][ T803] usb 6-1: Using ep0 maxpacket: 32 [ 1782.863447][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.899524][ T803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.001143][ T803] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1783.042178][ T803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.096636][ T803] usb 6-1: config 0 descriptor?? [ 1783.110590][ T30] audit: type=1400 audit(1779925596.793:3623): avc: denied { write } for pid=25333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.229505][ T803] hub 6-1:0.0: USB hub found [ 1783.401529][ T30] audit: type=1400 audit(1779925597.074:3624): avc: denied { write } for pid=25359 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1783.486938][ T803] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1783.711383][T25362] SELinux: failed to load policy [ 1783.897953][T25375] netlink: 'syz.2.4366': attribute type 9 has an invalid length. [ 1783.915249][T25375] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1784.115104][T25379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input48 [ 1784.134741][ T803] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1784.184820][ T803] usb 6-1: USB disconnect, device number 35 [ 1784.277463][T25383] fido_id[25383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1784.312005][ T5802] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1784.436976][ T30] audit: type=1400 audit(1779925598.038:3625): avc: denied { write } for pid=25366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1784.482644][ T5802] usb 4-1: Using ep0 maxpacket: 16 [ 1784.489364][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.501721][ T5802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.512367][ T5802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1784.563408][ T5802] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1784.573106][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.626666][ T5802] usb 4-1: config 0 descriptor?? [ 1784.643551][ T1164] wlan1: Trigger new scan to find an IBSS to join [ 1784.768948][ T30] audit: type=1400 audit(1779925598.347:3626): avc: denied { write } for pid=25399 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1784.878016][ T803] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1785.051946][ T803] usb 3-1: Using ep0 maxpacket: 8 [ 1785.092216][ T803] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1785.114785][ T5802] hid_parser_main: 27 callbacks suppressed [ 1785.114807][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.161083][ T803] usb 3-1: no configurations [ 1785.187066][ T803] usb 3-1: can't read configurations, error -22 [ 1785.202554][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.217293][ T30] audit: type=1400 audit(1779925598.768:3627): avc: denied { read } for pid=25403 comm="syz.5.4374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1785.255888][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.291838][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.340868][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.377411][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.418110][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.460923][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.518194][ T5802] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1785.611103][ T5802] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0013/input/input49 [ 1785.651577][ T30] audit: type=1400 audit(1779925599.180:3628): avc: denied { read } for pid=25418 comm="syz.5.4379" path="socket:[88652]" dev="sockfs" ino=88652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1785.938960][T25437] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1785.996423][T25437] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.4380'. [ 1786.146648][T20122] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 1786.146684][T20122] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 1786.147288][ T5802] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1786.154384][T20122] Bluetooth: hci0: Dropping invalid advertising data [ 1786.179995][T20122] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1786.292920][ T5802] usb 4-1: USB disconnect, device number 37 [ 1786.535419][T25447] fido_id[25447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1787.657935][T25496] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1787.807487][T17695] wlan1: Trigger new scan to find an IBSS to join [ 1787.809959][T25501] IPv6: Can't replace route, no match found [ 1787.824865][T25501] IPv6: Can't replace route, no match found [ 1787.915453][ T5828] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1788.209355][ T5828] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1788.249647][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1788.249668][ T30] audit: type=1400 audit(1779925601.613:3631): avc: denied { listen } for pid=25508 comm="syz.5.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1788.281881][ T5828] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1788.315137][ T5828] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1788.337035][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.348687][ T30] audit: type=1400 audit(1779925601.613:3632): avc: denied { shutdown } for pid=25508 comm="syz.5.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1788.373931][T25492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1788.385523][ T30] audit: type=1400 audit(1779925601.650:3633): avc: denied { write } for pid=25510 comm="syz.4.4408" name="usbmon9" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1788.410475][ T5828] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1788.521258][T25520] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4410'. [ 1788.563609][T25520] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.4410'. [ 1788.598576][ T30] audit: type=1400 audit(1779925601.940:3634): avc: denied { map } for pid=25522 comm="syz.2.4413" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1788.677904][ T5828] usb 4-1: USB disconnect, device number 38 [ 1788.909145][T25527] netlink: 'syz.4.4412': attribute type 10 has an invalid length. [ 1788.934783][T25527] bond0: (slave netdevsim1): Releasing backup interface [ 1788.970404][T25524] netlink: 'syz.4.4412': attribute type 10 has an invalid length. [ 1789.069841][T25524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1789.181969][T20122] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 1789.182004][T20122] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 1789.189333][T20122] Bluetooth: hci1: Dropping invalid advertising data [ 1789.204017][T20122] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1789.220061][T25527] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1789.241801][T25534] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4415'. [ 1789.257004][T25524] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1789.648042][T25540] IPv6: Can't replace route, no match found [ 1789.654150][T25540] IPv6: Can't replace route, no match found [ 1790.231607][ T5828] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1790.402828][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 1790.414591][ T5828] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1790.442674][ T5828] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1790.462621][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1790.484193][ T5828] usb 4-1: config 1 has no interface number 0 [ 1790.497554][ T5828] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1790.514633][ T5828] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1790.551997][ T5828] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1790.574304][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.635025][ T5828] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1790.663539][T25573] netlink: 'syz.9.4431': attribute type 10 has an invalid length. [ 1790.692234][T25573] netlink: 'syz.9.4431': attribute type 10 has an invalid length. [ 1790.734079][T19424] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1790.863021][ T5828] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1790.916979][T19424] usb 6-1: Using ep0 maxpacket: 32 [ 1790.942078][T19424] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1790.974534][ T1151] wlan1: Creating new IBSS network, BSSID a6:28:45:7f:0c:eb [ 1790.984694][T19424] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1790.999292][T19424] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1791.017905][T19424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.032353][T19424] usb 6-1: config 0 descriptor?? [ 1791.147620][T25579] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1791.199353][T25579] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1791.386525][ T5828] usb 4-1: USB disconnect, device number 39 [ 1791.413851][ T5828] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1791.423410][T25583] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4435'. [ 1791.460596][T25583] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.4435'. [ 1791.518136][T19424] corsair-cpro 0003:1B1C:0C10.0014: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 1791.957519][T19424] corsair-cpro 0003:1B1C:0C10.0014: probe with driver corsair-cpro failed with error -71 [ 1792.020816][T19424] usb 6-1: USB disconnect, device number 36 [ 1792.975527][T25608] netlink: 'syz.3.4439': attribute type 10 has an invalid length. [ 1793.070922][T25614] netlink: 'syz.3.4439': attribute type 10 has an invalid length. [ 1793.104928][T25608] bond0: (slave netdevsim1): Releasing backup interface [ 1793.149694][T25608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1793.166005][T25604] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1793.219420][ T24] kernel write not supported for file /snd/midiC2D0 (pid: 24 comm: kworker/1:0) [ 1793.262052][ T30] audit: type=1400 audit(1779925606.282:3635): avc: denied { write } for pid=25588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.296198][T25608] team0: Port device netdevsim1 added [ 1793.377350][T25614] team0: Port device netdevsim1 removed [ 1793.414178][T25614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1793.464129][T25614] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1793.530627][ T30] audit: type=1400 audit(1779925606.554:3636): avc: denied { write } for pid=25627 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1793.567557][ T5729] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1793.758611][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 1793.776343][ T5729] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1793.794779][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.068632][ T5729] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1794.085499][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1794.112708][ T5729] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1794.120630][ T5729] usb 3-1: media controller created [ 1794.145922][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1794.216352][T25647] 9p: Bad value for 'wfdno' [ 1794.287548][ T5729] az6027: usb out operation failed. (-71) [ 1794.305211][ T5729] az6027: usb out operation failed. (-71) [ 1794.312586][ T5729] stb0899_attach: Driver disabled by Kconfig [ 1794.333730][ T5729] az6027: no front-end attached [ 1794.333730][ T5729] [ 1794.354564][ T5729] az6027: usb out operation failed. (-71) [ 1794.364598][ T5729] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1794.381504][ T5729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 1794.445019][ T5729] dvb-usb: schedule remote query interval to 400 msecs. [ 1794.454372][ T5729] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1794.482215][ T5729] usb 3-1: USB disconnect, device number 29 [ 1794.593414][ T5729] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1795.404427][T25685] netlink: 'syz.4.4467': attribute type 10 has an invalid length. [ 1795.484137][T25685] bond0: (slave netdevsim1): Releasing backup interface [ 1795.516761][T25699] netlink: 'syz.4.4467': attribute type 10 has an invalid length. [ 1795.612441][T25699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1795.639988][T25699] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1796.079871][T25719] kAFS: unable to lookup cell ' ' [ 1796.418495][T25722] netlink: 'syz.2.4482': attribute type 10 has an invalid length. [ 1796.547629][T25722] bond0: (slave netdevsim1): Releasing backup interface [ 1796.556762][ T30] audit: type=1400 audit(1779925609.370:3637): avc: denied { read } for pid=25723 comm="syz.5.4485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1796.591063][T25722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1796.591379][T25725] netlink: 'syz.2.4482': attribute type 10 has an invalid length. [ 1796.645099][T25722] team0: Port device netdevsim1 added [ 1796.669508][T25719] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1796.669677][T25725] team0: Port device netdevsim1 removed [ 1796.735558][T25725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1796.738566][T25730] kAFS: unable to lookup cell ' ' [ 1796.764555][T25725] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1797.080354][T25730] netlink: 'syz.5.4486': attribute type 10 has an invalid length. [ 1797.142013][T25743] netlink: 'syz.5.4486': attribute type 10 has an invalid length. [ 1797.194904][T25739] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1797.195019][T25730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1797.350026][T25730] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1797.417283][T25730] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1797.556829][T25730] team0: Port device netdevsim1 added [ 1797.565710][T25743] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1797.591708][T25743] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1797.646393][T25743] team0: Port device netdevsim1 removed [ 1797.818698][ T5828] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1797.989677][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 1798.006539][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.042573][ T5828] usb 4-1: config 0 has no interfaces? [ 1798.060697][ T5828] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1798.087898][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.123117][ T5828] usb 4-1: Product: syz [ 1798.138519][ T5828] usb 4-1: Manufacturer: syz [ 1798.158702][ T5828] usb 4-1: SerialNumber: syz [ 1798.186126][ T5828] usb 4-1: config 0 descriptor?? [ 1798.326939][ T30] audit: type=1400 audit(1779925611.027:3638): avc: denied { write } for pid=25763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1798.808670][ T9540] usb 4-1: USB disconnect, device number 40 [ 1799.098980][ T30] audit: type=1400 audit(1779925611.682:3639): avc: denied { write } for pid=25796 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1800.511062][T25808] kAFS: unable to lookup cell ' ' [ 1800.553951][T25808] netlink: 'syz.9.4511': attribute type 10 has an invalid length. [ 1800.604440][T25812] netlink: 'syz.9.4511': attribute type 10 has an invalid length. [ 1801.038777][T25837] netlink: 'syz.2.4514': attribute type 10 has an invalid length. [ 1801.153896][T25837] bond0: (slave netdevsim1): Releasing backup interface [ 1801.172782][T25846] netlink: 'syz.2.4514': attribute type 10 has an invalid length. [ 1801.192172][T25843] sctp: [Deprecated]: syz.5.4521 (pid 25843) Use of int in maxseg socket option. [ 1801.192172][T25843] Use struct sctp_assoc_value instead [ 1801.241696][T25827] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1801.253090][T25837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1801.283702][T25837] team0: Port device netdevsim1 added [ 1801.376510][T25846] team0: Port device netdevsim1 removed [ 1801.516544][T25846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1802.546272][T25846] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1802.764145][ T30] audit: type=1400 audit(1779925615.191:3640): avc: denied { execute } for pid=25862 comm="syz.4.4527" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1802.914463][ T30] audit: type=1400 audit(1779925615.331:3641): avc: denied { write } for pid=25815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1803.217647][ T30] audit: type=1400 audit(1779925615.612:3642): avc: denied { write } for pid=25873 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1803.550256][ T30] audit: type=1400 audit(1779925615.921:3643): avc: denied { cmd } for pid=25886 comm="syz.2.4535" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1803.586404][ T30] audit: type=1400 audit(1779925615.958:3644): avc: denied { map } for pid=25886 comm="syz.2.4535" path="/dev/ublkc0" dev="devtmpfs" ino=3665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1803.668830][ T30] audit: type=1800 audit(1779925616.043:3645): pid=25897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4537" name="nullb0" dev="tmpfs" ino=866 res=0 errno=0 [ 1803.803466][ T9540] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1803.882150][T25910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4541'. [ 1803.948892][ T30] audit: type=1400 audit(1779925616.305:3646): avc: denied { write } for pid=25884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1804.020029][ T9540] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1804.038542][ T9540] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1804.063165][ T9540] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1804.109477][ T9540] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1804.132295][ T30] audit: type=1400 audit(1779925616.464:3647): avc: denied { write } for pid=25920 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1804.163819][ T9540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1804.196775][ T9540] usb 4-1: Product: syz [ 1804.205683][ T9540] usb 4-1: Manufacturer: syz [ 1804.219764][ T9540] usb 4-1: SerialNumber: syz [ 1804.491216][ T9540] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1804.562946][T25935] netlink: 'syz.2.4545': attribute type 10 has an invalid length. [ 1804.641505][T25932] netlink: 'syz.2.4545': attribute type 10 has an invalid length. [ 1804.657752][ T5729] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1804.701466][T25935] bond0: (slave netdevsim1): Releasing backup interface [ 1804.740650][T25936] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1804.762886][ T5714] usb 4-1: USB disconnect, device number 41 [ 1804.791435][ T5714] usblp0: removed [ 1804.796925][ T30] audit: type=1400 audit(1779925617.044:3648): avc: denied { read write } for pid=25888 comm="syz.3.4536" name="lp0" dev="devtmpfs" ino=3669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1804.832842][T25935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1804.861342][ T5729] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1804.885894][T25935] team0: Port device netdevsim1 added [ 1804.894408][ T5729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.920588][ T5729] usb 6-1: config 0 descriptor?? [ 1804.928208][ T30] audit: type=1400 audit(1779925617.044:3649): avc: denied { open } for pid=25888 comm="syz.3.4536" path="/dev/usb/lp0" dev="devtmpfs" ino=3669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1804.991476][T25932] team0: Port device netdevsim1 removed [ 1805.024641][T25932] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1805.054564][T25932] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1805.097913][T19424] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1805.181843][ T5729] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1805.269634][T19424] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1805.297356][T19424] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1805.322932][T19424] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1805.356163][T19424] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.371195][T25940] fuse: fd is not a fuse device [ 1805.628334][T19424] usb 5-1: usb_control_msg returned -32 [ 1805.644591][T19424] usbtmc 5-1:16.0: can't read capabilities [ 1805.808180][ T5729] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1805.828501][ T5729] [drm] Initialized udl on minor 2 [ 1806.055859][ T5729] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1806.160642][ T5729] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1806.180656][ T5729] usb 6-1: USB disconnect, device number 37 [ 1806.282983][ T5828] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1807.019721][ T5714] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1807.201021][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 1807.227566][ T5714] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1807.243311][T25984] netlink: 'syz.3.4565': attribute type 10 has an invalid length. [ 1807.256139][ T5714] usb 6-1: config 0 has no interface number 0 [ 1807.265647][ T5714] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1807.295539][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.306013][T25986] netlink: 'syz.3.4565': attribute type 10 has an invalid length. [ 1807.319208][ T5714] usb 6-1: Product: syz [ 1807.329597][ T5714] usb 6-1: Manufacturer: syz [ 1807.350104][ T5714] usb 6-1: SerialNumber: syz [ 1807.375976][T25985] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1807.409391][ T5714] usb 6-1: config 0 descriptor?? [ 1807.441465][T25984] bond0: (slave netdevsim1): Releasing backup interface [ 1807.545187][T25984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1807.711216][T25984] team0: Port device netdevsim1 added [ 1807.834331][T25986] team0: Port device netdevsim1 removed [ 1807.884106][T25986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1807.951920][T25986] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1808.083567][ T24] usb 5-1: USB disconnect, device number 60 [ 1808.436285][T26000] loop8: detected capacity change from 0 to 8 [ 1808.464661][T26000] Dev loop8: unable to read RDB block 8 [ 1808.474655][T26000] loop8: unable to read partition table [ 1808.485516][T26000] loop8: partition table beyond EOD, truncated [ 1808.493887][T26000] loop_reread_partitions: partition scan of loop8 (■швлx№^>рЦ Б) failed (rc=-5) [ 1808.605462][ T5714] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1808.645867][ T5714] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1808.662839][ T5714] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1808.699899][ T5714] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1808.767034][ T5714] usb 6-1: USB disconnect, device number 38 [ 1808.858421][T26009] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4576'. [ 1810.162293][T26045] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4590'. [ 1810.390961][T26046] kAFS: unable to lookup cell ' ' [ 1810.469163][T26046] netlink: 'syz.9.4588': attribute type 10 has an invalid length. [ 1810.576899][T26052] netlink: 'syz.9.4588': attribute type 10 has an invalid length. [ 1810.833931][ T5714] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1810.860906][T26059] dvmrp6: entered allmulticast mode [ 1810.873278][T26058] dvmrp6: left allmulticast mode [ 1810.978616][T26064] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.4599'. [ 1811.003018][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 1811.016797][ T5714] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1811.042052][ T5714] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1811.072772][ T5714] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1811.107192][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.121333][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1811.146785][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1811.168681][T26074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4592'. [ 1811.179256][ T5714] usb 5-1: config 0 descriptor?? [ 1811.201555][T26067] ceph: No mds server is up or the cluster is laggy [ 1811.248937][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1811.285560][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1811.406700][T26082] kAFS: unable to lookup cell ' ' [ 1811.421248][T26083] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4605'. [ 1811.633569][T26085] netlink: 'syz.3.4603': attribute type 10 has an invalid length. [ 1811.671349][T26085] bond0: (slave netdevsim1): Releasing backup interface [ 1811.714955][T26082] netlink: 'syz.3.4603': attribute type 10 has an invalid length. [ 1811.734601][ T5714] usbhid 5-1:0.0: can't add hid device: -71 [ 1811.758760][T26085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1811.771514][ T5714] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1811.802421][T26090] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1811.813259][ T5714] usb 5-1: USB disconnect, device number 61 [ 1811.846286][T26085] team0: Port device netdevsim1 added [ 1811.869357][T26082] team0: Port device netdevsim1 removed [ 1811.898785][T26082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1811.914482][T26082] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1812.668314][T26110] vxcan0: tx address claim with different name [ 1812.696294][ T5828] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1812.743066][T26112] kAFS: unable to lookup cell ' ' [ 1812.863293][T26115] kAFS: unable to lookup cell ' ' [ 1812.875755][T26116] netlink: 'syz.2.4615': attribute type 10 has an invalid length. [ 1812.886357][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 1812.898995][T26116] bond0: (slave netdevsim1): Releasing backup interface [ 1812.909728][ T5828] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1812.920655][T26116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1812.937782][ T5828] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 1812.957361][T26112] netlink: 'syz.2.4615': attribute type 10 has an invalid length. [ 1812.965737][T26116] team0: Port device netdevsim1 added [ 1812.972508][ T5828] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 1812.988171][ T5828] usb 5-1: config 14 has no interface number 0 [ 1812.996625][T26112] team0: Port device netdevsim1 removed [ 1813.021813][T26116] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1813.036035][T26112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.045814][ T5828] usb 5-1: config 14 has no interface number 1 [ 1813.061469][T26117] netlink: 'syz.3.4618': attribute type 10 has an invalid length. [ 1813.070208][ T5828] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1813.086463][T26112] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1813.113595][ T5828] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1813.130960][T26115] netlink: 'syz.3.4618': attribute type 10 has an invalid length. [ 1813.168172][ T5828] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1813.185338][T26117] bond0: (slave netdevsim1): Releasing backup interface [ 1813.199795][T26117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.208511][ T5828] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1813.233383][T26118] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1813.251078][T26117] team0: Port device netdevsim1 added [ 1813.258341][ T5828] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1813.276175][ T5828] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1813.290339][ T5828] usb 5-1: config 14 interface 57 has no altsetting 0 [ 1813.309766][ T5828] usb 5-1: config 14 interface 228 has no altsetting 0 [ 1813.321651][ T5828] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1813.331128][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.340377][ T5828] usb 5-1: Product: syz [ 1813.343651][T26115] team0: Port device netdevsim1 removed [ 1813.351560][T26115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.358955][ T5828] usb 5-1: Manufacturer: syz [ 1813.365143][ T5828] usb 5-1: SerialNumber: syz [ 1813.414120][T26120] kAFS: unable to lookup cell ' ' [ 1813.431964][T26115] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1813.494743][T26120] netlink: 'syz.9.4619': attribute type 10 has an invalid length. [ 1813.550208][T26121] netlink: 'syz.9.4619': attribute type 10 has an invalid length. [ 1813.821496][ T5828] legousbtower 5-1:14.57: interrupt endpoints not found [ 1814.174533][T26131] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1814.249542][ T5828] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 40.229 build 30885 [ 1814.308192][ T5828] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1814.471265][T19424] usb 5-1: USB disconnect, device number 62 [ 1814.503153][T19424] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 1814.550506][T26147] kAFS: unable to lookup cell ' ' [ 1814.657634][T26152] kAFS: unable to lookup cell ' ' [ 1814.687911][T26153] netlink: 'syz.3.4630': attribute type 10 has an invalid length. [ 1814.703670][ T5828] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1814.715522][T26153] bond0: (slave netdevsim1): Releasing backup interface [ 1814.731594][T26152] netlink: 'syz.9.4632': attribute type 10 has an invalid length. [ 1814.745185][T26147] netlink: 'syz.3.4630': attribute type 10 has an invalid length. [ 1814.747067][T26153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1814.780952][T26153] team0: Port device netdevsim1 added [ 1814.799638][T26154] netlink: 'syz.9.4632': attribute type 10 has an invalid length. [ 1814.818535][T26153] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1814.832623][T26147] team0: Port device netdevsim1 removed [ 1814.884332][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 1814.889904][T26147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1814.903617][ T5828] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1814.919329][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.937731][ T5828] usb 3-1: Product: syz [ 1814.943693][ T5828] usb 3-1: Manufacturer: syz [ 1814.955550][ T5828] usb 3-1: SerialNumber: syz [ 1814.989582][T26147] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1815.086584][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4633'. [ 1815.113675][T26157] ceph: No mds server is up or the cluster is laggy [ 1815.310078][T26164] kAFS: unable to lookup cell ' ' [ 1815.561060][T26164] bond0: (slave netdevsim1): Releasing backup interface [ 1815.694534][T26165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1815.710055][T26164] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1815.761393][T26165] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1815.905566][ T5828] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 1815.920703][ T5828] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1815.950243][ T5828] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1815.962323][ T5828] usb 3-1: clock source 0 is not valid, cannot use [ 1815.971372][ T5828] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 1816.001082][ T5828] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1816.186083][ T5828] usb 3-1: USB disconnect, device number 30 [ 1816.366867][T26189] udevd[26189]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1816.650768][T26199] kAFS: unable to lookup cell ' ' [ 1816.656665][T26198] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4647'. [ 1816.667083][T26198] unsupported nla_type 58 [ 1816.747792][T26202] kAFS: unable to lookup cell ' ' [ 1816.969909][T26199] bond0: (slave netdevsim1): Releasing backup interface [ 1817.037641][T26207] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1817.061385][T26218] xt_hashlimit: size too large, truncated to 1048576 [ 1817.093473][T26199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.130988][T26206] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1817.178108][T26199] team0: Port device netdevsim1 added [ 1817.230448][T26211] team0: Port device netdevsim1 removed [ 1817.252537][T26211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.329612][T26211] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1817.346602][T26202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.367032][T26228] kAFS: unable to lookup cell ' ' [ 1817.419520][T26202] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1817.465801][T26202] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1817.481174][T26202] team0: Port device netdevsim1 added [ 1817.486892][T26220] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1817.495234][T26220] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1817.510602][T26220] team0: Port device netdevsim1 removed [ 1817.537603][T26221] bridge0: entered promiscuous mode [ 1817.549404][T26221] vlan3: entered promiscuous mode [ 1817.573284][T26221] dummy0: entered promiscuous mode [ 1817.586196][T26221] dummy0: left promiscuous mode [ 1817.621992][T26221] bridge0: left promiscuous mode [ 1817.629456][T26221] vlan3: left promiscuous mode [ 1817.678245][T26228] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1817.779120][T26232] bond0: (slave netdevsim1): Releasing backup interface [ 1817.804842][T26232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.819824][T26232] team0: Port device netdevsim1 added [ 1817.841700][ T5714] kernel write not supported for file /input/event0 (pid: 5714 comm: kworker/1:5) [ 1817.856857][T26233] team0: Port device netdevsim1 removed [ 1817.878904][T26233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.896861][T26233] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1818.196377][T26263] kAFS: unable to lookup cell ' ' [ 1818.232003][ T803] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1818.349710][T26271] kAFS: unable to lookup cell ' ' [ 1818.397997][T26272] validate_nla: 10 callbacks suppressed [ 1818.398011][T26272] netlink: 'syz.5.4669': attribute type 10 has an invalid length. [ 1818.434033][ T803] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1818.455298][T26273] netlink: 'syz.5.4669': attribute type 10 has an invalid length. [ 1818.469310][T26272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1818.493085][ T803] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1818.509319][T26272] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1818.510854][ T803] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1818.527802][ T803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1818.539836][T26272] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1818.573082][T26272] team0: Port device netdevsim1 added [ 1818.573620][T26263] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1818.600749][ T803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1818.607674][T26271] netlink: 'syz.4.4672': attribute type 10 has an invalid length. [ 1818.621183][T26273] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1818.663653][ T5828] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1818.685559][T26273] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1818.695403][ T803] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1818.707406][T26275] netlink: 'syz.4.4672': attribute type 10 has an invalid length. [ 1818.754885][T26273] team0: Port device netdevsim1 removed [ 1818.765666][ T803] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1818.815043][T26271] bond0: (slave netdevsim1): Releasing backup interface [ 1818.822146][ T803] usb 3-1: Product: syz [ 1818.822168][ T803] usb 3-1: Manufacturer: syz [ 1818.828455][ T803] cdc_wdm 3-1:1.0: skipping garbage [ 1818.883258][ T803] cdc_wdm 3-1:1.0: skipping garbage [ 1818.902593][ T5828] usb 4-1: Using ep0 maxpacket: 16 [ 1818.912089][ T5828] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 1818.919638][T26275] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1818.931019][T26275] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1818.943929][ T803] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1818.950056][ T5828] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1818.958619][ T803] cdc_wdm 3-1:1.0: Unknown control protocol [ 1818.971486][ T5828] usb 4-1: config 0 has no interface number 0 [ 1818.991725][ T5828] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1819.023802][ T5828] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1819.064008][ T5828] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1819.073933][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.087568][ T5828] usb 4-1: Product: syz [ 1819.091826][ T5828] usb 4-1: Manufacturer: syz [ 1819.124328][ T5828] usb 4-1: SerialNumber: syz [ 1819.152458][ T5828] usb 4-1: config 0 descriptor?? [ 1819.176519][T26270] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1819.193926][T26270] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1819.433908][T26270] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1819.463816][T26270] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1819.706609][ T5828] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1819.742553][ T5828] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1819.774591][ T5828] asix 4-1:0.251: probe with driver asix failed with error -5 [ 1819.846821][ T5828] usb 4-1: USB disconnect, device number 42 [ 1819.850344][ T5714] usb 3-1: USB disconnect, device number 31 [ 1820.007867][T26300] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1820.014427][T26300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1820.040255][T26300] vhci_hcd vhci_hcd.0: Device attached [ 1820.111983][T26305] kAFS: unable to lookup cell ' ' [ 1820.127507][T26305] netlink: 'syz.9.4684': attribute type 10 has an invalid length. [ 1820.174728][T26305] netlink: 'syz.9.4684': attribute type 10 has an invalid length. [ 1820.280752][T19424] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1820.601464][ T5714] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1820.621077][T26317] kAFS: unable to lookup cell ' ' [ 1820.626545][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1820.706807][T26318] netlink: 'syz.2.4688': attribute type 10 has an invalid length. [ 1820.723473][T26318] bond0: (slave netdevsim1): Releasing backup interface [ 1820.737857][T26318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1820.747527][T26318] team0: Port device netdevsim1 added [ 1820.760506][T26317] netlink: 'syz.2.4688': attribute type 10 has an invalid length. [ 1820.774144][T26317] team0: Port device netdevsim1 removed [ 1820.781887][T26317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1820.791929][T26317] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1820.801217][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1820.808289][ T5714] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1820.827882][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1820.839329][ T5714] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1820.853402][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.874033][ T5714] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1820.884960][ T24] usb 4-1: too many endpoints for config 1 interface 2 altsetting 252: 255, using maximum allowed: 30 [ 1820.898298][T26301] vhci_hcd: connection reset by peer [ 1820.910220][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.910513][ T1151] vhci_hcd vhci_hcd.4: stop threads [ 1820.929076][ T24] usb 4-1: config 1 interface 2 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1820.959111][ T24] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1820.968338][T26308] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1820.984004][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 1821.014705][ T5714] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1821.019245][ T1151] vhci_hcd vhci_hcd.4: release socket [ 1821.027297][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.035503][ T1151] vhci_hcd vhci_hcd.4: disconnect device [ 1821.045191][ T24] usb 4-1: Product: syz [ 1821.050311][ T24] usb 4-1: Manufacturer: syz [ 1821.072393][ T24] usb 4-1: SerialNumber: syz [ 1821.257923][ T5714] usb 6-1: USB disconnect, device number 39 [ 1821.326895][ T24] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1821.337565][ T24] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1821.353584][ T24] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1821.386347][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1821.421084][ T24] usb 4-1: USB disconnect, device number 43 [ 1821.443037][T26300] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1821.497543][T24736] udevd[24736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1821.610566][ T30] audit: type=1400 audit(1779925632.831:3650): avc: denied { read write } for pid=26326 comm="syz.2.4693" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1821.683407][ T803] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1821.701833][ T30] audit: type=1400 audit(1779925632.831:3651): avc: denied { open } for pid=26326 comm="syz.2.4693" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1821.730840][ T803] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1821.958485][ T5828] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1822.120102][ T5828] usb 3-1: config 0 has no interfaces? [ 1822.137225][ T5828] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1822.172130][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1822.191665][ T5828] usb 3-1: SerialNumber: syz [ 1822.203174][ T5828] usb 3-1: config 0 descriptor?? [ 1823.142347][ T24] usb 3-1: USB disconnect, device number 32 [ 1823.500162][T26352] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1823.524317][T26355] kAFS: unable to lookup cell ' ' [ 1823.579265][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1823.598884][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1823.639010][T26358] ceph: No mds server is up or the cluster is laggy [ 1823.649011][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4696'. [ 1823.726013][T26362] netlink: 'syz.5.4699': attribute type 10 has an invalid length. [ 1823.756993][T26362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1823.790091][T26363] netlink: 'syz.5.4699': attribute type 10 has an invalid length. [ 1823.798700][T26362] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 1823.817033][T26362] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1823.828961][T26362] team0: Port device netdevsim1 added [ 1823.844045][T26363] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 1823.853649][T26355] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1823.861687][ T5828] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1823.879408][T26363] netdevsim netdevsim5 netdevsim1: left allmulticast mode [ 1823.934203][T26363] team0: Port device netdevsim1 removed [ 1824.031962][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 1824.040443][ T5828] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1824.053394][ T5828] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1824.065117][ T5828] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1824.078410][ T5828] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1824.093136][ T5828] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1824.116498][ T5828] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1824.129783][ T5828] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1824.141076][ T5828] usb 5-1: Product: syz [ 1824.145400][ T5828] usb 5-1: Manufacturer: syz [ 1824.151253][ T5828] usb 5-1: SerialNumber: syz [ 1824.164865][ T5828] usb 5-1: config 0 descriptor?? [ 1824.183733][ T5828] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1824.197378][ T5828] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1824.242911][ T30] audit: type=1400 audit(1779925635.292:3652): avc: denied { write } for pid=26375 comm="syz.9.4709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1824.288104][ T803] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1824.298729][ T5714] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1824.450495][ T803] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1824.466175][ T803] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1824.478878][ T803] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1824.489253][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.501429][ T803] usb 3-1: Product: syz [ 1824.509462][ T803] usb 3-1: Manufacturer: syz [ 1824.512458][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 1824.516924][ T5828] usb 5-1: USB disconnect, device number 63 [ 1824.519241][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 1824.521030][ T5714] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1824.526704][T26357] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1824.532529][ T5714] usb 4-1: config 0 has no interface number 0 [ 1824.552937][ T803] usb 3-1: SerialNumber: syz [ 1824.556160][ T5714] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1824.559981][ T5828] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1824.572457][ T5714] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1824.579724][ T803] usb 3-1: config 0 descriptor?? [ 1824.602017][ T5714] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1824.628527][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.654865][ T5714] usb 4-1: Product: syz [ 1824.667611][ T5714] usb 4-1: Manufacturer: syz [ 1824.681447][ T5714] usb 4-1: SerialNumber: syz [ 1824.700062][ T5714] usb 4-1: config 0 descriptor?? [ 1824.710312][T20122] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 1824.710348][T20122] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 1824.717619][T20122] Bluetooth: hci0: Dropping invalid advertising data [ 1824.731608][T20122] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1824.746066][T26370] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1824.758580][T26370] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1824.999073][T26370] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1825.008082][T26370] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1825.234343][ T5714] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1825.256485][ T1164] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1825.275426][ T803] mos7840 3-1:0.0: required endpoints missing [ 1825.316410][ T803] usb 3-1: USB disconnect, device number 33 [ 1825.630558][T26410] kAFS: unable to lookup cell ' ' [ 1825.663352][ T5714] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1825.692127][ T5714] asix 4-1:0.34: probe with driver asix failed with error -32 [ 1825.721659][ T5714] usb 4-1: USB disconnect, device number 44 [ 1825.752207][T19424] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1825.821464][T26410] netlink: 'syz.4.4722': attribute type 10 has an invalid length. [ 1825.883700][T26410] bond0: (slave netdevsim1): Releasing backup interface [ 1825.893213][T26419] netlink: 'syz.4.4722': attribute type 10 has an invalid length. [ 1825.957199][T26424] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1825.957548][T26419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1825.989461][ T5729] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1826.001568][T26419] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1826.017679][T26426] kAFS: unable to lookup cell ' ' [ 1826.154308][T26432] netlink: 'syz.2.4730': attribute type 10 has an invalid length. [ 1826.181357][T26432] bond0: (slave netdevsim1): Releasing backup interface [ 1826.192942][ T5729] usb 6-1: Using ep0 maxpacket: 8 [ 1826.204575][T26432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1826.204856][ T5729] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1826.223090][T26432] team0: Port device netdevsim1 added [ 1826.229043][T26426] netlink: 'syz.2.4730': attribute type 10 has an invalid length. [ 1826.229667][T26431] syzkaller0: entered allmulticast mode [ 1826.237461][ T5729] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.252460][ T5729] usb 6-1: Product: syz [ 1826.261895][T26430] syzkaller0: left allmulticast mode [ 1826.268798][ T5729] usb 6-1: Manufacturer: syz [ 1826.273515][ T5729] usb 6-1: SerialNumber: syz [ 1826.289597][T26432] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1826.315976][ T5729] usb 6-1: config 0 descriptor?? [ 1826.327429][T26426] team0: Port device netdevsim1 removed [ 1826.334116][ T5729] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1826.358866][T26426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1826.413932][T26426] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1826.476393][ T30] audit: type=1400 audit(1779925637.379:3653): avc: denied { mount } for pid=26434 comm="syz.3.4734" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1826.591790][T26443] xt_hashlimit: size too large, truncated to 1048576 [ 1827.672971][ T5729] gspca_sonixj: reg_w1 err -71 [ 1827.729727][ T5729] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1827.742003][ T5729] usb 6-1: USB disconnect, device number 40 [ 1828.007294][ T803] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1828.167153][ T5736] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1828.188500][ T803] usb 5-1: Using ep0 maxpacket: 16 [ 1828.203455][ T803] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 1828.215143][ T803] usb 5-1: config 0 has no interface number 0 [ 1828.221600][ T803] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1828.232952][T26476] netem: change failed [ 1828.237415][ T803] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1828.262761][ T803] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1828.289089][ T803] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1828.313501][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.319589][T26477] ceph: No mds server is up or the cluster is laggy [ 1828.338147][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4742'. [ 1828.346408][ T803] usb 5-1: Product: syz [ 1828.349841][ T5736] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1828.362725][ T803] usb 5-1: Manufacturer: syz [ 1828.379500][ T803] usb 5-1: SerialNumber: syz [ 1828.397078][ T5736] usb 3-1: config 0 has no interface number 0 [ 1828.401841][ T803] usb 5-1: config 0 descriptor?? [ 1828.405866][ T5736] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1828.436944][ T5736] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1828.446278][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.454429][ T5736] usb 3-1: Product: syz [ 1828.459182][ T5736] usb 3-1: Manufacturer: syz [ 1828.468984][ T5736] usb 3-1: SerialNumber: syz [ 1828.614687][ T5736] usb 3-1: config 0 descriptor?? [ 1829.024818][T26455] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1829.164614][ T5736] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1829.319477][ T5736] usb 3-1: USB disconnect, device number 34 [ 1829.404937][ T803] usb 5-1: USB disconnect, device number 64 [ 1829.469779][ T5736] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1829.835082][ T5714] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1830.018658][ T5714] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.048310][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1830.090655][ T5714] usb 4-1: config 1 has no interface number 0 [ 1830.098509][ T5714] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1830.133322][ T5714] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1830.168002][ T5714] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1830.194979][ T5714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1830.216567][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.235243][ T5714] usb 4-1: Product: syz [ 1830.251114][ T5714] usb 4-1: Manufacturer: syz [ 1830.255774][ T5714] usb 4-1: SerialNumber: syz [ 1830.275398][T26496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1830.284785][T26512] kAFS: unable to lookup cell ' ' [ 1831.107087][T26512] netlink: 'syz.4.4759': attribute type 10 has an invalid length. [ 1831.191275][T26528] netlink: 'syz.4.4759': attribute type 10 has an invalid length. [ 1831.560739][T26496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1831.580122][T26512] bond0: (slave netdevsim1): Releasing backup interface [ 1831.651460][T26528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1831.681284][T26528] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1831.797990][T26545] kAFS: unable to lookup cell ' ' [ 1831.863797][ T5714] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 1831.879849][T26544] loop5: detected capacity change from 0 to 7 [ 1831.892288][ T5714] cdc_ncm 4-1:1.1: bind() failure [ 1832.010157][ T5714] usb 4-1: USB disconnect, device number 45 [ 1832.018532][T26544] Dev loop5: unable to read RDB block 7 [ 1832.028775][T26544] loop5: AHDI p1 p2 p3 [ 1832.037429][T26544] loop5: partition table partially beyond EOD, truncated [ 1833.055826][T26544] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1833.086373][T26544] loop5: p3 start 335544320 is beyond EOD, truncated [ 1833.107273][T26545] netlink: 'syz.2.4770': attribute type 10 has an invalid length. [ 1833.219948][T26551] netlink: 'syz.2.4770': attribute type 10 has an invalid length. [ 1833.266439][T26551] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1833.330584][T26559] kAFS: unable to lookup cell ' ' [ 1833.350872][T26545] bond0: (slave netdevsim1): Releasing backup interface [ 1833.380238][T26545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1833.408346][T26545] team0: Port device netdevsim1 added [ 1833.423326][T26559] netlink: 'syz.9.4777': attribute type 10 has an invalid length. [ 1833.476956][T26564] netlink: 'syz.9.4777': attribute type 10 has an invalid length. [ 1833.516051][ C0] ------------[ cut here ]------------ [ 1833.521592][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1833.531451][ C0] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#0: syz.4.4780/26565 [ 1833.542177][ C0] Modules linked in: [ 1833.546480][ C0] CPU: 0 UID: 0 PID: 26565 Comm: syz.4.4780 Tainted: G L syzkaller #0 PREEMPT(full) [ 1833.557412][ C0] Tainted: [L]=SOFTLOCKUP [ 1833.561713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1833.563630][ T5714] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1833.571805][ C0] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 1833.585601][ C0] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 07 e2 08 f7 48 8d 3d e0 1c e8 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 cb c4 76 f7 e9 03 [ 1833.605219][ C0] RSP: 0018:ffffc900000078d0 EFLAGS: 00010246 [ 1833.611280][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1833.619242][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90e7cc00 [ 1833.627302][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1833.635277][ C0] R10: 000000000000000c R11: 0000000000000000 R12: ffff8880627bfa28 [ 1833.643253][ C0] R13: ffff888081a331e8 R14: 0000000000000000 R15: dffffc0000000000 [ 1833.651583][ C0] FS: 00007fe6a33746c0(0000) GS:ffff888124386000(0000) knlGS:0000000000000000 [ 1833.660517][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1833.667097][ C0] CR2: 00007f14133ea540 CR3: 00000000ab5ca000 CR4: 00000000003526f0 [ 1833.675075][ C0] Call Trace: [ 1833.678349][ C0] [ 1833.681204][ C0] ? lockdep_unlock+0x5a/0xc0 [ 1833.685876][ C0] rate_control_send_low+0x2a8/0x7e0 [ 1833.691148][ C0] rate_control_get_rate+0x1be/0x5c0 [ 1833.696429][ C0] ieee80211_beacon_get_finish+0x45a/0x690 [ 1833.702410][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1833.708980][ C0] ? mark_held_locks+0x40/0x70 [ 1833.713746][ C0] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 1833.719453][ C0] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 1833.724993][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1833.729980][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 1833.735488][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1833.741558][ C0] mac80211_hwsim_beacon_tx+0x4d7/0xa00 [ 1833.747125][ C0] __iterate_interfaces+0x2e6/0x650 [ 1833.752306][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1833.758373][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1833.764431][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1833.771498][ C0] mac80211_hwsim_beacon+0x105/0x1b0 [ 1833.776778][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1833.782672][ C0] __hrtimer_run_queues+0x470/0xa00 [ 1833.787902][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 1833.793015][ C0] handle_softirqs+0x1ea/0xa00 [ 1833.797765][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1833.803047][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1833.807875][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 1833.813503][ C0] __irq_exit_rcu+0x162/0x210 [ 1833.818162][ C0] irq_exit_rcu+0x9/0x30 [ 1833.822412][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1833.828024][ C0] [ 1833.830947][ C0] [ 1833.833863][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1833.839820][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1833.845635][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 8a 9e 58 f6 48 89 df e8 62 ee 58 f6 e8 8d 02 85 f6 fb bf 01 00 00 00 62 ba 48 f6 65 8b 05 ab cd 7d 08 85 c0 74 06 5b e9 51 4a 00 00 [ 1833.865243][ C0] RSP: 0018:ffffc9000402f378 EFLAGS: 00000202 [ 1833.871288][ C0] RAX: 0000000000002515 RBX: ffff88802af51b60 RCX: 0000000000000080 [ 1833.879246][ C0] RDX: 0000000000000000 RSI: ffffffff8df0e6a5 RDI: 0000000000000001 [ 1833.887204][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1833.895162][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000548 [ 1833.903132][ C0] R13: ffffc9000402f3f0 R14: 0000000000000000 R15: 0000000000000000 [ 1833.911096][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1833.916286][ C0] shmem_add_to_page_cache+0x874/0xcd0 [ 1833.921737][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 1833.927713][ C0] shmem_alloc_and_add_folio+0x558/0xd40 [ 1833.933360][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1833.939539][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1833.945531][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 1833.950736][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1833.956353][ C0] ? filemap_map_pages+0x9c1/0x2140 [ 1833.961557][ C0] shmem_fault+0x1f9/0xa20 [ 1833.965959][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 1833.970891][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1833.976332][ C0] ? find_held_lock+0x2b/0x80 [ 1833.980995][ C0] __do_fault+0x10b/0x440 [ 1833.985326][ C0] do_fault+0xa99/0x1750 [ 1833.989565][ C0] __handle_mm_fault+0x187d/0x2a00 [ 1833.994694][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1834.000050][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1834.005505][ C0] ? pte_offset_map_lock+0x174/0x320 [ 1834.010767][ C0] ? find_held_lock+0x2b/0x80 [ 1834.015434][ C0] ? follow_page_pte+0x4d0/0x13f0 [ 1834.020440][ C0] handle_mm_fault+0x37b/0xa30 [ 1834.025199][ C0] __get_user_pages+0x1178/0x32a0 [ 1834.030204][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1834.035579][ C0] populate_vma_page_range+0x267/0x3f0 [ 1834.041018][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1834.046996][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 1834.052778][ C0] ? do_mmap+0x93f/0x12f0 [ 1834.057107][ C0] __mm_populate+0x107/0x3a0 [ 1834.061674][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1834.066780][ C0] ? up_write+0x28c/0x4f0 [ 1834.071094][ C0] vm_mmap_pgoff+0x37f/0x470 [ 1834.075661][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1834.080761][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1834.087620][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 1834.092275][ C0] ? kcov_ioctl+0x16a/0x720 [ 1834.096762][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1834.102029][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1834.107816][ C0] __x64_sys_mmap+0x125/0x190 [ 1834.112482][ C0] do_syscall_64+0x115/0x870 [ 1834.117050][ C0] ? clear_bhb_loop+0x40/0x90 [ 1834.121718][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.127584][ C0] RIP: 0033:0x7fe6a259ce59 [ 1834.132026][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.151647][ C0] RSP: 002b:00007fe6a3374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1834.160055][ C0] RAX: ffffffffffffffda RBX: 00007fe6a2815fa0 RCX: 00007fe6a259ce59 [ 1834.168020][ C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1834.176002][ C0] RBP: 00007fe6a2632d6f R08: ffffffffffffffff R09: 0000000000000000 [ 1834.183963][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1834.191916][ C0] R13: 00007fe6a2816038 R14: 00007fe6a2815fa0 R15: 00007fffadf12678 [ 1834.199881][ C0] [ 1834.202878][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1834.210148][ C0] CPU: 0 UID: 0 PID: 26565 Comm: syz.4.4780 Tainted: G L syzkaller #0 PREEMPT(full) [ 1834.221067][ C0] Tainted: [L]=SOFTLOCKUP [ 1834.225379][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1834.235421][ C0] Call Trace: [ 1834.238700][ C0] [ 1834.241535][ C0] dump_stack_lvl+0x100/0x190 [ 1834.246194][ C0] vpanic+0x552/0x970 [ 1834.250149][ C0] ? __pfx_vpanic+0x10/0x10 [ 1834.254629][ C0] panic+0xd1/0xe0 [ 1834.258324][ C0] ? __pfx_panic+0x10/0x10 [ 1834.262719][ C0] ? check_panic_on_warn+0x1f/0x90 [ 1834.267814][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1834.273161][ C0] ? __rate_control_send_low+0x610/0x760 [ 1834.278769][ C0] __warn.cold+0x191/0x328 [ 1834.283163][ C0] __report_bug+0x296/0x3d0 [ 1834.287642][ C0] ? __rate_control_send_low+0x610/0x760 [ 1834.293251][ C0] ? __pfx___report_bug+0x10/0x10 [ 1834.298335][ C0] ? lock_release+0x245/0x310 [ 1834.302989][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 1834.307735][ C0] ? kernel_text_address+0x8d/0x100 [ 1834.312908][ C0] ? __kernel_text_address+0xd/0x30 [ 1834.318082][ C0] ? unwind_get_return_address+0x59/0xa0 [ 1834.323702][ C0] report_bug_entry+0xe1/0x290 [ 1834.328460][ C0] ? __rate_control_send_low+0x621/0x760 [ 1834.334080][ C0] handle_bug+0x1cd/0x2a0 [ 1834.338403][ C0] exc_invalid_op+0x17/0x50 [ 1834.342896][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1834.347730][ C0] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 1834.353966][ C0] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 07 e2 08 f7 48 8d 3d e0 1c e8 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 cb c4 76 f7 e9 03 [ 1834.373570][ C0] RSP: 0018:ffffc900000078d0 EFLAGS: 00010246 [ 1834.379621][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1834.387592][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90e7cc00 [ 1834.395543][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1834.403501][ C0] R10: 000000000000000c R11: 0000000000000000 R12: ffff8880627bfa28 [ 1834.411471][ C0] R13: ffff888081a331e8 R14: 0000000000000000 R15: dffffc0000000000 [ 1834.419455][ C0] ? lockdep_unlock+0x5a/0xc0 [ 1834.424127][ C0] rate_control_send_low+0x2a8/0x7e0 [ 1834.429481][ C0] rate_control_get_rate+0x1be/0x5c0 [ 1834.434746][ C0] ieee80211_beacon_get_finish+0x45a/0x690 [ 1834.440529][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1834.446844][ C0] ? mark_held_locks+0x40/0x70 [ 1834.451606][ C0] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 1834.457319][ C0] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 1834.462844][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1834.467760][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 1834.473303][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1834.479359][ C0] mac80211_hwsim_beacon_tx+0x4d7/0xa00 [ 1834.484894][ C0] __iterate_interfaces+0x2e6/0x650 [ 1834.490069][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1834.496122][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1834.502204][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1834.509218][ C0] mac80211_hwsim_beacon+0x105/0x1b0 [ 1834.514485][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1834.520282][ C0] __hrtimer_run_queues+0x470/0xa00 [ 1834.525464][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 1834.530555][ C0] handle_softirqs+0x1ea/0xa00 [ 1834.535297][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1834.540559][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1834.545382][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 1834.550997][ C0] __irq_exit_rcu+0x162/0x210 [ 1834.555650][ C0] irq_exit_rcu+0x9/0x30 [ 1834.559867][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1834.565492][ C0] [ 1834.568395][ C0] [ 1834.571306][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1834.577260][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1834.583047][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 8a 9e 58 f6 48 89 df e8 62 ee 58 f6 e8 8d 02 85 f6 fb bf 01 00 00 00 62 ba 48 f6 65 8b 05 ab cd 7d 08 85 c0 74 06 5b e9 51 4a 00 00 [ 1834.602626][ C0] RSP: 0018:ffffc9000402f378 EFLAGS: 00000202 [ 1834.608666][ C0] RAX: 0000000000002515 RBX: ffff88802af51b60 RCX: 0000000000000080 [ 1834.616610][ C0] RDX: 0000000000000000 RSI: ffffffff8df0e6a5 RDI: 0000000000000001 [ 1834.624556][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1834.632501][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000548 [ 1834.640443][ C0] R13: ffffc9000402f3f0 R14: 0000000000000000 R15: 0000000000000000 [ 1834.648413][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1834.653613][ C0] shmem_add_to_page_cache+0x874/0xcd0 [ 1834.659075][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 1834.665043][ C0] shmem_alloc_and_add_folio+0x558/0xd40 [ 1834.670657][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1834.676788][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1834.682749][ C0] shmem_get_folio_gfp+0x6ab/0x1900 [ 1834.687928][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1834.693542][ C0] ? filemap_map_pages+0x9c1/0x2140 [ 1834.698719][ C0] shmem_fault+0x1f9/0xa20 [ 1834.703124][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 1834.708043][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1834.713482][ C0] ? find_held_lock+0x2b/0x80 [ 1834.718152][ C0] __do_fault+0x10b/0x440 [ 1834.722477][ C0] do_fault+0xa99/0x1750 [ 1834.726706][ C0] __handle_mm_fault+0x187d/0x2a00 [ 1834.731798][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1834.737165][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1834.742621][ C0] ? pte_offset_map_lock+0x174/0x320 [ 1834.747889][ C0] ? find_held_lock+0x2b/0x80 [ 1834.752562][ C0] ? follow_page_pte+0x4d0/0x13f0 [ 1834.757566][ C0] handle_mm_fault+0x37b/0xa30 [ 1834.762313][ C0] __get_user_pages+0x1178/0x32a0 [ 1834.767319][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1834.772686][ C0] populate_vma_page_range+0x267/0x3f0 [ 1834.778123][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1834.784077][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 1834.789856][ C0] ? do_mmap+0x93f/0x12f0 [ 1834.794161][ C0] __mm_populate+0x107/0x3a0 [ 1834.798727][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1834.803829][ C0] ? up_write+0x28c/0x4f0 [ 1834.808150][ C0] vm_mmap_pgoff+0x37f/0x470 [ 1834.812726][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1834.817812][ C0] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1834.824655][ C0] ksys_mmap_pgoff+0xe4/0x610 [ 1834.829325][ C0] ? kcov_ioctl+0x16a/0x720 [ 1834.833808][ C0] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1834.839068][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1834.844857][ C0] __x64_sys_mmap+0x125/0x190 [ 1834.849524][ C0] do_syscall_64+0x115/0x870 [ 1834.854103][ C0] ? clear_bhb_loop+0x40/0x90 [ 1834.858758][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.864625][ C0] RIP: 0033:0x7fe6a259ce59 [ 1834.869014][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1834.888595][ C0] RSP: 002b:00007fe6a3374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1834.896981][ C0] RAX: ffffffffffffffda RBX: 00007fe6a2815fa0 RCX: 00007fe6a259ce59 [ 1834.904927][ C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1834.912874][ C0] RBP: 00007fe6a2632d6f R08: ffffffffffffffff R09: 0000000000000000 [ 1834.920820][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1834.928764][ C0] R13: 00007fe6a2816038 R14: 00007fe6a2815fa0 R15: 00007fffadf12678 [ 1834.936729][ C0] [ 1834.939914][ C0] Kernel Offset: disabled [ 1834.944215][ C0] Rebooting in 86400 seconds..