last executing test programs: 25m1.255275511s ago: executing program 1 (id=1611): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x23, 0x0, 0x2, 0x2, 0x400a9, 0x1, 0x2, 0x1}) 24m52.716362909s ago: executing program 1 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x0, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x2, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x10003, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x4, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x8000, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0xd2bf, 0x200, 0x6]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0x5}, {0xa, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x10) 24m52.578299778s ago: executing program 1 (id=1643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="010000000000fcdbdf25010000000800020001000000040004800800010000000000700008800c00078008000600c2"], 0x98}}, 0x0) 24m51.584171175s ago: executing program 1 (id=1644): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204032, 0xffffffffffffffff, 0xec776000) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) 24m50.445186825s ago: executing program 1 (id=1647): sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 24m48.538644933s ago: executing program 1 (id=1660): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 24m39.515772172s ago: executing program 3 (id=1704): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x40001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, 0x0, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno', @ANYRESHEX=r7]) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000940)="d8000000100081044e81f782db44b904021d006a0f000000dafe55a1290015000600142603600e120900040004ed0000a80016470a000a40020000000006ffc3b94dcf5c0461c1d67f6f94007134cf6ee08000a0e6475acc136f33cdd3f154bed8ef52a98516277ce06bbace802e8bec4c2ee5a7cef4090000001fb7914df9255ece1b019d9514d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040e3d95667e006dcdf63951f215ce3bb9ad809d5e1cace81508ff60d7fed0bffece0b42a9ecbee90", 0xd5}], 0x1}, 0x60010) 24m35.193974169s ago: executing program 3 (id=1721): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res(0x0, 0x81, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 24m34.554062875s ago: executing program 3 (id=1722): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x9}}}, 0x0) shutdown(0xffffffffffffffff, 0x1) getpid() ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 24m33.681571922s ago: executing program 3 (id=1726): r0 = io_uring_setup(0xaac, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2300000000000000, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x40040, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x100}, &(0x7f0000000240), &(0x7f0000000180), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4814) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000180), 0x0}, 0x20) ptrace$poke(0x1, 0x0, 0x0, 0xffffffffffffffff) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 24m33.411807064s ago: executing program 32 (id=1660): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 24m32.963143574s ago: executing program 3 (id=1730): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0xfffd, 0x1, 0x7ff, 0x9}, {0x6, 0x1, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4809c}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 24m32.662466004s ago: executing program 3 (id=1731): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffe, 0xffffffffc068dc81, 0x81, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) io_submit(r2, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r1, r0, 0x0) 24m16.934263164s ago: executing program 33 (id=1731): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xfffffe, 0xffffffffc068dc81, 0x81, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) io_submit(r2, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r1, r0, 0x0) 13m34.567231596s ago: executing program 0 (id=3310): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000"], 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000200), 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r11, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x24000000) r12 = openat$cgroup_int(r9, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x4) 13m33.94089891s ago: executing program 0 (id=3313): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000400)) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000240)={@ethernet={0x6, @random="0aa7ee48fc40"}, {0x0}, 0x0, 0x2}, 0xa0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000200)={&(0x7f0000000180)=""/114, 0x72}) acct(&(0x7f00000000c0)='./bus\x00') acct(0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x4207, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$tty1(0xc, 0x4, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast1}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f00000000c0)="826bb66f", 0x4, 0x0, 0x0, 0x0) 13m32.693843632s ago: executing program 0 (id=3316): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00", @ANYRES16, @ANYRES16], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x0, 0x5, 0xb, 0xf0, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x20008000) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 13m29.423082938s ago: executing program 0 (id=3322): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x14) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000304ee000000fedb"], 0x6c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13m25.999177961s ago: executing program 0 (id=3329): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) r5 = socket$inet(0x2, 0x80001, 0x84) listen(r5, 0x3) listen(r2, 0x6) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x32315241, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0x2}, {0x1002}, {0x7}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0x100000, 0x13ff}], 0x0, 0x0, 0x7}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000380)=@nl=@kern={0x10, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)="b5f3229b7d65f94f041b9a71277114ce288a4659423c76afec166d6161b55946c38a00b848af03247eafd765646121448a85212e9ee4b18b745358c211b0bae8b8cab47af2729fc04623549ebe4681a8fcb97aa37e7895f7ef1436db6140d2056b27a7018788c9ff", 0x68}, {&(0x7f00000004c0)="a5ec2b0b52707bca300f5a6a2c90c576f36ee38723a8f69b4ee394f42e37c9246a6a4d5ba37a00ad9c685320ed1fce0bc3b81a6a0ec37d13c89b2934bbe3a423646f96e5cf25", 0x46}, {&(0x7f0000000a80)="b1a4137b4acabbe2a042addfc5e6f63a6275558fe0402328767052cb8f551f37b6d5b3be967d6f1ce51cc55a562cfbef9dde0bfe74182abca6c76acec5427e38f18b8eca4a543f80d8a3bf0754962d65b464b5e86e159123fe3b69b6d1495ae42961a7cc9ff0c3c38a12fe0d9c7eb980017dc2b11c4e614a8defa5f62d811306d7b6da9701dd53d3e74cbdbfa93f758c58af5afd6b426281e18a6e3c7ecd53f91885781a649200667c686a", 0xab}], 0x3, &(0x7f0000000b80)}}, {{&(0x7f0000000c00)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000003180)}}, {{0x0, 0x0, &(0x7f0000003580), 0x0, &(0x7f00000004c0)}}, {{&(0x7f00000005c0)=@l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3ff, 0x1}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)="81f8a7077b8dc63d8524b6e09e45a1e3066bee9cc9301ba8b583dd9223f5e63113a99ae0b9d20581e14b299e0b7ad0b7987e8227b0d7c85b453d8ae84053c2696f23f0a865be4475bd119928f83ced", 0x4f}, {&(0x7f0000000a00)="4f36cfd3cbdd36c64723795ad14a281ff50d9a22f1827130d99df22fc2d5fd2f36d948058acee47e67b5be82ef5371256711c4f68f241522f706659b4fc4a40f93a6f7c72c68c2874b4ba3cf2114939f7b0c6c9076799a084928edca0a62f38940b6af5d00fd79f8d1c1e88ad517", 0x6e}], 0x2, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}, {{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xd, @private0, 0x11f, 0x2}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)="0c406d1aa5872461d73e575ad736a93c8d0cee2550e2e9b8c339619ccde9870fa95029ad9e1d2656d4f80e5693e1ec0a061fe63245377808c84758f22fad39c8cbed3dafc9ab0db63999b2d7333dc2ffbf7e96780274e055d9f86c8795d60e5f1f697a59526b881ca3428d8f121a72cd938106ad979e3c9d0336b611691fc1d024932d280274301aa493a8f5f7c32a67a7226d877f1037453b3c5b9765350eb8c05ef19d2b52c93cc2a32f2fb2767d32fb8aa1324d00", 0xb6}, {0x0}], 0x2, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f0000000fc0)=@x25, 0x80, &(0x7f0000001200)=[{&(0x7f0000001040)}, {&(0x7f0000001140)="c0327cd548d2", 0x6}, {&(0x7f0000001180)="acd880044dc6ba9b1df6ded419d62306a42039f2c5d9aeced70f3e1dc8cdc59865a123305153a9df8503a27616378af76ce9b3e357144fea9f723fd17fad1a0c879afdee979be955fd10896d0d44e6c819d7d8fe1213d38362a7284136685d301a581887816059f908ca2f408f54ff8766823589", 0x74}], 0x3}}], 0x6, 0x4008009) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="7f91c9f6c39288e9e306e006b23fa363dfaeb1d0268bee7efd3158a78f16ab84ec255b98c34c2cf17049d76ba866d8fa36d3c2053efe2f6be95cde2b2f137de57a68a5305eb27c2c9887dc012c02286c6b1128003a221b59aad4fe005f9fae9cb961b5888f788118c92931625a1415891ce17ccd52fba80f"], 0x190) close(r7) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) 13m22.186760092s ago: executing program 0 (id=3338): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x14) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000304ee000000fe", @ANYBLOB], 0x6c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13m6.839146094s ago: executing program 34 (id=3338): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x14) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000304ee000000fe", @ANYBLOB], 0x6c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10m21.114797192s ago: executing program 5 (id=3666): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x14) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000304ee000000fedb", @ANYBLOB], 0x6c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) r7 = add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10m17.064137103s ago: executing program 5 (id=3673): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x14) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000304ee000000fedb", @ANYBLOB], 0x6c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) r7 = add_key$user(0x0, &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10m11.297649487s ago: executing program 5 (id=3687): r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x2, 0x284000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0xbbd, 0x28, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='asymmetric\x00', 0x0) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r1) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000001c0)=""/64, 0x312000, 0x800, 0x4, 0x6}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) 10m7.699573279s ago: executing program 5 (id=3690): syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x14) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c00000010000304ee000000fedb", @ANYBLOB], 0x6c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r5, &(0x7f0000000140), 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1a1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 9m59.409062367s ago: executing program 5 (id=3708): r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x2, 0x284000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0xbbd, 0x28, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r2}) request_key(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, r1) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000001c0)=""/64, 0x312000, 0x800, 0x4, 0x6}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) 9m57.772449259s ago: executing program 5 (id=3710): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4004) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) r5 = socket$inet(0x2, 0x80001, 0x84) listen(r5, 0x3) listen(r2, 0x6) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x32315241, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0x2}, {0x1002}, {0x7}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0x100000, 0x13ff}], 0x0, 0x0, 0x7}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000380)=@nl=@kern={0x10, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)="b5f3229b7d65f94f041b9a71277114ce288a4659423c76afec166d6161b55946c38a00b848af03247eafd765646121448a85212e9ee4b18b745358c211b0bae8b8cab47af2729fc04623549ebe4681a8fcb97aa37e7895f7ef1436db6140d2056b27a7018788c9ff", 0x68}, {&(0x7f00000004c0)="a5ec2b0b52707bca300f5a6a2c90c576f36ee38723a8f69b4ee394f42e37c9246a6a4d5ba37a00ad9c685320ed1fce0bc3b81a6a0ec37d13c89b2934bbe3a423646f96e5cf25", 0x46}, {&(0x7f0000000a80)="b1a4137b4acabbe2a042addfc5e6f63a6275558fe0402328767052cb8f551f37b6d5b3be967d6f1ce51cc55a562cfbef9dde0bfe74182abca6c76acec5427e38f18b8eca4a543f80d8a3bf0754962d65b464b5e86e159123fe3b69b6d1495ae42961a7cc9ff0c3c38a12fe0d9c7eb980017dc2b11c4e614a8defa5f62d811306d7b6da9701dd53d3e74cbdbfa93f758c58af5afd6b426281e18a6e3c7ecd53f91885781a649200667c686a", 0xab}], 0x3, &(0x7f0000000b80)}}, {{&(0x7f0000000c00)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000003180)}}, {{0x0, 0x0, &(0x7f0000003580), 0x0, &(0x7f00000004c0)}}, {{&(0x7f00000005c0)=@l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3ff, 0x1}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)="81f8a7077b8dc63d8524b6e09e45a1e3066bee9cc9301ba8b583dd9223f5e63113a99ae0b9d20581e14b299e0b7ad0b7987e8227b0d7c85b453d8ae84053c2696f23f0a865be4475bd119928f83ced", 0x4f}, {&(0x7f0000000a00)="4f36cfd3cbdd36c64723795ad14a281ff50d9a22f1827130d99df22fc2d5fd2f36d948058acee47e67b5be82ef5371256711c4f68f241522f706659b4fc4a40f93a6f7c72c68c2874b4ba3cf2114939f7b0c6c9076799a084928edca0a62f38940b6af5d00fd79f8d1c1e88ad517", 0x6e}], 0x2, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}, {{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xd, @private0, 0x11f, 0x2}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)="0c406d1aa5872461d73e575ad736a93c8d0cee2550e2e9b8c339619ccde9870fa95029ad9e1d2656d4f80e5693e1ec0a061fe63245377808c84758f22fad39c8cbed3dafc9ab0db63999b2d7333dc2ffbf7e96780274e055d9f86c8795d60e5f1f697a59526b881ca3428d8f121a72cd938106ad979e3c9d0336b611691fc1d024932d280274301aa493a8f5f7c32a67a7226d877f1037453b3c5b9765350eb8c05ef19d2b52c93cc2a32f2fb2767d32fb8aa1324d00", 0xb6}, {0x0}], 0x2, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f0000000fc0)=@x25, 0x80, &(0x7f0000001200)=[{&(0x7f0000001040)}, {&(0x7f0000001140)}, {&(0x7f0000001180)="acd880044dc6ba9b1df6ded419d62306a42039f2c5d9aeced70f3e1dc8cdc59865a123305153a9df8503a27616378af76ce9b3e357144fea9f723fd17fad1a0c879afdee979be955fd10896d0d44e6c819d7d8fe1213d38362a7284136685d301a581887816059f908ca2f408f54ff8766823589", 0x74}], 0x3}}], 0x6, 0x4008009) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="7f91c9f6c39288e9e306e006b23fa363dfaeb1d0268bee7efd3158a78f16ab84ec255b98c34c2cf17049d76ba866d8fa36d3c2053efe2f6be95cde2b2f137de57a68a5305eb27c2c9887dc012c02286c6b1128003a221b59aad4fe005f9fae9cb961b5888f788118c92931625a1415891ce17ccd52fba80f"], 0x190) close(r7) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) 9m42.641714068s ago: executing program 35 (id=3710): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4004) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2) r5 = socket$inet(0x2, 0x80001, 0x84) listen(r5, 0x3) listen(r2, 0x6) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x32315241, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0x2}, {0x1002}, {0x7}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0x100000, 0x13ff}], 0x0, 0x0, 0x7}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000380)=@nl=@kern={0x10, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)="b5f3229b7d65f94f041b9a71277114ce288a4659423c76afec166d6161b55946c38a00b848af03247eafd765646121448a85212e9ee4b18b745358c211b0bae8b8cab47af2729fc04623549ebe4681a8fcb97aa37e7895f7ef1436db6140d2056b27a7018788c9ff", 0x68}, {&(0x7f00000004c0)="a5ec2b0b52707bca300f5a6a2c90c576f36ee38723a8f69b4ee394f42e37c9246a6a4d5ba37a00ad9c685320ed1fce0bc3b81a6a0ec37d13c89b2934bbe3a423646f96e5cf25", 0x46}, {&(0x7f0000000a80)="b1a4137b4acabbe2a042addfc5e6f63a6275558fe0402328767052cb8f551f37b6d5b3be967d6f1ce51cc55a562cfbef9dde0bfe74182abca6c76acec5427e38f18b8eca4a543f80d8a3bf0754962d65b464b5e86e159123fe3b69b6d1495ae42961a7cc9ff0c3c38a12fe0d9c7eb980017dc2b11c4e614a8defa5f62d811306d7b6da9701dd53d3e74cbdbfa93f758c58af5afd6b426281e18a6e3c7ecd53f91885781a649200667c686a", 0xab}], 0x3, &(0x7f0000000b80)}}, {{&(0x7f0000000c00)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000003180)}}, {{0x0, 0x0, &(0x7f0000003580), 0x0, &(0x7f00000004c0)}}, {{&(0x7f00000005c0)=@l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3ff, 0x1}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000008c0)="81f8a7077b8dc63d8524b6e09e45a1e3066bee9cc9301ba8b583dd9223f5e63113a99ae0b9d20581e14b299e0b7ad0b7987e8227b0d7c85b453d8ae84053c2696f23f0a865be4475bd119928f83ced", 0x4f}, {&(0x7f0000000a00)="4f36cfd3cbdd36c64723795ad14a281ff50d9a22f1827130d99df22fc2d5fd2f36d948058acee47e67b5be82ef5371256711c4f68f241522f706659b4fc4a40f93a6f7c72c68c2874b4ba3cf2114939f7b0c6c9076799a084928edca0a62f38940b6af5d00fd79f8d1c1e88ad517", 0x6e}], 0x2, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}, {{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0xd, @private0, 0x11f, 0x2}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d80)="0c406d1aa5872461d73e575ad736a93c8d0cee2550e2e9b8c339619ccde9870fa95029ad9e1d2656d4f80e5693e1ec0a061fe63245377808c84758f22fad39c8cbed3dafc9ab0db63999b2d7333dc2ffbf7e96780274e055d9f86c8795d60e5f1f697a59526b881ca3428d8f121a72cd938106ad979e3c9d0336b611691fc1d024932d280274301aa493a8f5f7c32a67a7226d877f1037453b3c5b9765350eb8c05ef19d2b52c93cc2a32f2fb2767d32fb8aa1324d00", 0xb6}, {0x0}], 0x2, &(0x7f0000000f40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f0000000fc0)=@x25, 0x80, &(0x7f0000001200)=[{&(0x7f0000001040)}, {&(0x7f0000001140)}, {&(0x7f0000001180)="acd880044dc6ba9b1df6ded419d62306a42039f2c5d9aeced70f3e1dc8cdc59865a123305153a9df8503a27616378af76ce9b3e357144fea9f723fd17fad1a0c879afdee979be955fd10896d0d44e6c819d7d8fe1213d38362a7284136685d301a581887816059f908ca2f408f54ff8766823589", 0x74}], 0x3}}], 0x6, 0x4008009) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x104) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="7f91c9f6c39288e9e306e006b23fa363dfaeb1d0268bee7efd3158a78f16ab84ec255b98c34c2cf17049d76ba866d8fa36d3c2053efe2f6be95cde2b2f137de57a68a5305eb27c2c9887dc012c02286c6b1128003a221b59aad4fe005f9fae9cb961b5888f788118c92931625a1415891ce17ccd52fba80f"], 0x190) close(r7) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) 9.684171343s ago: executing program 6 (id=5057): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 1.12705102s ago: executing program 7 (id=5215): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.096462387s ago: executing program 6 (id=5060): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) 1.012299384s ago: executing program 7 (id=5218): socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x201, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7e}) 953.339259ms ago: executing program 6 (id=5219): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x0, 0x59ee}, 0x8) 828.717031ms ago: executing program 7 (id=5225): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], &(0x7f0000002500)=""/4090, 0x7a, 0xffa, 0x9}, 0x28) 719.349347ms ago: executing program 6 (id=5227): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="a4", 0x1, 0x200000c4, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) shutdown(0xffffffffffffffff, 0x1) 719.256857ms ago: executing program 7 (id=5228): sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 702.225546ms ago: executing program 2 (id=5229): r0 = syz_open_dev$sg(0x0, 0x0, 0xa8242) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) r2 = socket$netlink(0x10, 0x3, 0x0) poll(&(0x7f0000000040)=[{r1, 0x4}, {r2, 0xbc595a4d4315eb}], 0x2, 0x3a8c) 670.910841ms ago: executing program 6 (id=5230): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) 623.512135ms ago: executing program 2 (id=5231): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) 623.391993ms ago: executing program 7 (id=5232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 602.889333ms ago: executing program 7 (id=5233): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="1c", 0x1, 0x200080c0, &(0x7f0000000140)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) sendto$inet6(r0, &(0x7f0000000180)="f8", 0x1, 0x20000040, 0x0, 0x0) 602.412089ms ago: executing program 8 (id=5234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 560.285067ms ago: executing program 6 (id=5235): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x9, 0x9}, {0x6, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) 560.142021ms ago: executing program 4 (id=5236): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) close(r0) 481.788828ms ago: executing program 8 (id=5237): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80, 0x3}, 0x20) 481.550552ms ago: executing program 2 (id=5238): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 427.704094ms ago: executing program 4 (id=5239): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_io_uring_setup(0x3438, &(0x7f0000000540)={0x0, 0x595f, 0x800, 0x0, 0x800e8, 0x0, r0}, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 403.269661ms ago: executing program 4 (id=5240): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x80, @empty, 0x3}, 0x80, 0x0}, 0x4000) 397.508425ms ago: executing program 8 (id=5241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 339.638388ms ago: executing program 2 (id=5242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0xdb0b, 0x1, 0x56}}}}}}, 0x0) 284.725228ms ago: executing program 8 (id=5243): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x380, 0x298, 0x0, 0x298, 0x298, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xff000000, 0x0, 0xff, 0xffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], 'ip6_vti0\x00', 'tunl0\x00', {0xff}, {}, 0x2e, 0x7, 0x5, 0x40}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x19, 0x10, 0x6}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffffff], 'macvtap0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv4=@private=0xa010101, 0x29, 0x27, 0xdbd5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x6}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@mcast2, 0xd3, 0x0, 0xa}}}, {{@ipv6={@empty, @remote, [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'pim6reg1\x00', 'ipvlan0\x00', {0xff}, {}, 0x32, 0x4, 0x4, 0x19}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@private=0xa010102, 0x18, 0x17, 0xc1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x58c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) 284.121656ms ago: executing program 4 (id=5244): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) 259.72243ms ago: executing program 2 (id=5245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 207.397768ms ago: executing program 2 (id=5246): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60010000000c1100fe8000000000000000000000000000aaff02000000000000000000000000000140400e22000c90"], 0x0) 166.110052ms ago: executing program 8 (id=5247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) 51.309077ms ago: executing program 4 (id=5248): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e29, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}, 0x1c) 51.037979ms ago: executing program 8 (id=5249): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000001"], 0x48) r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 0s ago: executing program 4 (id=5250): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}]}) kernel console output (not intermixed with test programs): [ 1903.233801][ T5743] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1903.247052][ T5743] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.257943][ T5743] usb 7-1: config 0 descriptor?? [ 1903.353651][ T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1903.515498][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1903.529275][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1903.558489][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1903.578319][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.590299][ T24] usb 5-1: Product: syz [ 1903.594851][ T24] usb 5-1: Manufacturer: syz [ 1903.601823][ T24] usb 5-1: SerialNumber: syz [ 1903.849596][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1904.381504][T25329] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1904.609864][ T24] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1904.641976][ T24] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1904.714383][T25326] 9p: Bad value for 'wfdno' [ 1905.146285][ T5743] usb 7-1: string descriptor 0 read error: -71 [ 1905.169563][ T24] usb 5-1: invalid uac2 rates [ 1905.175294][ T24] usb 5-1: invalid uac2 rates [ 1905.183221][ T5743] usb 7-1: USB disconnect, device number 57 [ 1905.191435][ T24] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1905.216370][ T24] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1906.145025][ T24] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1906.249925][ T24] usb 5-1: USB disconnect, device number 65 [ 1906.963788][T20978] udevd[20978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1907.034097][ T5729] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1907.285595][ T5729] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1907.320820][ T5729] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.355787][ T5729] usb 9-1: config 0 has no interfaces? [ 1907.374304][ T5729] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1907.418273][ T5729] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.468644][ T5729] usb 9-1: config 0 descriptor?? [ 1908.033438][ T5743] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1908.280838][ T5743] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1908.326564][ T5743] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1908.392887][ T5743] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1908.397952][T25357] 9p: Bad value for 'wfdno' [ 1908.446229][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.486683][ T5743] usb 5-1: Product: syz [ 1908.523275][ T5743] usb 5-1: Manufacturer: syz [ 1908.546146][ T5743] usb 5-1: SerialNumber: syz [ 1908.581436][ T5743] usb 5-1: config 0 descriptor?? [ 1908.624724][ T5743] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1908.732597][ T5729] usb 9-1: can't set config #0, error -71 [ 1908.771340][ T5729] usb 9-1: USB disconnect, device number 54 [ 1908.839864][T25363] 9p: Bad value for 'rfdno' [ 1908.966610][ T5743] usb 5-1: USB disconnect, device number 66 [ 1909.184706][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.328915][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1911.235824][ T30] audit: type=1400 audit(1782130334.091:4738): avc: denied { map_read map_write } for pid=25381 comm="syz.8.4731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1911.326101][ T30] audit: type=1400 audit(1782130334.131:4739): avc: denied { mount } for pid=25381 comm="syz.8.4731" name="/" dev="autofs" ino=120193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1911.832082][T25379] 9p: Bad value for 'rfdno' [ 1913.654969][ T5729] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1913.720135][ T30] audit: type=1400 audit(1782130336.571:4740): avc: denied { map } for pid=25410 comm="syz.7.4739" path="socket:[120236]" dev="sockfs" ino=120236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1913.864527][ T5729] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1913.911856][ T5729] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.950204][ T5729] usb 5-1: config 0 has no interfaces? [ 1913.978724][ T5729] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1914.018263][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.082703][ T5729] usb 5-1: config 0 descriptor?? [ 1914.392967][T25015] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1914.425073][T25407] 9p: Bad value for 'wfdno' [ 1916.130183][T25015] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1916.178747][T25015] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1916.245827][T25015] usb 9-1: config 0 has no interfaces? [ 1916.317173][T25015] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1916.379413][ T5729] usb 5-1: string descriptor 0 read error: -71 [ 1916.438713][T25015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.462862][ T5729] usb 5-1: USB disconnect, device number 67 [ 1916.819233][T25015] usb 9-1: config 0 descriptor?? [ 1917.302861][ T5729] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1917.354191][T25432] 9p: Bad value for 'wfdno' [ 1917.506313][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1917.535144][ T5729] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1917.564569][ T5729] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1917.590451][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.626943][ T5729] usb 5-1: Product: syz [ 1917.643430][ T5729] usb 5-1: Manufacturer: syz [ 1917.658561][ T5729] usb 5-1: SerialNumber: syz [ 1917.797996][T25015] usb 9-1: can't set config #0, error -71 [ 1917.813643][ T5743] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1917.855821][T25015] usb 9-1: USB disconnect, device number 55 [ 1917.947442][ T5729] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1917.984749][ T5743] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1918.004559][ T5743] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1918.034965][ T5743] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1918.052713][ T5743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.078968][ T5743] usb 7-1: Product: syz [ 1918.092561][ T5743] usb 7-1: Manufacturer: syz [ 1918.111238][ T5743] usb 7-1: SerialNumber: syz [ 1918.591269][T25457] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1918.676978][ T5729] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1918.708460][ T5729] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1919.398488][T25443] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1919.544848][ T5729] usb 5-1: invalid uac2 rates [ 1919.564153][ T5729] usb 5-1: invalid uac2 rates [ 1919.585958][ T5729] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1919.613812][ T5729] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1919.840150][ T5729] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1919.906723][T25463] 9p: Bad value for 'wfdno' [ 1919.961365][T25468] 9p: Bad value for 'wfdno' [ 1919.973338][ T5743] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1919.990403][ T5729] usb 5-1: USB disconnect, device number 68 [ 1920.024084][ T5743] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1920.069757][ T6847] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1920.091424][ T5743] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1920.147883][ T5743] usb 7-1: invalid uac2 rates [ 1920.170127][ T5743] usb 7-1: invalid uac2 rates [ 1920.185696][ T5743] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1920.207396][ T5743] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1920.425046][ T5743] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1920.527488][ T5743] usb 7-1: USB disconnect, device number 58 [ 1920.615035][T20978] udevd[20978]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1920.847175][T25471] 9p: Bad value for 'rfdno' [ 1921.853027][ T5729] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1921.912964][T25015] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1922.024645][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1922.040301][ T5729] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1922.064338][ T5729] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1922.082049][T25015] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1922.092735][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.111914][ T5729] usb 5-1: Product: syz [ 1922.116997][T25015] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1922.132913][ T5729] usb 5-1: Manufacturer: syz [ 1922.148699][T25015] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1922.160196][ T5729] usb 5-1: SerialNumber: syz [ 1922.184345][T25015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.203494][T25015] usb 7-1: Product: syz [ 1922.212508][T25015] usb 7-1: Manufacturer: syz [ 1922.218630][T25015] usb 7-1: SerialNumber: syz [ 1922.353131][T25492] 9p: Bad value for 'rfdno' [ 1922.514662][ T5729] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1923.803867][T25507] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1923.845958][ T5729] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1923.873792][ T5729] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1924.474805][ T5729] usb 5-1: invalid uac2 rates [ 1924.490497][ T5729] usb 5-1: invalid uac2 rates [ 1924.504374][ T5743] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 1924.529701][ T5729] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1924.559546][ T5729] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1924.678900][ T5743] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1924.701539][ T5743] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1924.730110][ T5743] usb 9-1: config 0 has no interfaces? [ 1924.749826][ T5743] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1924.777982][ T5743] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.812754][ T5743] usb 9-1: config 0 descriptor?? [ 1925.399787][T25525] 9p: Bad value for 'rfdno' [ 1925.476179][ T5729] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1925.667524][T25015] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1925.731065][ T5729] usb 5-1: USB disconnect, device number 69 [ 1925.762535][T25015] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1925.850934][T25015] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1925.917075][T25015] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1926.147113][T22363] udevd[22363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1926.147207][T25015] usb 7-1: USB disconnect, device number 59 [ 1926.772357][T19952] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1927.132817][T19952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1927.170851][T19952] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1927.184208][T25530] 9p: Bad value for 'rfdno' [ 1927.217817][T19952] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1927.256409][T19952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.278974][T19952] usb 5-1: Product: syz [ 1927.289888][T19952] usb 5-1: Manufacturer: syz [ 1927.311988][T19952] usb 5-1: SerialNumber: syz [ 1927.554247][T19952] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1928.412733][T19952] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1928.452185][T19952] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1928.749659][T19952] usb 5-1: invalid uac2 rates [ 1928.754990][T19952] usb 5-1: invalid uac2 rates [ 1928.760534][T19952] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1928.774942][T19952] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1929.042171][T25336] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1929.113766][T19952] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1929.196131][T19952] usb 5-1: USB disconnect, device number 70 [ 1929.209970][T25336] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1929.257675][T25336] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.325624][T25336] usb 7-1: config 0 has no interfaces? [ 1929.409137][T25336] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1929.567476][T25551] netlink: 'syz.2.4774': attribute type 7 has an invalid length. [ 1929.575240][T25551] netlink: 'syz.2.4774': attribute type 5 has an invalid length. [ 1929.583024][T25551] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4774'. [ 1929.680837][T25336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.713071][T25336] usb 7-1: config 0 descriptor?? [ 1929.903057][ T5743] usb 9-1: string descriptor 0 read error: -32 [ 1930.146935][ T5743] usb 9-1: USB disconnect, device number 56 [ 1932.115495][T25336] usb 7-1: string descriptor 0 read error: -71 [ 1932.176238][T25336] usb 7-1: USB disconnect, device number 60 [ 1933.142035][ T10] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1933.333432][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1933.372968][ T10] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1933.423588][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1933.453482][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.476262][ T10] usb 9-1: Product: syz [ 1933.485432][ T10] usb 9-1: Manufacturer: syz [ 1933.495382][ T10] usb 9-1: SerialNumber: syz [ 1933.682361][ T5729] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1933.724468][ T10] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1933.866702][T25602] 9p: Bad value for 'wfdno' [ 1934.176056][ T10] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1934.525465][ T5729] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1934.552944][ T5729] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1934.577633][ T5729] usb 7-1: can't read configurations, error -71 [ 1934.579581][T19952] usb 9-1: USB disconnect, device number 57 [ 1935.021919][T25336] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1935.180233][T25336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1935.213393][T25336] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1935.242438][T25614] 9p: Bad value for 'rfdno' [ 1935.274306][T25336] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1935.295940][T25336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.325423][T25336] usb 5-1: Product: syz [ 1935.337330][T25336] usb 5-1: Manufacturer: syz [ 1935.347877][T25336] usb 5-1: SerialNumber: syz [ 1935.571079][T25336] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1935.712817][T25626] netlink: 'syz.6.4795': attribute type 7 has an invalid length. [ 1935.721159][T25626] netlink: 'syz.6.4795': attribute type 5 has an invalid length. [ 1935.729512][T25626] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4795'. [ 1937.514010][T25632] bond2: left promiscuous mode [ 1937.521540][T25632] bond3: left promiscuous mode [ 1937.558650][ T5743] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1937.757344][ T5743] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1937.788107][ T5743] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1937.823077][ T5743] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1937.852605][ T5743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.861259][ T5743] usb 7-1: Product: syz [ 1937.866630][ T5743] usb 7-1: Manufacturer: syz [ 1937.873345][ T5743] usb 7-1: SerialNumber: syz [ 1938.616580][ T5729] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1939.247331][T25336] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1939.272895][T25336] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1939.282560][ T5729] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1939.293628][T25336] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1939.328714][ T5729] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1939.382398][ T5729] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1939.419567][ T5729] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.449804][ T5743] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1939.465521][T25336] usb 5-1: USB disconnect, device number 71 [ 1939.479130][ T5743] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1939.501352][ T5729] usb 9-1: Product: syz [ 1939.507035][ T5743] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1939.533763][ T5729] usb 9-1: Manufacturer: syz [ 1939.560414][ T5729] usb 9-1: SerialNumber: syz [ 1939.986189][ T5743] usb 7-1: invalid uac2 rates [ 1940.014776][ T5743] usb 7-1: invalid uac2 rates [ 1940.049727][ T5743] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1940.392386][ T5743] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1940.822583][T25659] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1940.830704][ T5743] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1941.002019][ T5729] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1941.090646][ T5743] usb 7-1: USB disconnect, device number 63 [ 1941.191272][T20978] udevd[20978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1941.336997][ T5729] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1941.388533][ T5729] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1941.481498][T25336] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1941.653914][T25336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1941.675467][T25336] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1941.706707][T25336] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1941.728521][T25336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.742519][T25336] usb 5-1: Product: syz [ 1941.747171][T25336] usb 5-1: Manufacturer: syz [ 1941.747376][ T5729] usb 9-1: invalid uac2 rates [ 1941.752751][T25336] usb 5-1: SerialNumber: syz [ 1941.801573][ T5729] usb 9-1: invalid uac2 rates [ 1941.808272][ T5729] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1941.834667][ T5729] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1942.324193][ T5729] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1942.437974][T25336] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1942.441859][ T5729] usb 9-1: USB disconnect, device number 58 [ 1942.500065][T20857] udevd[20857]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1942.548515][T25336] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1942.828258][T25674] 9p: Bad value for 'wfdno' [ 1943.029872][ T5729] usb 5-1: USB disconnect, device number 72 [ 1945.023987][T25336] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1945.152391][T19952] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1945.223563][T25336] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1945.259814][T25336] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1945.303691][T25336] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1945.329089][T25336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.364608][T25336] usb 7-1: Product: syz [ 1945.615963][T25336] usb 7-1: Manufacturer: syz [ 1945.635612][T25336] usb 7-1: SerialNumber: syz [ 1945.914241][T25336] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1946.056636][T19952] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1946.099040][T19952] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1946.115135][ T5743] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1946.136865][T19952] usb 5-1: can't read configurations, error -71 [ 1946.334175][T25738] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1946.521354][T25336] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1946.560639][T25336] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1946.624730][ T5743] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1946.633873][ T5743] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1946.650244][ T5743] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1946.659944][ T5743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.669643][ T5743] usb 9-1: Product: syz [ 1946.682882][ T5743] usb 9-1: Manufacturer: syz [ 1946.693367][ T5743] usb 9-1: SerialNumber: syz [ 1947.014920][T25336] usb 7-1: invalid uac2 rates [ 1947.026811][T25336] usb 7-1: invalid uac2 rates [ 1947.045651][T25336] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1947.068022][T25336] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1947.303857][T25336] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1947.432671][ T5743] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1947.454594][T25336] usb 7-1: USB disconnect, device number 64 [ 1948.423609][ T5743] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1948.461058][ T5743] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1948.511698][ T5743] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1948.699695][ T5743] usb 9-1: USB disconnect, device number 59 [ 1949.021470][T25336] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1949.255608][T25336] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1949.295859][T25336] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1949.339147][T25336] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1949.371051][T25336] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.397714][T25336] usb 7-1: Product: syz [ 1949.409249][T25336] usb 7-1: Manufacturer: syz [ 1949.424478][T25336] usb 7-1: SerialNumber: syz [ 1949.562219][T25015] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1949.905339][T25015] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1949.941598][T25015] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1949.957411][T25015] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1949.958069][T25336] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1949.967999][T25015] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.968112][T25015] usb 9-1: Product: syz [ 1949.968213][T25015] usb 9-1: Manufacturer: syz [ 1949.968312][T25015] usb 9-1: SerialNumber: syz [ 1950.503526][T25769] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1950.570640][T25336] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1950.623409][T25336] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1951.411533][T25773] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1951.875671][T25336] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1951.911407][T25336] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1952.061200][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1952.473016][T25336] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1952.569371][T25015] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1952.577018][T25336] usb 7-1: USB disconnect, device number 65 [ 1952.620476][T25015] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1952.667570][T25015] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1952.701571][T25015] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1953.917142][T25336] usb 9-1: USB disconnect, device number 60 [ 1954.151100][ T5743] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1954.304752][ T5743] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1954.355125][ T5743] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1954.438291][ T5743] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1954.504645][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.531252][ T5743] usb 5-1: Product: syz [ 1954.541007][ T5743] usb 5-1: Manufacturer: syz [ 1954.568337][ T5743] usb 5-1: SerialNumber: syz [ 1954.711636][T25336] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1954.828152][ T5743] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1954.914122][T25336] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1954.933416][T25336] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1954.964005][T25336] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1954.992212][T25336] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.013904][T25336] usb 9-1: Product: syz [ 1955.018591][T25336] usb 9-1: Manufacturer: syz [ 1955.085501][T25336] usb 9-1: SerialNumber: syz [ 1955.373839][T25810] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1955.509570][ T5743] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1955.547032][ T5743] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1956.051449][ T5743] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1956.051500][ T5743] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1956.329129][T25816] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1956.704161][ T5743] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1956.803587][T25336] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1956.821639][ T5743] usb 5-1: USB disconnect, device number 75 [ 1956.845287][T25336] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1956.868992][T25336] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1957.046545][T25806] 9p: Bad value for 'wfdno' [ 1957.292624][T25336] usb 9-1: invalid uac2 rates [ 1957.298028][T25336] usb 9-1: invalid uac2 rates [ 1957.304490][T25336] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1957.314133][T25336] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1957.524843][T25336] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1957.938465][T25336] usb 9-1: USB disconnect, device number 61 [ 1957.963152][T20978] udevd[20978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1958.097290][T22363] udevd[22363]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1959.524883][ T30] audit: type=1400 audit(1782130382.383:4741): avc: denied { read write } for pid=21055 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1959.637931][ T30] audit: type=1400 audit(1782130382.383:4742): avc: denied { open } for pid=21055 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1959.678003][ T30] audit: type=1400 audit(1782130382.403:4743): avc: denied { ioctl } for pid=21055 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1959.714705][ T30] audit: type=1400 audit(1782130382.473:4744): avc: denied { create } for pid=25849 comm="syz.8.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1959.737839][ T30] audit: type=1400 audit(1782130382.483:4745): avc: denied { read write } for pid=25849 comm="syz.8.4851" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1959.772703][ T30] audit: type=1400 audit(1782130382.483:4746): avc: denied { open } for pid=25849 comm="syz.8.4851" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1959.801076][ T30] audit: type=1400 audit(1782130382.483:4747): avc: denied { ioctl } for pid=25849 comm="syz.8.4851" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1959.860411][ T10] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1959.928655][ T30] audit: type=1400 audit(1782130382.783:4748): avc: denied { create } for pid=25851 comm="syz.6.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1959.990514][ T30] audit: type=1400 audit(1782130382.783:4749): avc: denied { write } for pid=25851 comm="syz.6.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1960.023043][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1960.069136][ T10] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1960.094910][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1960.107891][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.123354][ T10] usb 9-1: Product: syz [ 1960.128729][ T10] usb 9-1: Manufacturer: syz [ 1960.128765][ T30] audit: type=1400 audit(1782130382.783:4750): avc: denied { write } for pid=25851 comm="syz.6.4852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1960.197383][ T10] usb 9-1: SerialNumber: syz [ 1960.230380][T25015] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 1960.542399][T25860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1960.549715][T25860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1960.560031][T25860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1960.572820][T25860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1960.580549][T25860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1960.590269][ T10] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1960.788562][T25015] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1960.800003][T25015] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.959333][T25015] usb 7-1: config 0 has no interfaces? [ 1961.017589][T25015] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1961.392570][T25015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.486162][T25015] usb 7-1: config 0 descriptor?? [ 1961.768220][ T10] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1961.836753][T15564] bridge0: port 3(syz_tun) entered disabled state [ 1961.856988][ T10] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1961.880990][T15564] syz_tun (unregistering): left allmulticast mode [ 1961.897202][T15564] syz_tun (unregistering): left promiscuous mode [ 1961.928434][T15564] bridge0: port 3(syz_tun) entered disabled state [ 1962.173709][ T10] usb 9-1: invalid uac2 rates [ 1962.248951][ T10] usb 9-1: invalid uac2 rates [ 1962.266207][ T10] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1962.297942][ T10] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1962.344090][T21528] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1962.526538][T21528] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1962.700318][T25860] Bluetooth: hci5: command tx timeout [ 1962.964842][T25880] bond1: left promiscuous mode [ 1962.970820][T25880] bond1: left allmulticast mode [ 1962.976161][T25880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1962.985858][T25880] bond2: left promiscuous mode [ 1962.994501][T25880] bond3: left promiscuous mode [ 1963.003408][T25880] bond4: left promiscuous mode [ 1963.008361][T25880] bond4: left allmulticast mode [ 1963.013841][T25880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1963.083729][ T10] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1963.287653][T21528] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1963.328923][ T10] usb 9-1: USB disconnect, device number 62 [ 1963.349412][T21528] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.648275][T20978] udevd[20978]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1964.021155][T21528] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1964.087577][T21528] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.336366][T21528] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1964.346678][T21528] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.739596][T25890] bond20: left promiscuous mode [ 1964.745091][T25890] bond20: left allmulticast mode [ 1964.750774][T25890] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1964.761641][T25890] bond24: left promiscuous mode [ 1964.766688][T25890] bond24: left allmulticast mode [ 1964.772096][T25890] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1964.780293][T25890] bond25: left promiscuous mode [ 1964.785340][T25890] bond25: left allmulticast mode [ 1964.790799][T25890] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1964.798861][T25890] bond26: left promiscuous mode [ 1964.802680][T25860] Bluetooth: hci5: command tx timeout [ 1964.803971][T25890] bond26: left allmulticast mode [ 1964.815438][T25890] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1964.823545][T25890] bond27: left promiscuous mode [ 1964.828576][T25890] bond27: left allmulticast mode [ 1964.833951][T25890] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1964.842006][T25890] bond28: left promiscuous mode [ 1964.847062][T25890] bond28: left allmulticast mode [ 1964.852435][T25890] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1964.860867][T25890] bond29: left promiscuous mode [ 1964.865935][T25890] bond29: left allmulticast mode [ 1964.871601][T25890] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1964.879670][T25890] bond30: left promiscuous mode [ 1964.884790][T25890] bond30: left allmulticast mode [ 1964.890253][T25890] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1964.898316][T25890] bond31: left promiscuous mode [ 1964.903958][T25890] bond31: left allmulticast mode [ 1964.909290][T25890] 8021q: adding VLAN 0 to HW filter on device bond31 [ 1964.918027][T25890] bond32: left promiscuous mode [ 1964.923082][T25890] bond32: left allmulticast mode [ 1964.928414][T25890] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1964.936389][T25890] bond33: left promiscuous mode [ 1964.944745][T25890] bond34: left promiscuous mode [ 1964.950898][T25890] bond35: left promiscuous mode [ 1964.957942][T25890] bond36: left promiscuous mode [ 1964.964013][T25890] bond37: left promiscuous mode [ 1964.972425][T25890] bond39: left promiscuous mode [ 1965.037548][T25890] bond42: left promiscuous mode [ 1965.046745][T25890] bond44: left promiscuous mode [ 1965.052870][T25890] bond45: left promiscuous mode [ 1965.058715][T25890] bond46: left promiscuous mode [ 1965.067169][T25890] bond47: left promiscuous mode [ 1965.074924][T25890] bond48: left promiscuous mode [ 1965.079972][T25890] bond48: left allmulticast mode [ 1965.085605][T25890] 8021q: adding VLAN 0 to HW filter on device bond48 [ 1965.094431][T25890] bond49: left promiscuous mode [ 1965.290306][ T5771] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1965.335808][ T5771] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1965.425546][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1965.425575][ T30] audit: type=1400 audit(1782130388.284:4784): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1965.545018][T25015] usb 7-1: string descriptor 0 read error: -71 [ 1965.606717][T25015] usb 7-1: USB disconnect, device number 66 [ 1965.626885][ T30] audit: type=1400 audit(1782130388.474:4785): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1965.652940][ T5771] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1965.671389][ T30] audit: type=1400 audit(1782130388.474:4786): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1965.696648][ T30] audit: type=1400 audit(1782130388.474:4787): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1965.759245][ T30] audit: type=1400 audit(1782130388.484:4788): avc: denied { read } for pid=5271 comm="dhcpcd" name="n49" dev="tmpfs" ino=20281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1965.785220][T21528] bridge_slave_1: left allmulticast mode [ 1965.840728][T21528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1965.847620][ T5771] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1965.959412][ T5771] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1965.990368][ T30] audit: type=1400 audit(1782130388.484:4789): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n49" dev="tmpfs" ino=20281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1966.096737][ T5771] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1966.108313][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.116626][ T30] audit: type=1400 audit(1782130388.484:4790): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n49" dev="tmpfs" ino=20281 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1966.166884][T25336] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1966.179910][ T5771] usb 5-1: Product: syz [ 1966.189704][T25336] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1966.199239][ T5771] usb 5-1: Manufacturer: syz [ 1966.215948][ T5771] usb 5-1: SerialNumber: syz [ 1966.230332][T25015] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1966.280071][ T5743] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 1966.384145][T25015] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1966.397853][T25015] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1966.421595][T25015] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1966.440459][ T5743] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1966.446783][T25015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.493147][ T5743] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.495533][ T5771] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1966.513957][ T5743] usb 9-1: config 0 has no interfaces? [ 1966.519568][ T5743] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1966.530974][ T5743] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.540062][T25015] usb 7-1: Product: syz [ 1966.565533][T25015] usb 7-1: Manufacturer: syz [ 1966.566092][ T5743] usb 9-1: config 0 descriptor?? [ 1966.588291][T25015] usb 7-1: SerialNumber: syz [ 1966.893821][T25860] Bluetooth: hci5: command tx timeout [ 1966.981149][T25911] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1967.002985][ T5771] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1967.170121][ T5771] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1967.494053][T25915] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1967.826365][T21528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1967.882225][T21528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1967.909841][T21528] bond0 (unregistering): Released all slaves [ 1967.926155][T21528] bond1 (unregistering): Released all slaves [ 1967.941662][T21528] bond2 (unregistering): Released all slaves [ 1967.965225][T21528] bond3 (unregistering): Released all slaves [ 1967.985380][T21528] bond4 (unregistering): Released all slaves [ 1968.008543][T21528] bond5 (unregistering): Released all slaves [ 1968.042147][T21528] bond6 (unregistering): Released all slaves [ 1968.054155][ T5771] usb 5-1: invalid uac2 rates [ 1968.078659][ T5771] usb 5-1: invalid uac2 rates [ 1968.092288][T21528] bond7 (unregistering): Released all slaves [ 1968.101931][ T5771] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1968.131650][T21528] bond8 (unregistering): Released all slaves [ 1968.141844][ T5771] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1968.167287][T21528] bond9 (unregistering): Released all slaves [ 1968.192656][T21528] bond10 (unregistering): Released all slaves [ 1968.212500][T21528] bond11 (unregistering): Released all slaves [ 1968.240389][T21528] bond12 (unregistering): Released all slaves [ 1968.264494][T21528] bond13 (unregistering): Released all slaves [ 1968.282698][T21528] bond14 (unregistering): Released all slaves [ 1968.305106][T21528] bond15 (unregistering): Released all slaves [ 1968.377210][T21528] bond16 (unregistering): Released all slaves [ 1968.405083][T21528] bond17 (unregistering): Released all slaves [ 1968.447298][T21528] bond18 (unregistering): Released all slaves [ 1968.485260][T21528] bond19 (unregistering): Released all slaves [ 1968.516296][T21528] bond20 (unregistering): Released all slaves [ 1968.548050][ T5771] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1968.598116][T21528] bond21 (unregistering): Released all slaves [ 1968.635141][T25015] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1968.676604][T25015] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1968.677583][ T5771] usb 5-1: USB disconnect, device number 76 [ 1968.708633][T21528] bond22 (unregistering): Released all slaves [ 1968.753354][T25015] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1968.791505][T21528] bond23 (unregistering): Released all slaves [ 1968.849280][T21528] bond24 (unregistering): Released all slaves [ 1968.881046][T25015] usb 7-1: invalid uac2 rates [ 1968.904028][T25015] usb 7-1: invalid uac2 rates [ 1968.926129][T25015] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1968.940501][T25860] Bluetooth: hci5: command tx timeout [ 1968.962222][T25015] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1969.011423][T21528] bond25 (unregistering): Released all slaves [ 1969.053409][T21528] bond26 (unregistering): Released all slaves [ 1969.459029][T21528] bond27 (unregistering): Released all slaves [ 1969.524268][T25015] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1969.557210][T21528] bond28 (unregistering): Released all slaves [ 1969.603674][T21528] bond29 (unregistering): Released all slaves [ 1969.652769][T21528] bond30 (unregistering): Released all slaves [ 1969.674208][T25015] usb 7-1: USB disconnect, device number 67 [ 1969.710345][T21528] bond31 (unregistering): Released all slaves [ 1969.786096][T21528] bond32 (unregistering): Released all slaves [ 1969.789428][T22363] udevd[22363]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1969.822626][T20978] udevd[20978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1969.926382][T21528] bond33 (unregistering): Released all slaves [ 1969.994700][T21528] bond34 (unregistering): Released all slaves [ 1970.026149][ T5743] usb 9-1: string descriptor 0 read error: -71 [ 1970.045209][ T5743] usb 9-1: USB disconnect, device number 63 [ 1970.062849][T21528] bond35 (unregistering): Released all slaves [ 1970.101523][T21528] bond36 (unregistering): Released all slaves [ 1970.113186][T21528] bond37 (unregistering): Released all slaves [ 1970.120425][T21528] bond38 (unregistering): Released all slaves [ 1970.159671][T21528] bond39 (unregistering): Released all slaves [ 1970.199206][T21528] bond40 (unregistering): Released all slaves [ 1970.230306][T21528] bond41 (unregistering): Released all slaves [ 1970.270961][T21528] bond42 (unregistering): Released all slaves [ 1970.304031][T21528] bond43 (unregistering): Released all slaves [ 1970.314364][T25933] netlink: 'syz.7.4867': attribute type 1 has an invalid length. [ 1970.346947][T21528] bond44 (unregistering): Released all slaves [ 1970.396157][ T30] audit: type=1400 audit(1782130393.244:4791): avc: denied { prog_load } for pid=25931 comm="syz.7.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1970.422086][T21528] bond45 (unregistering): Released all slaves [ 1970.428659][T25934] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4867'. [ 1970.439840][ T5743] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1970.449012][T21528] bond46 (unregistering): Released all slaves [ 1970.458525][ T30] audit: type=1400 audit(1782130393.244:4792): avc: denied { bpf } for pid=25931 comm="syz.7.4867" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1970.482762][ T30] audit: type=1400 audit(1782130393.254:4793): avc: denied { create } for pid=25935 comm="syz.6.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1970.503541][ T30] audit: type=1400 audit(1782130393.284:4794): avc: denied { read } for pid=25935 comm="syz.6.4868" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1970.538712][T21528] bond47 (unregistering): Released all slaves [ 1970.557453][T21528] bond48 (unregistering): Released all slaves [ 1970.569868][ T30] audit: type=1400 audit(1782130393.284:4795): avc: denied { open } for pid=25935 comm="syz.6.4868" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1970.600346][T21528] bond49 (unregistering): Released all slaves [ 1970.621094][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.628444][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1970.642032][ T30] audit: type=1400 audit(1782130393.284:4796): avc: denied { ioctl } for pid=25935 comm="syz.6.4868" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1970.642955][T21528] bond50 (unregistering): Released all slaves [ 1970.667762][ T30] audit: type=1400 audit(1782130393.284:4797): avc: denied { connect } for pid=25935 comm="syz.6.4868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1970.717160][T25015] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1970.733952][ T5743] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1970.762540][ T5743] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1970.800309][ T5771] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1970.808722][ T5743] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1970.828585][ T5743] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.864525][ T5743] usb 9-1: Product: syz [ 1970.870157][T21528] bond51 (unregistering): Released all slaves [ 1970.882159][ T5743] usb 9-1: Manufacturer: syz [ 1970.895189][ T5743] usb 9-1: SerialNumber: syz [ 1970.913154][T25015] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 1970.931169][T25015] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.945941][T25933] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1970.958358][T25015] usb 5-1: config 0 has no interfaces? [ 1970.964667][T25015] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1970.975937][T25934] bond7: entered promiscuous mode [ 1970.981403][T25015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.984582][T25015] usb 5-1: config 0 descriptor?? [ 1970.994306][ T5771] usb 7-1: Using ep0 maxpacket: 16 [ 1971.042767][ T5771] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1971.059100][T25934] bond7: entered allmulticast mode [ 1971.085624][ T5771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.105757][ T5771] usb 7-1: Product: ఉ [ 1971.111956][ T5771] usb 7-1: Manufacturer: 钊囬꣈㹐䄈ﴻுॖ厥㚳嵳㓄傱㣂䠍⮍⽻犂婅棷ϥ࢝⵪廿匷볼᣺앞焸㲶᛾㇂䧥ʗ뎾砓݋탵䱉ﻯ몬놦랫೤ [ 1971.136713][T25938] bond6: (slave dummy0): Releasing backup interface [ 1971.139024][ T5771] usb 7-1: SerialNumber: syz [ 1971.206715][T25938] bond7: (slave dummy0): making interface the new active one [ 1971.228125][T25938] dummy0: entered promiscuous mode [ 1971.236210][T25938] dummy0: entered allmulticast mode [ 1971.242699][T25938] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1971.252816][ T5743] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1972.211477][T25955] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1972.368085][ T5743] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1972.406323][ T5743] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1972.431182][ T30] audit: type=1400 audit(1782130395.284:4798): avc: denied { read } for pid=25957 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1972.568619][ T30] audit: type=1400 audit(1782130395.284:4799): avc: denied { read open } for pid=25957 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1972.651619][ T30] audit: type=1400 audit(1782130395.284:4800): avc: denied { getattr } for pid=25957 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1972.733086][ T30] audit: type=1400 audit(1782130395.394:4801): avc: denied { map_create } for pid=25958 comm="syz.7.4870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1972.767011][T25859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.812438][T25859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.844339][T25859] bridge_slave_0: entered allmulticast mode [ 1972.856169][T25859] bridge_slave_0: entered promiscuous mode [ 1972.874253][T25859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.882014][T25859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.889802][T25859] bridge_slave_1: entered allmulticast mode [ 1972.897457][T25859] bridge_slave_1: entered promiscuous mode [ 1972.914731][T25962] bond32: (slave dummy0): Releasing active interface [ 1973.048201][T25859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1973.160777][T25859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1973.195194][T25967] netlink: 'syz.6.4872': attribute type 1 has an invalid length. [ 1973.231078][T21528] hsr_slave_0: left promiscuous mode [ 1973.243723][T21528] hsr_slave_1: left promiscuous mode [ 1973.264900][T21528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1973.285122][T21528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1973.297423][T21528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1973.305513][T21528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1973.321085][T21528] veth1_macvtap: left promiscuous mode [ 1973.327128][T21528] veth0_macvtap: left promiscuous mode [ 1973.333395][T21528] veth1_vlan: left promiscuous mode [ 1973.339119][T21528] veth0_vlan: left promiscuous mode [ 1973.411675][ T5743] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1973.452307][ T5743] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 1973.678862][ T5743] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1973.692627][T21528] team0 (unregistering): Port device team_slave_1 removed [ 1973.727942][T21528] team0 (unregistering): Port device team_slave_0 removed [ 1973.782017][ T5771] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1973.801934][ T5743] usb 9-1: USB disconnect, device number 64 [ 1973.824357][T25015] usb 5-1: string descriptor 0 read error: -71 [ 1973.851625][T25015] usb 5-1: USB disconnect, device number 77 [ 1973.857273][ T5771] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1973.927323][T22363] udevd[22363]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1973.947879][ T5771] usb 7-1: USB disconnect, device number 68 [ 1974.062627][T25967] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1974.078182][ T5271] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1974.086854][T25859] team0: Port device team_slave_0 added [ 1974.117573][T25859] team0: Port device team_slave_1 added [ 1974.145667][T25859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1974.158770][T25859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.189376][T25859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1974.205484][T25859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1974.214114][T25859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.251576][T25859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1974.291492][T25859] hsr_slave_0: entered promiscuous mode [ 1974.297984][T25859] hsr_slave_1: entered promiscuous mode [ 1974.304743][T25859] debugfs: 'hsr0' already exists in 'hsr' [ 1974.312796][T25859] Cannot create hsr debugfs directory [ 1974.630015][ T5729] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1974.632739][T25992] bond28: left promiscuous mode [ 1974.643217][T25992] bond28: left allmulticast mode [ 1974.648298][T25992] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1974.656083][T25992] bond29: left promiscuous mode [ 1974.660955][T25992] bond29: left allmulticast mode [ 1974.666009][T25992] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1974.673742][T25992] bond30: left promiscuous mode [ 1974.680359][T25992] bond31: left promiscuous mode [ 1974.687107][T25992] bond33: left promiscuous mode [ 1974.693056][T25992] bond34: left promiscuous mode [ 1974.699359][T25992] bond35: left promiscuous mode [ 1974.704571][T25992] bond35: left allmulticast mode [ 1974.709817][T25992] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1974.717377][T25992] bond36: left promiscuous mode [ 1974.722746][T25992] bond36: left allmulticast mode [ 1974.727829][T25992] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1974.736832][T25992] bond37: left promiscuous mode [ 1974.743133][T25992] bond38: left promiscuous mode [ 1974.748971][T25992] bond39: left promiscuous mode [ 1974.795213][T21528] IPVS: stop unused estimator thread 0... [ 1974.804767][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1974.818627][ T5729] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1974.854243][ T5729] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1974.897417][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.917607][ T5729] usb 5-1: Product: syz [ 1974.926322][ T5729] usb 5-1: Manufacturer: syz [ 1974.936305][ T5729] usb 5-1: SerialNumber: syz [ 1975.149678][T25015] usb 9-1: new full-speed USB device number 65 using dummy_hcd [ 1975.183489][ T5729] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1975.676175][T25015] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1975.778406][T25015] usb 9-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.824530][T25015] usb 9-1: config 53 has no interfaces? [ 1975.834544][T25859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1975.855191][T25015] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1975.875573][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1975.875584][ T30] audit: type=1400 audit(1782130398.734:4814): avc: denied { write } for pid=26012 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1975.928932][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1975.938958][T25988] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1975.967919][T25015] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.984890][ T5729] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1975.993435][T25859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1976.014445][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1976.022164][ T5729] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1976.050434][T25859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1976.063292][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1976.077691][T25859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1976.102124][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1976.164581][T25859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1976.184099][T25859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1976.195011][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.202255][ T3324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1976.258823][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.266072][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1976.385152][ T5729] usb 5-1: invalid uac2 rates [ 1976.411459][ T5729] usb 5-1: invalid uac2 rates [ 1976.475830][ T5729] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1976.682870][T25859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1976.718984][ T5729] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1976.733289][T25859] veth0_vlan: entered promiscuous mode [ 1976.750127][T25859] veth1_vlan: entered promiscuous mode [ 1976.772500][T25859] veth0_macvtap: entered promiscuous mode [ 1976.781628][T25859] veth1_macvtap: entered promiscuous mode [ 1976.804471][T25859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1976.815336][T25859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1976.840058][T12478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.856447][T12478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.874195][T12478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.883074][T12478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1976.921932][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.937136][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.963579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1976.972137][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1976.987649][ T30] audit: type=1400 audit(1782130399.844:4815): avc: denied { mounton } for pid=25859 comm="syz-executor" path="/root/syzkaller.67dusD/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1977.025164][ T30] audit: type=1400 audit(1782130399.844:4816): avc: denied { mount } for pid=25859 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1977.048484][ T30] audit: type=1400 audit(1782130399.844:4817): avc: denied { mounton } for pid=25859 comm="syz-executor" path="/root/syzkaller.67dusD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1977.074716][ T30] audit: type=1400 audit(1782130399.874:4818): avc: denied { mount } for pid=25859 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1977.102278][ T30] audit: type=1400 audit(1782130399.884:4819): avc: denied { mounton } for pid=25859 comm="syz-executor" path="/root/syzkaller.67dusD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1977.130101][ T5729] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1977.145766][ T30] audit: type=1400 audit(1782130399.884:4820): avc: denied { mounton } for pid=25859 comm="syz-executor" path="/root/syzkaller.67dusD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=125893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1977.242801][ T30] audit: type=1400 audit(1782130399.884:4821): avc: denied { unmount } for pid=25859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1977.305552][ T30] audit: type=1400 audit(1782130400.004:4822): avc: denied { mounton } for pid=25859 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1977.331227][ T30] audit: type=1400 audit(1782130400.004:4823): avc: denied { mount } for pid=25859 comm="syz-executor" name="/" dev="gadgetfs" ino=7009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1977.414087][ T5729] usb 5-1: USB disconnect, device number 78 [ 1977.461846][T20978] udevd[20978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1977.589550][ T5743] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1977.669865][T25015] usb 9-1: string descriptor 0 read error: -71 [ 1977.691754][T25015] usb 9-1: USB disconnect, device number 65 [ 1977.751157][ T5743] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1977.760021][ T5743] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1977.776876][ T5743] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1977.786304][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.796279][ T5743] usb 3-1: Product: syz [ 1977.800695][ T5743] usb 3-1: Manufacturer: syz [ 1977.805328][ T5743] usb 3-1: SerialNumber: syz [ 1978.026493][ T5743] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1978.364378][T26078] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1978.474418][ T5743] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1978.486265][ T5743] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1978.904582][ T5743] usb 3-1: invalid uac2 rates [ 1978.909549][ T5743] usb 3-1: invalid uac2 rates [ 1978.914722][ T5743] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1978.923873][ T5743] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1979.160657][ T5743] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1979.192011][ T5743] usb 3-1: USB disconnect, device number 55 [ 1979.215951][T20978] udevd[20978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1984.701100][ T6558] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1998.519294][T26083] netlink: 'syz.7.4879': attribute type 1 has an invalid length. [ 1998.533863][T26083] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1998.571991][T26083] bond7: (slave dummy0): Releasing active interface [ 1998.609496][T26083] dummy0: left promiscuous mode [ 1998.685633][T26083] dummy0: left allmulticast mode [ 1998.729433][T11448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1998.736823][T11448] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1998.744106][T11448] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1998.751854][T11448] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1998.760028][T11448] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1998.773056][T26083] bond8: (slave dummy0): making interface the new active one [ 1998.809202][T26083] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1998.838439][T25015] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1998.899297][ T5721] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1999.004729][T21528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.022682][T25015] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1999.035703][T21528] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.056913][T25015] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1999.081062][T26110] netlink: 'syz.2.4885': attribute type 1 has an invalid length. [ 1999.089082][ T5721] usb 9-1: Using ep0 maxpacket: 16 [ 1999.104034][T25015] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1999.116064][ T5721] usb 9-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1999.134031][T25015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.146370][ T5721] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.157383][T21528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.176521][T26113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4885'. [ 1999.193266][T21528] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.207228][T26113] ip6gretap0: entered promiscuous mode [ 1999.213978][T26113] ip6gretap0: entered allmulticast mode [ 1999.250226][T25015] usb 7-1: Product: syz [ 1999.262168][ T5771] IPVS: starting estimator thread 0... [ 1999.279199][T21528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.296139][ T5721] usb 9-1: Product: ఉ [ 1999.312890][T25015] usb 7-1: Manufacturer: syz [ 1999.325507][ T5721] usb 9-1: Manufacturer: 钊囬꣈㹐䄈ﴻுॖ厥㚳嵳㓄傱㣂䠍⮍⽻犂婅棷ϥ࢝⵪廿匷볼᣺앞焸㲶᛾㇂䧥ʗ뎾砓݋탵䱉ﻯ몬놦랫೤ [ 1999.327578][T21528] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.344404][T25015] usb 7-1: SerialNumber: syz [ 1999.398739][T26115] IPVS: using max 64 ests per chain, 153600 per kthread [ 1999.454193][ T5721] usb 9-1: SerialNumber: syz [ 1999.486283][T21528] netdevsim netdevsim4 ƿGT) (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1999.521502][T21528] netdevsim netdevsim4 ƿGT) (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.697838][T25015] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2000.662734][T25015] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2000.697667][T25015] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2000.780370][T11448] Bluetooth: hci3: command tx timeout [ 2001.043236][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2001.043253][ T30] audit: type=1400 audit(1782130423.906:4833): avc: denied { write } for pid=26127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2001.116640][T25015] usb 7-1: invalid uac2 rates [ 2001.134353][T25015] usb 7-1: invalid uac2 rates [ 2001.148185][ T3324] smbdirect: ib_dev[syz1] removed [ 2001.155973][T21528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2001.166761][T25015] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2001.197609][T21528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2001.206373][T25015] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2001.238566][T21528] bond0 (unregistering): Released all slaves [ 2001.282364][T21528] bond1 (unregistering): Released all slaves [ 2001.337879][ T30] audit: type=1400 audit(1782130424.196:4834): avc: denied { write } for pid=26150 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2001.384554][T25015] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2001.393683][T21528] bond2 (unregistering): (slave veth3): Releasing backup interface [ 2001.446991][ T5721] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 2001.462885][T25015] usb 7-1: USB disconnect, device number 69 [ 2001.484432][T21528] bond2 (unregistering): Released all slaves [ 2001.532040][ T5721] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2001.557495][T26126] udevd[26126]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2001.589634][ T5721] usb 9-1: USB disconnect, device number 66 [ 2001.685499][T21528] bond3 (unregistering): Released all slaves [ 2001.694178][T26092] udevd[26092]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2001.740842][T21528] bond4 (unregistering): Released all slaves [ 2001.825980][T21528] bond5 (unregistering): Released all slaves [ 2001.958068][ T5721] usb 9-1: new full-speed USB device number 67 using dummy_hcd [ 2002.105862][T21528] bond6 (unregistering): Released all slaves [ 2002.127195][T21528] bond7 (unregistering): Released all slaves [ 2002.153209][T21528] bond8 (unregistering): Released all slaves [ 2002.202830][T21528] bond9 (unregistering): Released all slaves [ 2002.245912][T21528] bond10 (unregistering): Released all slaves [ 2002.301595][ T5721] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 2002.313213][T21528] bond11 (unregistering): Released all slaves [ 2002.340521][ T5721] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.359725][T21528] bond12 (unregistering): Released all slaves [ 2002.377007][ T5721] usb 9-1: config 0 has no interfaces? [ 2002.428848][T19952] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2002.575981][T21528] bond13 (unregistering): Released all slaves [ 2002.635509][ T5721] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2002.636427][T21528] bond14 (unregistering): Released all slaves [ 2002.706218][T21528] bond15 (unregistering): Released all slaves [ 2002.715876][ T5721] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.730380][T19952] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2002.751627][T19952] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2002.763461][T21528] bond16 (unregistering): Released all slaves [ 2002.772858][T19952] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2002.784393][T21528] bond17 (unregistering): Released all slaves [ 2002.793372][T19952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.807611][T21528] bond18 (unregistering): Released all slaves [ 2002.814144][T19952] usb 7-1: Product: syz [ 2002.822025][ T5721] usb 9-1: config 0 descriptor?? [ 2002.822383][T19952] usb 7-1: Manufacturer: syz [ 2002.835622][T21528] bond19 (unregistering): Released all slaves [ 2002.850154][T19952] usb 7-1: SerialNumber: syz [ 2002.858126][T11448] Bluetooth: hci3: command tx timeout [ 2002.862320][T21528] bond20 (unregistering): Released all slaves [ 2002.883158][T21528] bond21 (unregistering): Released all slaves [ 2002.919260][T21528] bond22 (unregistering): Released all slaves [ 2002.936652][T21528] bond23 (unregistering): Released all slaves [ 2002.947336][T21528] bond24 (unregistering): Released all slaves [ 2002.960277][T21528] bond25 (unregistering): Released all slaves [ 2002.981240][T21528] bond26 (unregistering): Released all slaves [ 2002.993923][T21528] bond27 (unregistering): Released all slaves [ 2003.006821][T21528] bond28 (unregistering): Released all slaves [ 2003.022152][T21528] bond29 (unregistering): Released all slaves [ 2003.052733][T21528] bond30 (unregistering): Released all slaves [ 2003.076210][T21528] bond31 (unregistering): Released all slaves [ 2003.085772][T19952] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2003.115527][T21528] bond32 (unregistering): Released all slaves [ 2003.216736][T21528] bond33 (unregistering): Released all slaves [ 2003.280183][ T30] audit: type=1400 audit(1782130426.136:4835): avc: denied { create } for pid=26167 comm="syz.7.4893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2003.300920][T21528] bond34 (unregistering): Released all slaves [ 2003.308688][T21528] bond35 (unregistering): Released all slaves [ 2003.539066][T21528] bond36 (unregistering): Released all slaves [ 2003.631095][T26172] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2003.673427][T21528] bond37 (unregistering): Released all slaves [ 2003.843556][T21528] bond38 (unregistering): Released all slaves [ 2003.903345][T21528] bond39 (unregistering): Released all slaves [ 2003.941486][T21528] bond40 (unregistering): Released all slaves [ 2003.975659][T21528] bond41 (unregistering): Released all slaves [ 2003.985170][ T5736] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 2004.022951][T21528] bond42 (unregistering): Released all slaves [ 2004.057367][T19952] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2004.075446][T19952] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2004.083395][T21528] bond43 (unregistering): Released all slaves [ 2004.111994][T21528] bond44 (unregistering): Released all slaves [ 2004.141955][T21528] bond45 (unregistering): Released all slaves [ 2004.162560][ T5736] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 2004.171354][T21528] bond46 (unregistering): Released all slaves [ 2004.191318][ T5736] usb 3-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.204310][ T5736] usb 3-1: config 53 has no interfaces? [ 2004.211791][ T5736] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2004.212202][T21528] bond47 (unregistering): Released all slaves [ 2004.240585][ T5736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.282744][T21528] bond48 (unregistering): Released all slaves [ 2004.327487][T21528] bond49 (unregistering): Released all slaves [ 2004.416248][ T5271] 8021q: adding VLAN 0 to HW filter on device eth17 [ 2004.465371][T19952] usb 7-1: invalid uac2 rates [ 2004.473707][T19952] usb 7-1: invalid uac2 rates [ 2004.484580][T19952] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2004.512126][T19952] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2004.938026][T11448] Bluetooth: hci3: command tx timeout [ 2004.988814][T21528] tipc: Disabling bearer [ 2005.019546][T19952] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2005.037607][T21528] tipc: Left network mode [ 2005.155732][T26097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2005.222054][T26097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.236015][T19952] usb 7-1: USB disconnect, device number 70 [ 2005.279732][T26097] bridge_slave_0: entered allmulticast mode [ 2005.316459][T26126] udevd[26126]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2005.339654][T26097] bridge_slave_0: entered promiscuous mode [ 2005.357722][T26097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2005.380484][T26097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.730684][T26097] bridge_slave_1: entered allmulticast mode [ 2005.757042][T26097] bridge_slave_1: entered promiscuous mode [ 2005.823140][ T5736] usb 3-1: string descriptor 0 read error: -71 [ 2005.857445][ T5736] usb 3-1: USB disconnect, device number 56 [ 2005.929365][T26205] netlink: 'syz.2.4897': attribute type 1 has an invalid length. [ 2005.939332][T26097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2005.959004][T26097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2005.975618][ T30] audit: type=1400 audit(1782130428.836:4836): avc: denied { create } for pid=26206 comm="syz.6.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2006.017027][T26097] team0: Port device team_slave_0 added [ 2006.028006][T26097] team0: Port device team_slave_1 added [ 2006.035612][ T30] audit: type=1400 audit(1782130428.896:4837): avc: denied { perfmon } for pid=26206 comm="syz.6.4898" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2006.077561][T26097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2006.086619][T26097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2006.152643][ T30] audit: type=1400 audit(1782130429.006:4838): avc: denied { write } for pid=26190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2006.345542][T26215] netlink: 'syz.6.4898': attribute type 7 has an invalid length. [ 2006.353449][T26215] netlink: 'syz.6.4898': attribute type 5 has an invalid length. [ 2006.361235][T26215] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4898'. [ 2006.466695][ T30] audit: type=1400 audit(1782130429.146:4839): avc: denied { create } for pid=26213 comm="syz.7.4900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2006.517834][ T5729] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 2006.563891][ T30] audit: type=1400 audit(1782130429.206:4840): avc: denied { setopt } for pid=26206 comm="syz.6.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2006.647271][ T30] audit: type=1400 audit(1782130429.206:4841): avc: denied { write } for pid=26206 comm="syz.6.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2006.694090][ T5729] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2006.747650][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2006.819896][ T5729] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2006.834830][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.925685][ T30] audit: type=1400 audit(1782130429.786:4842): avc: denied { write } for pid=26217 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2006.955461][ T5729] usb 3-1: Product: syz [ 2006.967429][ T5729] usb 3-1: Manufacturer: syz [ 2006.977770][ T5729] usb 3-1: SerialNumber: syz [ 2007.021755][ T5729] usb 3-1: config 0 descriptor?? [ 2007.026855][T11448] Bluetooth: hci3: command tx timeout [ 2007.041635][ T5729] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2007.208944][T26097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2007.311917][ T5271] 8021q: adding VLAN 0 to HW filter on device eth18 [ 2007.326759][T26097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2007.334784][T26097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2007.400469][ T30] audit: type=1400 audit(1782130430.256:4843): avc: denied { create } for pid=26209 comm="syz.2.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2007.645340][T26097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2007.741377][T21528] hsr_slave_0: left promiscuous mode [ 2007.750465][ T30] audit: type=1400 audit(1782130430.256:4844): avc: denied { bind } for pid=26209 comm="syz.2.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2007.779726][T21528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2007.801099][T21528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2007.810683][ T30] audit: type=1400 audit(1782130430.256:4845): avc: denied { create } for pid=26209 comm="syz.2.4899" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2007.836948][T21528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2007.845775][T21528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2007.854885][ T30] audit: type=1400 audit(1782130430.266:4846): avc: denied { read } for pid=26209 comm="syz.2.4899" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2007.896207][T21528] veth1_macvtap: left promiscuous mode [ 2007.902502][T21528] veth0_macvtap: left promiscuous mode [ 2007.910632][T21528] veth1_vlan: left promiscuous mode [ 2007.916176][ T30] audit: type=1400 audit(1782130430.266:4847): avc: denied { open } for pid=26209 comm="syz.2.4899" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2007.944270][T21528] veth0_vlan: left promiscuous mode [ 2008.117455][ T5721] usb 9-1: string descriptor 0 read error: -32 [ 2008.751266][ T5743] usb 3-1: USB disconnect, device number 57 [ 2008.851695][T21528] team0 (unregistering): Port device team_slave_1 removed [ 2008.863744][T21528] team0 (unregistering): Port device team_slave_0 removed [ 2009.058840][T26097] hsr_slave_0: entered promiscuous mode [ 2009.075398][T26097] hsr_slave_1: entered promiscuous mode [ 2009.084774][T26097] debugfs: 'hsr0' already exists in 'hsr' [ 2009.113547][T26097] Cannot create hsr debugfs directory [ 2009.447681][T12994] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2009.554841][T21528] IPVS: stop unused estimator thread 0... [ 2009.611565][T12994] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2009.634054][T12994] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2009.645351][ T5721] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2009.666955][T12994] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2009.679647][T12994] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.694018][T12994] usb 7-1: Product: syz [ 2009.700626][T12994] usb 7-1: Manufacturer: syz [ 2009.705269][T12994] usb 7-1: SerialNumber: syz [ 2009.811069][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2009.821158][ T5721] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2009.835337][ T5721] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2009.847785][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.856825][ T5721] usb 3-1: Product: syz [ 2009.864509][ T5721] usb 3-1: Manufacturer: syz [ 2009.871540][ T5721] usb 3-1: SerialNumber: syz [ 2009.936692][T12994] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2009.966940][T26097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2009.976843][T26097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2009.985517][T26097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2010.012052][T26097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2010.021049][T26097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2010.034769][T26097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2010.045337][T26097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2010.055260][T26097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2010.105807][ T5743] usb 9-1: USB disconnect, device number 67 [ 2010.153956][T26097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2010.173347][T26097] 8021q: adding VLAN 0 to HW filter on device team0 [ 2010.438034][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.445147][ T6847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2010.454796][T26278] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2010.487242][T26282] netlink: 'syz.7.4908': attribute type 1 has an invalid length. [ 2010.519734][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.526874][ T6847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2010.542889][T26283] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4908'. [ 2010.576799][T26283] bond8: (slave dummy0): Releasing active interface [ 2010.613029][T12994] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2010.630294][T12994] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2010.674639][T26282] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2011.244491][T12994] usb 7-1: invalid uac2 rates [ 2011.255079][T12994] usb 7-1: invalid uac2 rates [ 2011.279659][T12994] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2011.321453][T12994] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2011.640246][T12994] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2011.927686][ T5721] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2011.940330][T12994] usb 7-1: USB disconnect, device number 71 [ 2011.961929][ T5721] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2012.001787][T26097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2012.039728][ T5721] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 2012.093371][ T5721] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2012.130246][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2012.130262][ T30] audit: type=1400 audit(1782130434.996:4858): avc: denied { map } for pid=26330 comm="syz.8.4914" path="socket:[128069]" dev="sockfs" ino=128069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2012.156664][ T5721] usb 3-1: USB disconnect, device number 58 [ 2012.275666][T26126] udevd[26126]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 2012.356371][ T30] audit: type=1400 audit(1782130435.216:4859): avc: denied { write } for pid=26311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2012.466414][ T30] audit: type=1400 audit(1782130435.326:4860): avc: denied { write } for pid=26346 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2012.567561][ T5721] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2012.582437][T26097] veth0_vlan: entered promiscuous mode [ 2012.851887][T26097] veth1_vlan: entered promiscuous mode [ 2012.916285][T26097] veth0_macvtap: entered promiscuous mode [ 2012.924914][T26097] veth1_macvtap: entered promiscuous mode [ 2012.932750][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2012.941553][ T5721] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2012.965319][T26097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2012.975723][ T5721] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2012.985762][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.994286][ T5721] usb 3-1: Product: syz [ 2013.008549][T26097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2013.015768][ T5721] usb 3-1: Manufacturer: syz [ 2013.020950][ T5721] usb 3-1: SerialNumber: syz [ 2013.034330][T13226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.055363][T13226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.074555][T13226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.088293][T13226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2013.154798][ T6847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.172679][ T6847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.195298][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.210148][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.218328][T19952] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 2013.250359][ T5721] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2013.390642][T19952] usb 9-1: unable to get BOS descriptor or descriptor too short [ 2013.402315][T19952] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2013.420780][T19952] usb 9-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2013.435898][T19952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.446900][T19952] usb 9-1: Product: syz [ 2013.453714][T19952] usb 9-1: Manufacturer: syz [ 2013.461239][T19952] usb 9-1: SerialNumber: syz [ 2013.487780][ T5806] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2013.635865][T26365] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2013.647527][ T5743] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 2013.663404][ T5806] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2013.707486][ T5806] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2013.746078][ T5721] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2013.758417][ T5806] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2013.770769][ T5806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.783013][ T5806] usb 7-1: Product: syz [ 2013.787706][ T5806] usb 7-1: Manufacturer: syz [ 2013.792636][ T5806] usb 7-1: SerialNumber: syz [ 2013.824125][ T5721] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 2013.963044][ T5743] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 2014.000359][ T5743] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2014.048952][ T5743] usb 5-1: config 0 has no interfaces? [ 2014.072359][ T5743] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2014.105667][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.142820][ T5743] usb 5-1: config 0 descriptor?? [ 2014.199272][ T5721] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 2014.240457][T19952] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2014.266150][ T5721] usb 3-1: USB disconnect, device number 59 [ 2014.593295][T19952] usb 9-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2014.673116][T26360] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2014.711233][T19952] usb 9-1: found format II with max.bitrate = 4, frame size=7372 [ 2014.736991][T19952] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2014.830769][ T5806] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2014.845209][T19952] usb 9-1: USB disconnect, device number 68 [ 2014.854274][ T5806] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2014.884289][T26377] netlink: 'syz.8.4922': attribute type 1 has an invalid length. [ 2014.906142][ T5806] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2014.929780][T26377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2015.403774][ T5806] usb 7-1: invalid uac2 rates [ 2015.422594][ T5806] usb 7-1: invalid uac2 rates [ 2015.449100][ T5806] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2015.459119][ T5806] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2015.898770][ T5806] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2015.969803][ T5806] usb 7-1: USB disconnect, device number 72 [ 2016.114132][T26394] netlink: 'syz.8.4928': attribute type 1 has an invalid length. [ 2016.136141][T26126] udevd[26126]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 2016.228218][T26394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2016.448347][T26402] netlink: 'syz.2.4929': attribute type 7 has an invalid length. [ 2016.456191][T26402] netlink: 'syz.2.4929': attribute type 5 has an invalid length. [ 2016.464217][T26402] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4929'. [ 2017.737006][T26394] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4928'. [ 2017.816482][T26394] bond5: (slave dummy0): making interface the new active one [ 2017.830478][T26394] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 2017.984352][ T5743] usb 5-1: string descriptor 0 read error: -71 [ 2017.992382][ T5743] usb 5-1: USB disconnect, device number 79 [ 2018.047171][ T5736] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2018.077149][ T5771] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2018.223965][ T5736] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2018.286095][ T5771] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2018.296927][ T5736] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2018.328938][ T5771] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 2018.386886][ T5771] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2018.873132][ T5736] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 2018.886861][ T5771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.897456][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.905492][ T5771] usb 7-1: Product: syz [ 2018.909747][ T5771] usb 7-1: Manufacturer: syz [ 2018.914342][ T5736] usb 3-1: Product: syz [ 2018.918527][ T5771] usb 7-1: SerialNumber: syz [ 2018.923150][ T5736] usb 3-1: Manufacturer: syz [ 2018.928274][ T5736] usb 3-1: SerialNumber: syz [ 2019.146715][ T5771] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2019.216057][ T5771] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2019.224671][ T5771] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 2019.232822][ T5771] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2019.259401][ T5736] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2019.273634][ T5771] usb 7-1: USB disconnect, device number 73 [ 2019.951497][T26405] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2019.978710][ T5736] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2020.003746][ T5736] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 2020.127702][ T30] audit: type=1400 audit(1782130442.997:4861): avc: denied { create } for pid=26440 comm="syz.6.4940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2020.172766][ T30] audit: type=1400 audit(1782130443.017:4862): avc: denied { write } for pid=26440 comm="syz.6.4940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2020.247445][ T5743] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 2020.406694][ T5736] usb 3-1: invalid uac2 rates [ 2020.414336][ T5743] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 2020.430057][ T5736] usb 3-1: invalid uac2 rates [ 2020.443386][ T5743] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.459567][ T5736] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 2020.485931][ T5743] usb 9-1: config 0 has no interfaces? [ 2020.492241][ T5736] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 2020.513441][ T5743] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2020.554596][ T5743] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.583442][ T5743] usb 9-1: config 0 descriptor?? [ 2020.699472][ T5736] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 2020.801578][ T5736] usb 3-1: USB disconnect, device number 60 [ 2020.826971][ T5806] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 2021.021387][ T5806] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 2021.065208][ T5806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2021.077752][ T5806] usb 5-1: config 0 has no interfaces? [ 2021.089305][ T5806] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2021.100636][ T5806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.166175][ T5806] usb 5-1: config 0 descriptor?? [ 2021.506743][ T30] audit: type=1400 audit(1782130444.347:4863): avc: denied { write } for pid=26464 comm="syz.2.4947" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2021.628698][T26470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4949'. [ 2021.671330][ T30] audit: type=1400 audit(1782130444.527:4864): avc: denied { name_bind } for pid=26472 comm="syz.6.4951" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2021.720915][T26474] syzkaller0: entered promiscuous mode [ 2021.726800][T26474] syzkaller0: entered allmulticast mode [ 2021.736732][ T30] audit: type=1400 audit(1782130444.597:4865): avc: denied { create } for pid=26471 comm="syz.2.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2021.760687][ T30] audit: type=1400 audit(1782130444.627:4866): avc: denied { write } for pid=26471 comm="syz.2.4950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2021.796905][ T30] audit: type=1400 audit(1782130444.647:4867): avc: denied { read write } for pid=26475 comm="syz.6.4952" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2021.897883][ T30] audit: type=1400 audit(1782130444.647:4868): avc: denied { open } for pid=26475 comm="syz.6.4952" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2021.962165][ T30] audit: type=1400 audit(1782130444.647:4869): avc: denied { map } for pid=26475 comm="syz.6.4952" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2022.016173][ T30] audit: type=1400 audit(1782130444.877:4870): avc: denied { ioctl } for pid=26478 comm="syz.2.4953" path="socket:[128395]" dev="sockfs" ino=128395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2023.018993][T26518] binder: 26517:26518 ioctl c0306201 200000000040 returned -14 [ 2023.309160][T26524] 9pnet_virtio: no channels available for device syz [ 2023.564145][ T5743] usb 9-1: string descriptor 0 read error: -71 [ 2023.575376][ T5743] usb 9-1: USB disconnect, device number 69 [ 2023.668494][T26542] 9pnet_virtio: no channels available for device syz [ 2023.756221][ T5806] usb 5-1: string descriptor 0 read error: -71 [ 2023.768402][ T5806] usb 5-1: USB disconnect, device number 80 [ 2026.444242][T26532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2026.458201][T26562] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4974'. [ 2026.533590][T26588] syzkaller0: entered promiscuous mode [ 2026.541259][T26588] syzkaller0: entered allmulticast mode [ 2026.569757][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 2026.569774][ T30] audit: type=1400 audit(1782130449.437:4898): avc: denied { execute } for pid=26589 comm="syz.8.4986" path="/212/memory.events" dev="tmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2026.668446][ T30] audit: type=1400 audit(1782130449.537:4899): avc: denied { nlmsg_write } for pid=26595 comm="syz.8.4989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2026.731752][ T30] audit: type=1400 audit(1782130449.597:4900): avc: denied { read write } for pid=26602 comm="syz.2.4992" name="sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2026.796826][T26598] syzkaller0: entered promiscuous mode [ 2026.822587][T26598] syzkaller0: entered allmulticast mode [ 2026.828940][ T30] audit: type=1400 audit(1782130449.617:4901): avc: denied { open } for pid=26602 comm="syz.2.4992" path="/dev/sg0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2026.878827][ T30] audit: type=1400 audit(1782130449.747:4902): avc: denied { setopt } for pid=26597 comm="syz.4.4990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2027.057114][ T30] audit: type=1400 audit(1782130449.917:4903): avc: denied { bind } for pid=26626 comm="syz.6.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2027.143121][ T30] audit: type=1400 audit(1782130449.957:4904): avc: denied { read } for pid=26629 comm="syz.2.5004" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2027.169759][ T30] audit: type=1400 audit(1782130449.967:4905): avc: denied { ioctl } for pid=26629 comm="syz.2.5004" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2027.211202][ T30] audit: type=1400 audit(1782130449.967:4906): avc: denied { create } for pid=26631 comm="syz.8.5005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2027.231067][ T30] audit: type=1400 audit(1782130449.977:4907): avc: denied { write } for pid=26631 comm="syz.8.5005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2027.336621][ T5729] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2027.486651][ T5729] usb 5-1: Using ep0 maxpacket: 16 [ 2027.510381][T26625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2027.519987][T26625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2027.560968][ T5729] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2027.596083][ T5729] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2027.631058][ T5729] usb 5-1: can't read configurations, error -71 [ 2027.793750][T26693] IPv6: addrconf: prefix option has invalid lifetime [ 2028.776709][T26760] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 2028.831929][T26760] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2029.180334][T25860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2029.189127][T25860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2029.200940][T25860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2029.212669][T25860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2029.221445][T25860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2029.267829][T26791] syzkaller0: entered promiscuous mode [ 2029.287936][T26791] syzkaller0: entered allmulticast mode [ 2029.464445][T26807] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5073'. [ 2029.551182][T21531] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2029.588817][T21531] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.725507][T21531] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2029.769179][T21531] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.821046][T26835] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5085'. [ 2029.839046][T26825] syzkaller0: entered promiscuous mode [ 2029.852513][T26825] syzkaller0: entered allmulticast mode [ 2029.898493][T21531] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2029.934483][T21531] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.984841][T21531] netdevsim netdevsim6 ƿGT) (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2030.028447][T21531] netdevsim netdevsim6 ƿGT) (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.364418][T21531] bridge_slave_1: left allmulticast mode [ 2030.395947][T21531] bridge_slave_1: left promiscuous mode [ 2030.417618][T21531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.451371][T21531] bridge_slave_0: left allmulticast mode [ 2030.465346][T21531] bridge_slave_0: left promiscuous mode [ 2030.471949][T21531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.638487][T26902] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5112'. [ 2030.741932][T21531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2030.760576][T21531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2030.781404][T21531] bond0 (unregistering): Released all slaves [ 2030.795645][T21531] bond1 (unregistering): Released all slaves [ 2030.807420][T21531] bond2 (unregistering): Released all slaves [ 2030.816228][T21531] bond3 (unregistering): Released all slaves [ 2030.827393][T21531] bond4 (unregistering): Released all slaves [ 2030.837618][T21531] bond5 (unregistering): Released all slaves [ 2030.846952][T21531] bond6 (unregistering): Released all slaves [ 2030.856786][T21531] bond7 (unregistering): Released all slaves [ 2030.865597][T21531] bond8 (unregistering): Released all slaves [ 2030.879562][T21531] bond9 (unregistering): Released all slaves [ 2030.888589][T21531] bond10 (unregistering): Released all slaves [ 2030.897709][T21531] bond11 (unregistering): Released all slaves [ 2030.906773][T21531] bond12 (unregistering): Released all slaves [ 2030.916035][T21531] bond13 (unregistering): Released all slaves [ 2030.926246][T21531] bond14 (unregistering): Released all slaves [ 2030.935342][T21531] bond15 (unregistering): Released all slaves [ 2030.944355][T21531] bond16 (unregistering): Released all slaves [ 2030.953430][T21531] bond17 (unregistering): Released all slaves [ 2030.963225][T21531] bond18 (unregistering): Released all slaves [ 2030.977983][T21531] bond19 (unregistering): Released all slaves [ 2030.989190][T21531] bond20 (unregistering): Released all slaves [ 2030.999029][T21531] bond21 (unregistering): Released all slaves [ 2031.007975][T21531] bond22 (unregistering): Released all slaves [ 2031.017393][T21531] bond23 (unregistering): Released all slaves [ 2031.028007][T21531] bond24 (unregistering): Released all slaves [ 2031.036885][T21531] bond25 (unregistering): Released all slaves [ 2031.046149][T21531] bond26 (unregistering): Released all slaves [ 2031.062233][T21531] bond27 (unregistering): Released all slaves [ 2031.073927][T21531] bond28 (unregistering): Released all slaves [ 2031.083764][T21531] bond29 (unregistering): Released all slaves [ 2031.093193][T21531] bond30 (unregistering): Released all slaves [ 2031.104590][T21531] bond31 (unregistering): Released all slaves [ 2031.114053][T21531] bond32 (unregistering): Released all slaves [ 2031.124422][T21531] bond33 (unregistering): Released all slaves [ 2031.138370][T21531] bond34 (unregistering): Released all slaves [ 2031.148535][T21531] bond35 (unregistering): Released all slaves [ 2031.157913][T21531] bond36 (unregistering): Released all slaves [ 2031.168388][T21531] bond37 (unregistering): Released all slaves [ 2031.177841][T21531] bond38 (unregistering): Released all slaves [ 2031.193575][T21531] bond39 (unregistering): Released all slaves [ 2031.202826][T21531] bond40 (unregistering): Released all slaves [ 2031.223087][T26896] syzkaller0: entered promiscuous mode [ 2031.228694][T26896] syzkaller0: entered allmulticast mode [ 2031.238350][T26902] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5112'. [ 2031.248355][T26902] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2031.269978][T11448] Bluetooth: hci2: command tx timeout [ 2031.414599][T26785] bridge0: port 1(bridge_slave_0) entered blocking state [ 2031.427927][T26785] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.435204][T26785] bridge_slave_0: entered allmulticast mode [ 2031.442509][T26785] bridge_slave_0: entered promiscuous mode [ 2031.450490][T26785] bridge0: port 2(bridge_slave_1) entered blocking state [ 2031.459134][T26785] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.467216][T26785] bridge_slave_1: entered allmulticast mode [ 2031.474851][T26785] bridge_slave_1: entered promiscuous mode [ 2031.643127][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2031.643144][ T30] audit: type=1400 audit(1782130454.497:4934): avc: denied { create } for pid=26936 comm="syz.4.5126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2031.679070][T26785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2031.737840][T26785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2031.758751][ T30] audit: type=1400 audit(1782130454.537:4935): avc: denied { getopt } for pid=26936 comm="syz.4.5126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2031.841365][ T30] audit: type=1400 audit(1782130454.697:4936): avc: denied { listen } for pid=26949 comm="syz.7.5132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2031.922431][T26785] team0: Port device team_slave_0 added [ 2031.955168][T26785] team0: Port device team_slave_1 added [ 2031.987059][ T30] audit: type=1326 audit(1782130454.837:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.5135" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb899ce59 code=0x7ffc0000 [ 2032.027158][ T30] audit: type=1326 audit(1782130454.837:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.5135" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb899ce59 code=0x7ffc0000 [ 2032.059983][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2032.067874][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 2032.103356][ T30] audit: type=1326 audit(1782130454.847:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.5135" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fafb899ce59 code=0x7ffc0000 [ 2032.134607][T21531] hsr_slave_0: left promiscuous mode [ 2032.143079][ T30] audit: type=1326 audit(1782130454.847:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.5135" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb899ce59 code=0x7ffc0000 [ 2032.169885][T21531] hsr_slave_1: left promiscuous mode [ 2032.179519][T21531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2032.193603][T21531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2032.201153][ T30] audit: type=1326 audit(1782130454.847:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26961 comm="syz.4.5135" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafb899ce59 code=0x7ffc0000 [ 2032.228219][T21531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2032.237290][T21531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2032.240314][ T30] audit: type=1400 audit(1782130454.877:4942): avc: denied { ioctl } for pid=26955 comm="syz.2.5133" path="socket:[130845]" dev="sockfs" ino=130845 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2032.278835][T21531] veth1_macvtap: left promiscuous mode [ 2032.284381][T21531] veth0_macvtap: left promiscuous mode [ 2032.303895][T21531] veth1_vlan: left promiscuous mode [ 2032.312466][T21531] veth0_vlan: left promiscuous mode [ 2032.360148][ T30] audit: type=1400 audit(1782130455.058:4943): avc: denied { write } for pid=26926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2032.520812][T21531] team0 (unregistering): Port device team_slave_1 removed [ 2032.539965][T21531] team0 (unregistering): Port device team_slave_0 removed [ 2032.584977][T26958] syzkaller1: entered promiscuous mode [ 2032.590713][T26958] syzkaller1: entered allmulticast mode [ 2032.602243][ T5271] 8021q: adding VLAN 0 to HW filter on device eth17 [ 2032.611859][T26785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.619038][T26785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2032.649147][T26785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2032.669395][T26785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2032.677882][T26785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2032.705314][T26785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2032.785629][T26785] hsr_slave_0: entered promiscuous mode [ 2032.817263][T26785] hsr_slave_1: entered promiscuous mode [ 2032.841405][T26785] debugfs: 'hsr0' already exists in 'hsr' [ 2032.859812][T26785] Cannot create hsr debugfs directory [ 2033.021694][T21531] IPVS: stop unused estimator thread 0... [ 2033.336284][T11448] Bluetooth: hci2: command tx timeout [ 2033.634628][T26785] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2033.669715][T26785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2033.704527][T26785] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2033.749584][T26785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2033.782404][T26785] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2033.829865][T26785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2033.870483][T26785] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2033.913494][T26785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2034.305867][T26785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2034.352793][T27073] syzkaller0: entered promiscuous mode [ 2034.366169][T27073] syzkaller0: entered allmulticast mode [ 2034.388918][T26785] 8021q: adding VLAN 0 to HW filter on device team0 [ 2034.425692][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.432960][ T6847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2034.668282][ T6847] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.675421][ T6847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2034.942095][T27099] hub 8-0:1.0: USB hub found [ 2034.951927][T27099] hub 8-0:1.0: 1 port detected [ 2035.372995][T27101] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.381964][T27101] bridge0: port 2(bridge_slave_1) entered disabled state [ 2035.416375][T11448] Bluetooth: hci2: command tx timeout [ 2035.819912][T26785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.146785][T27160] syzkaller0: entered promiscuous mode [ 2036.162966][T27160] syzkaller0: entered allmulticast mode [ 2036.521970][T27182] syzkaller0: entered promiscuous mode [ 2036.542780][T27182] syzkaller0: entered allmulticast mode [ 2036.602320][T26785] veth0_vlan: entered promiscuous mode [ 2036.635343][T26785] veth1_vlan: entered promiscuous mode [ 2036.674731][T26785] veth0_macvtap: entered promiscuous mode [ 2036.704002][T26785] veth1_macvtap: entered promiscuous mode [ 2036.776614][T26785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2036.807387][T27205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5204'. [ 2036.816330][T26785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2036.832435][T27205] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5204'. [ 2036.850108][T27202] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.888593][T27205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5204'. [ 2036.893268][T21528] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.929012][T21528] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2036.935915][T27205] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5204'. [ 2036.976932][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2036.976948][ T30] audit: type=1400 audit(1782130459.838:4959): avc: denied { write } for pid=27184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2037.014217][T21528] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.037526][T21528] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.157981][T21530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.173239][T21530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.240808][ T30] audit: type=1400 audit(1782130460.098:4960): avc: denied { write } for pid=27227 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2037.268267][ T6847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.289494][ T6847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.396209][T27235] hub 8-0:1.0: USB hub found [ 2037.420934][T27235] hub 8-0:1.0: 1 port detected [ 2037.496159][T11448] Bluetooth: hci2: command tx timeout [ 2037.536838][ T30] audit: type=1400 audit(1782130460.398:4961): avc: denied { create } for pid=27244 comm="syz.7.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2037.625130][ T30] audit: type=1400 audit(1782130460.428:4962): avc: denied { read } for pid=27244 comm="syz.7.5218" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2037.682852][ T30] audit: type=1400 audit(1782130460.428:4963): avc: denied { open } for pid=27244 comm="syz.7.5218" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2037.747801][ T30] audit: type=1400 audit(1782130460.438:4964): avc: denied { ioctl } for pid=27244 comm="syz.7.5218" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2037.877702][ T30] audit: type=1400 audit(1782130460.728:4965): avc: denied { setattr } for pid=19263 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2037.973046][ T30] audit: type=1400 audit(1782130460.828:4966): avc: denied { ioctl } for pid=27281 comm="syz.6.5235" path="socket:[132721]" dev="sockfs" ino=132721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2038.027688][ T30] audit: type=1400 audit(1782130460.868:4967): avc: denied { bind } for pid=27281 comm="syz.6.5235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2038.094942][ T30] audit: type=1400 audit(1782130460.868:4968): avc: denied { write } for pid=27281 comm="syz.6.5235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2038.241488][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5243'. [ 2038.304768][T27304] xt_hashlimit: size too large, truncated to 1048576 [ 2038.455319][T27311] ------------[ cut here ]------------ [ 2038.461434][T27311] !(flags & __GFP_NOWARN) [ 2038.461450][T27311] WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x6f7/0xa60, CPU#0: syz.8.5249/27311 [ 2038.475994][T27311] Modules linked in: [ 2038.480178][T27311] CPU: 0 UID: 0 PID: 27311 Comm: syz.8.5249 Tainted: G L syzkaller #0 PREEMPT(full) [ 2038.492439][T27311] Tainted: [L]=SOFTLOCKUP [ 2038.498484][T27311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2038.508653][T27311] RIP: 0010:__kvmalloc_node_noprof+0x6f7/0xa60 [ 2038.515000][T27311] Code: c1 e8 5d 0f ff ff 4d 85 f6 0f 85 21 fd ff ff 48 81 fb ff ff ff 7f 0f 86 b8 fc ff ff 41 81 e4 00 20 00 00 0f 85 07 fd ff ff 90 <0f> 0b 90 e9 fe fc ff ff be 43 01 00 00 48 c7 c7 5e 81 f2 8d e8 10 [ 2038.534688][T27311] RSP: 0018:ffffc90004bd7a88 EFLAGS: 00010246 [ 2038.541243][T27311] RAX: 0000000000000001 RBX: 0000000080000008 RCX: 0000000100000000 [ 2038.550934][T27311] RDX: 0000000000000000 RSI: ffffffff8c1e6100 RDI: ffffffff8e1f3920 [ 2038.560671][T27311] RBP: 0000000000000021 R08: 00000000004028c0 R09: 00000000ffffffff [ 2038.568779][T27311] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 2038.576794][T27311] R13: 00000000ffffffff R14: 0000000000000000 R15: 00000000004028c0 [ 2038.584774][T27311] FS: 00007f580e41f6c0(0000) GS:ffff888124316000(0000) knlGS:0000000000000000 [ 2038.593761][T27311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2038.600412][T27311] CR2: 0000200000002300 CR3: 0000000058e1c000 CR4: 00000000003526f0 [ 2038.608492][T27311] Call Trace: [ 2038.611774][T27311] [ 2038.614709][T27311] ? io_pin_pages+0xc3/0x1e0 [ 2038.619747][T27311] io_pin_pages+0xc3/0x1e0 [ 2038.624189][T27311] io_sqe_buffer_register+0x1d9/0x1500 [ 2038.629733][T27311] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 2038.635656][T27311] ? trace_kmalloc+0xeb/0x110 [ 2038.640598][T27311] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 2038.647218][T27311] ? io_rsrc_data_alloc+0x2c/0xa0 [ 2038.652285][T27311] ? copy_iovec_from_user+0x102/0x140 [ 2038.657739][T27311] ? iovec_from_user+0xda/0x140 [ 2038.662626][T27311] io_sqe_buffers_register.cold+0x346/0x4c3 [ 2038.668575][T27311] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 2038.674565][T27311] ? __fget_files+0x21f/0x3d0 [ 2038.679309][T27311] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 2038.685210][T27311] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2038.691702][T27311] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 2038.698452][T27311] ? __x64_sys_futex+0x34f/0x4d0 [ 2038.706064][T27311] ? __x64_sys_futex+0x358/0x4d0 [ 2038.711468][T27311] ? rcu_is_watching+0x12/0xc0 [ 2038.716308][T27311] ? xfd_validate_state+0x129/0x190 [ 2038.721521][T27311] ? rcu_is_watching+0x12/0xc0 [ 2038.726358][T27311] do_syscall_64+0x115/0x870 [ 2038.730951][T27311] ? clear_bhb_loop+0x40/0x90 [ 2038.735639][T27311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.741761][T27311] RIP: 0033:0x7f580d59ce59 [ 2038.746417][T27311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2038.766165][T27311] RSP: 002b:00007f580e41f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 2038.774591][T27311] RAX: ffffffffffffffda RBX: 00007f580d815fa0 RCX: 00007f580d59ce59 [ 2038.782693][T27311] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 2038.790704][T27311] RBP: 00007f580d632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2038.798725][T27311] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 2038.806778][T27311] R13: 00007f580d816038 R14: 00007f580d815fa0 R15: 00007ffd7894e898 [ 2038.815071][T27311] [ 2038.818209][T27311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2038.825513][T27311] CPU: 0 UID: 0 PID: 27311 Comm: syz.8.5249 Tainted: G L syzkaller #0 PREEMPT(full) [ 2038.836445][T27311] Tainted: [L]=SOFTLOCKUP [ 2038.840755][T27311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2038.850796][T27311] Call Trace: [ 2038.854062][T27311] [ 2038.856977][T27311] dump_stack_lvl+0x100/0x190 [ 2038.861645][T27311] vpanic+0x552/0x970 [ 2038.865609][T27311] ? __pfx_vpanic+0x10/0x10 [ 2038.870093][T27311] ? lock_release+0x24d/0x310 [ 2038.874758][T27311] panic+0xd1/0xe0 [ 2038.878465][T27311] ? __pfx_panic+0x10/0x10 [ 2038.882873][T27311] check_panic_on_warn.cold+0x19/0x34 [ 2038.888229][T27311] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 2038.893773][T27311] __warn.cold+0x191/0x318 [ 2038.898266][T27311] __report_bug+0x30f/0x440 [ 2038.902761][T27311] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 2038.908300][T27311] ? __pfx___report_bug+0x10/0x10 [ 2038.913322][T27311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2038.919205][T27311] ? policy_nodemask+0xed/0x4f0 [ 2038.924046][T27311] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 2038.929584][T27311] report_bug+0xb2/0x220 [ 2038.933820][T27311] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 2038.939364][T27311] handle_bug+0x16a/0x2a0 [ 2038.943681][T27311] exc_invalid_op+0x17/0x50 [ 2038.948182][T27311] asm_exc_invalid_op+0x1a/0x20 [ 2038.953028][T27311] RIP: 0010:__kvmalloc_node_noprof+0x6f7/0xa60 [ 2038.959177][T27311] Code: c1 e8 5d 0f ff ff 4d 85 f6 0f 85 21 fd ff ff 48 81 fb ff ff ff 7f 0f 86 b8 fc ff ff 41 81 e4 00 20 00 00 0f 85 07 fd ff ff 90 <0f> 0b 90 e9 fe fc ff ff be 43 01 00 00 48 c7 c7 5e 81 f2 8d e8 10 [ 2038.978773][T27311] RSP: 0018:ffffc90004bd7a88 EFLAGS: 00010246 [ 2038.984836][T27311] RAX: 0000000000000001 RBX: 0000000080000008 RCX: 0000000100000000 [ 2038.992791][T27311] RDX: 0000000000000000 RSI: ffffffff8c1e6100 RDI: ffffffff8e1f3920 [ 2039.000744][T27311] RBP: 0000000000000021 R08: 00000000004028c0 R09: 00000000ffffffff [ 2039.008697][T27311] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 2039.016653][T27311] R13: 00000000ffffffff R14: 0000000000000000 R15: 00000000004028c0 [ 2039.024616][T27311] ? __kvmalloc_node_noprof+0x6d3/0xa60 [ 2039.030159][T27311] ? io_pin_pages+0xc3/0x1e0 [ 2039.034739][T27311] io_pin_pages+0xc3/0x1e0 [ 2039.039142][T27311] io_sqe_buffer_register+0x1d9/0x1500 [ 2039.044590][T27311] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 2039.050475][T27311] ? trace_kmalloc+0xeb/0x110 [ 2039.064095][T27311] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 2039.070876][T27311] ? io_rsrc_data_alloc+0x2c/0xa0 [ 2039.077144][T27311] ? copy_iovec_from_user+0x102/0x140 [ 2039.083423][T27311] ? iovec_from_user+0xda/0x140 [ 2039.088979][T27311] io_sqe_buffers_register.cold+0x346/0x4c3 [ 2039.094869][T27311] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 2039.100835][T27311] ? __fget_files+0x21f/0x3d0 [ 2039.105505][T27311] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 2039.111383][T27311] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 2039.117781][T27311] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 2039.124011][T27311] ? __x64_sys_futex+0x34f/0x4d0 [ 2039.128943][T27311] ? __x64_sys_futex+0x358/0x4d0 [ 2039.133879][T27311] ? rcu_is_watching+0x12/0xc0 [ 2039.138635][T27311] ? xfd_validate_state+0x129/0x190 [ 2039.143824][T27311] ? rcu_is_watching+0x12/0xc0 [ 2039.148595][T27311] do_syscall_64+0x115/0x870 [ 2039.153170][T27311] ? clear_bhb_loop+0x40/0x90 [ 2039.157835][T27311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2039.163716][T27311] RIP: 0033:0x7f580d59ce59 [ 2039.168117][T27311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2039.187712][T27311] RSP: 002b:00007f580e41f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 2039.196122][T27311] RAX: ffffffffffffffda RBX: 00007f580d815fa0 RCX: 00007f580d59ce59 [ 2039.204082][T27311] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 2039.212036][T27311] RBP: 00007f580d632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2039.219987][T27311] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 2039.227942][T27311] R13: 00007f580d816038 R14: 00007f580d815fa0 R15: 00007ffd7894e898 [ 2039.235903][T27311] [ 2039.239129][T27311] Kernel Offset: disabled [ 2039.243438][T27311] Rebooting in 86400 seconds..