last executing test programs: 54m37.989143155s ago: executing program 1 (id=182): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x15, 0x6, 0x100) r0 = socket$kcm(0x2d, 0x2, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) semop(0x0, 0x0, 0x52) shmctl$IPC_STAT(0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 54m36.715779745s ago: executing program 1 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x30, r0, 0x87b87000) r1 = memfd_create(&(0x7f0000001ac0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\xfe\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\t\x00\x00\x00\x00\x00\x00\x00sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x0f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x80\xd2\xd5\xd2@z9\xf4Ef\xc0\xa1\x14\xff\xf7\xfc\x92u\x99\xdaH:\xcchd\x8e\xaad\xfc<\xac\x98u#!t\x97\xdb\x13\x005*C\xc0qe\x88\x176\xc4>\xc07\x18\xeb\xe0\x96\xa6\x11[E\xea\x1en\xcdQ\xac\xa5\xab\'n\x80\x917\x1d\xc6!|\xbd\x96\x18\xa6\xd3\xa9*(\xb0\xbem\x1dN\x8dr\x87\xcf\xa5^\x1b6D\x00\x00\x00\x00\x00\xa8\xfe\x9d\xbbr\x83\xa5\xd6\x9f\x10\xb1\xd0\vR\x06\xa7}\x97v\x8e\xb7\xf4\aS\x97\x18\xd4\xd2\xc8\x92\xfa\x96z5\xb4\xa8\x16\xc4\x10\x16_\xfb\x94}\a\x99n\x9b\xa5_\xdbQ\tU\"G3\xe2\xeff\xf3Pg\x7f0\xf9x\x7fTg\xd3\xc0\xdb\xcc\xc0\x8dI\x8b.Y\x97\x0eh\xb4', 0x2) pwrite64(r1, &(0x7f0000000000)="88", 0x1, 0x88e6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) fcntl$addseals(r1, 0x409, 0x7) ftruncate(r1, 0x3) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e00)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0xc50ccb7a845d17f0}, {}, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20084}, 0x20000040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) read$alg(r7, &(0x7f0000000040)=""/136, 0x88) socket$inet_udp(0x2, 0x2, 0x0) io_cancel(0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f00000000c0)={0x1, 0x5, 0xe}) socket$inet6(0xa, 0x2, 0x0) 54m33.580058271s ago: executing program 1 (id=190): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000190c0)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setregid(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000012600)=@l={0x92, 0x8, 0xb0, 0x1b, 0x8, 0xdb, 0x8}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000019080)='./file0/file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 54m32.545530155s ago: executing program 1 (id=193): memfd_secret(0x80000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfe8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xfd4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfe8}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b0400000000811b239034ba00000000020000000900010073797a30000000000900020073797a32000000001100000011000100000000000000"], 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4804) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x0, 0x16, r4, 0xe54}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r9, 0x101, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 54m31.871446328s ago: executing program 1 (id=195): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x15, 0x6, 0x100) r0 = socket$kcm(0x2d, 0x2, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) semop(0x0, 0x0, 0x52) shmctl$IPC_STAT(0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20101, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 54m30.207626945s ago: executing program 1 (id=200): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x6e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_emit_ethernet(0xfaa, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0xf74, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0) 54m14.984462938s ago: executing program 32 (id=200): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x6e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_emit_ethernet(0xfaa, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0xf74, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "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"}}}}}}, 0x0) 46m15.919178659s ago: executing program 3 (id=1372): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x80000) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001b80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000380)="e078583db7af0da2662d1e838719bfc5de16e6c671f19073c7419b3d8c5d40fd2279bcc07e64523156f48b8017bb098bf3fc3531594f2f7e12ecdb12e66c2c4b366338c065a8bee0a2aac823752709da3d71f0b7e9e63bc3f37b802d17f6168947387a603af938b5327e63616949fd43dc9764441580fac12b9223a739c586e2f91fc4b135f1753839647a4f3f67f10d46f898a24d747b0cbcbddf", 0x9b}, {&(0x7f0000000600)='Y\"S\f_', 0x5}, {&(0x7f0000001640)="0b7748bb51bfcc702d16abe747d25d9d653daa2b0076508010b80396a98997f4043eeffbece61dd1349cb3ec1027ee330fa7dc6d4ad7fe3420b8e378c1a326c46c50c39058dc90c78bd2ce1bcbbfbfd9266e79e76a1e3063bd58e09107f12fc62292d84b97589091a853aa2015f7edf904a14a2ab2a0d7724b0e7e55cada4f1f63bd7769449d51888519841239db7de5d6ba7ffc58a463a09b14ea8f2cbb8f04d1b19302bca93feb73deebf103d9240f5fe8aabee93930c833b744b50ee6642be0b42d3388c5c8877a64666d28269a123b71544d62d9fcf21ab4fb98e0eb", 0xde}], 0x3, 0x0, 0x0, 0xc0}}, {{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000004c0)="0668fd5d0f084996eb2de481fe903166fb990fb90c40f99724b89eb582280f2cca70b06deac6a56277f4a9644e75f141c5516a4efa2fb054b3aa8d61425003b5cbfa3d09016725076510c6624a055c4e52552bb2866cbeeddd5ea05da1417e1972e68739516f1ad7aab3346e0d40d87e14f193f2d2c2aaa85cb2e88f72dfd0a01f20c340", 0x84}, {&(0x7f0000000580)="3be677624e24b8ac9dba19c6edd2a49a55bff2a5c784cf20775e268c759704091e191acdc146668958198f1fb6afc2d9b32cf152bd9090b8c86879ffc5b2992b1d3742a408be702a46e01caad72f99cf40d97dae1de5f97ca3760a1c", 0x5c}, {&(0x7f0000002240)="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", 0x1000}], 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="000000081c000000000000000100000002000008", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x48000}}, {{&(0x7f0000001900)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001980)="d109c310a2ec625c04a9640a80733230827779799d5910f0e2cd4e11834be6f9d0886101f9e3979443b807362f4b16aca19bfea165db9685238c4171df0491bd38ea4df317e74c30", 0x48}, {&(0x7f0000001a00)="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", 0xfe}, {&(0x7f0000001b00)="f3331221840727364f23b31592980503eaecd0ce15a92f6e2243c917f302219152f99efd5342615351", 0x29}], 0x3}}], 0x3, 0xc804) read(r6, 0x0, 0x0) close_range(r4, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) mlock(&(0x7f0000755000/0x2000)=nil, 0x2000) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800e8b7490b8cf8ce4e9c99708a78e15812c2a6b5a878ae3019be7800"/44], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) write$fb(r9, &(0x7f0000000080)="552cfe", 0x3) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000340)=0x5) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) socket(0x10, 0x3, 0x0) 46m13.085286009s ago: executing program 3 (id=1376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3d0000000700000000020000ff07000060220000", @ANYRES32=0x1, @ANYBLOB='=\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005d100000100000000000800000000000006f4892958ac888189a700000000"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) timer_create(0xb, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985", 0x5f}, {&(0x7f00000002c0)}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6", 0x46}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11", 0x17}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b4", 0x6a}, {0x0}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acbdd9f261b7349aeede1c42e31b1082eec37b959d16afb96240a5d057cab448c3c069f6a67c6f", 0x84}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$selinux_access(0xffffffffffffffff, &(0x7f0000000380)={'system_u:object_r:fuse_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x8}, 0x66) sendto$inet(r5, &(0x7f0000000580)="1713", 0x2, 0x10008095, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) 46m11.686304603s ago: executing program 3 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), 0x0, 0x900}, 0x20) 46m10.738686247s ago: executing program 3 (id=1382): mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ded000/0x2000)=nil, 0x930, 0x0, 0x32e7851d6de9e532, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000e9f000/0x4000)=nil, 0x0, 0x1000000, 0x11, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000080)="448e05c3a2b26fea6b71868f82b61311d51a93b37c91d240c2e3f7b1e3bb9d2d983856d617a104400000226ea5c5a11c61e64751a1899c060b14820c32b96cd45dc21afa0f76b768", 0x0, 0xffffffffffffff6f) 46m9.99502872s ago: executing program 3 (id=1385): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), 0x10) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x30100, 0x16e) r2 = openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x46001, 0x54) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000001100)) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001140)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000011c0)={0x15, 0x110, 0xfa00, {r4, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x100, @local, 0x1000}, @in6={0xa, 0x4e22, 0x100, @remote, 0x6}}}, 0x118) r5 = syz_open_dev$MSR(&(0x7f0000001300), 0x1, 0x0) read$msr(r5, &(0x7f0000001340)=""/4096, 0x1000) r6 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x8000000000000000, 0x200) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000002380)=0xfffffffe) r7 = syz_open_dev$sndpcmc(&(0x7f00000023c0), 0xd, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f0000002400)) openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x202800, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002480)={0xffffffffffffffff, r2}, 0xc) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000024c0), &(0x7f0000002500)=0x30) eventfd2(0xe7, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000002540)={0x2c, 0x6, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x20, {0x3, 0x6, 0xff, 0xfffc, [0x1, 0xfffffffffffffffa, 0xf]}}, @enc_lim={0x4, 0x1, 0x5}]}, 0x40) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000002580)={0x15, 0x110, 0xfa00, {r4, 0xe377, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @local}, @ib={0x1b, 0xc4, 0x8, {"aca5da444b74c479fa8c8b737a3fc9db"}, 0x5, 0x6, 0xffff}}}, 0x118) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000026c0), 0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000002700)={0x7, 0x4, 0x1, 'queue0\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000027c0)={0x9093, 0x6, 0x8, 0x0, 0x2, 0x4}) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000002840), 0xffffffffffffffff) 46m9.799763965s ago: executing program 3 (id=1387): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000300)=0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0xb339, 0x1f000000}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x80) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x7, &(0x7f00000005c0)={0x80000001, {{0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) unshare(0x68040200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) r4 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004e40)=@newtaction={0x68, 0x13, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_sample={0x50, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x4008000) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/245, 0xf5) mmap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x100000a, 0x10, r4, 0xcef14000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000004004070002240001000040b109040000010300a10009210101000122050009058103"], 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x4, 0x4000105, 0x0, 0x7, 0x109]}, &(0x7f0000000400)=0x54) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="2100000000000000a03111534878e455b115dffb8ead461eac17c13a864c1b6e5ba2221199c6abfc2c87919f96088c1f03adecda8f8a4bccef1d34dff4b3ef256f8c568a7f96959e67e105bef2ce312750d0d54b704a49a69ab207790825e60bd0a668a26658072343ca489ce0edb621d50784ce77012447f26dfe654a9b04fbe9e5f7ec909ee3fa00000000"], 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r6) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 45m54.683827794s ago: executing program 33 (id=1387): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000300)=0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0xb339, 0x1f000000}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x80) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x7, &(0x7f00000005c0)={0x80000001, {{0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) unshare(0x68040200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x20) r4 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004e40)=@newtaction={0x68, 0x13, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_sample={0x50, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9d, 0x0, 0x3, 0x5, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1000010}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x4008000) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/245, 0xf5) mmap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x100000a, 0x10, r4, 0xcef14000) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000004004070002240001000040b109040000010300a10009210101000122050009058103"], 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x4, 0x4000105, 0x0, 0x7, 0x109]}, &(0x7f0000000400)=0x54) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="2100000000000000a03111534878e455b115dffb8ead461eac17c13a864c1b6e5ba2221199c6abfc2c87919f96088c1f03adecda8f8a4bccef1d34dff4b3ef256f8c568a7f96959e67e105bef2ce312750d0d54b704a49a69ab207790825e60bd0a668a26658072343ca489ce0edb621d50784ce77012447f26dfe654a9b04fbe9e5f7ec909ee3fa00000000"], 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r6) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 38m59.351198363s ago: executing program 5 (id=2768): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c) 38m59.014355368s ago: executing program 5 (id=2774): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[], 0x114}], 0x1}, 0x0) 38m58.810387466s ago: executing program 5 (id=2776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x7, 0x2, 0x2, 0x1ff, 0x2, "f5c7995aa6bf8200"}) 38m56.890235368s ago: executing program 5 (id=2789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0xb97534d5fe9700cf, 0x4, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff8}]}, 0x30}, 0x1, 0x0, 0x0, 0x200408c4}, 0x0) 38m56.702922991s ago: executing program 5 (id=2793): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40004) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) sendto$inet6(r0, 0x0, 0x0, 0x20004011, &(0x7f0000000180)={0xa, 0x4e20, 0x1, @empty, 0x5}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) 38m55.88047666s ago: executing program 5 (id=2798): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 38m40.054099885s ago: executing program 34 (id=2798): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_io_uring_setup(0x497, &(0x7f0000000380)={0x0, 0x607b, 0x8, 0x0, 0x284}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 36m44.588959265s ago: executing program 6 (id=3459): iopl(0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) sysfs$1(0x1, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0xd, 0x800}], 0x1, 0x0) 36m44.036013755s ago: executing program 6 (id=3461): creat(0x0, 0x96) pipe2$9p(0x0, 0x80000) mmap(&(0x7f0000019000/0x1000)=nil, 0x1000, 0xb635773f06ebbee3, 0x36ec26d2bbe7d4b4, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 36m42.633573635s ago: executing program 6 (id=3465): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000340)={"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"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x400, 0x3, 0x7e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) 36m40.95156561s ago: executing program 6 (id=3470): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xb8, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09", 0x0, 0x8000}, 0x50) 36m40.764072709s ago: executing program 6 (id=3473): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r2, 0x400, 0x0) 36m37.138331366s ago: executing program 6 (id=3489): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000400)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) 36m20.988840337s ago: executing program 35 (id=3489): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000400)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) 1m37.445265271s ago: executing program 4 (id=11749): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) write(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m26.771825861s ago: executing program 4 (id=11773): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a00000000000000", 0x6c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r4, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWNSID={0x4c, 0x58, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x2c000004) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001c00)={'ip6gre0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x7f, 0xe4, 0x40, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x20, 0x8, 0x3, 0x1}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r7, 0x4, 0x42400) close_range(r6, 0xffffffffffffffff, 0x0) 1m23.57546497s ago: executing program 4 (id=11781): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000340)={"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"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x400, 0x3, 0x7e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1m22.430656765s ago: executing program 4 (id=11783): syz_open_dev$loop(0x0, 0x1, 0x6102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x48a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) 1m22.244218338s ago: executing program 4 (id=11784): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x54) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r5, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000010a01080000000000000000020000080000044000000000000000040000044000000000000000010200000000000000eaae01fe473fb44c2d68e7c71ac0d5d7740258742cffff8a9a2269febea8837828514395c8bfc9689a05180d622f535436c4313d805ba8eb3a080000f4a12a752b81b5b866a9635e9d8bf1548db903496e8a42854b08a87f0d3b2b000000024000000002"], 0xfffffffffffffedc}, 0x1, 0x0, 0x0, 0x400c895}, 0x840) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r9, 0x28543634fae43ad, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r2, r1, 0x2) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r11, 0x0, 0x0) 1m18.291508329s ago: executing program 4 (id=11793): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x3, 0x4e, 0x40, 0x5, 0x8]}, &(0x7f00000000c0)=0x54) 1m3.204961759s ago: executing program 36 (id=11793): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x3, 0x4e, 0x40, 0x5, 0x8]}, &(0x7f00000000c0)=0x54) 23.44391885s ago: executing program 9 (id=11897): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 22.21935772s ago: executing program 9 (id=11901): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x100, 0xfffffffffffffe70, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x3, 0x1, 0x42, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x700, 0x2}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) unshare(0x46000200) 18.654844777s ago: executing program 2 (id=11909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\v\x00\x00\x00'], 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) accept4(r1, &(0x7f0000000180)=@nl=@proc, &(0x7f0000000380)=0x80, 0x80000) sendmmsg$inet(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="4f80dfed9cba8a309ce9d40208a3e87bfb056e2acd00767cda6ab9806f2eafd17f370c5744f05b7de2f0705482e85facaa7f0bc9f4c4c467680bd01d88f8b5a7df620bab380abada7f25e703fc261f", 0x4f}, {&(0x7f0000001900)="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", 0x397}, {&(0x7f0000000340)="fb", 0x1}], 0x3}}], 0x1, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r1, 0x8000000000000001, 0x7, 0x7f}) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 17.223147638s ago: executing program 0 (id=11911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x80) 17.200537699s ago: executing program 2 (id=11912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141042, 0x80) socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r4, 0x0, 0x0, 0xce2) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f0000000240)="b91bfde94813437a0c626f5724f3b85eeed7fc000192cc3a3d4864935eb7dff28dd8996b0a854cfa849635b5a719564d457fc633f9adf0cc", 0x38}], 0x2, 0x0, 0x0, 0x4a0f0000}, 0x8004) 16.994394921s ago: executing program 0 (id=11913): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000026000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x100, 0xfffffffffffffe70, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x3, 0x1, 0x42, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x700, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) unshare(0x46000200) 14.946986889s ago: executing program 2 (id=11915): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d", 0x8c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) connect$unix(r4, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWNSID={0x4c, 0x58, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x2c000004) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001c00)={'ip6gre0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x7f, 0xe4, 0x40, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x20, 0x8, 0x3, 0x1}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r7, 0x4, 0x42400) close_range(r6, 0xffffffffffffffff, 0x0) 13.448697671s ago: executing program 7 (id=11917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x202e43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) close_range(r2, 0xffffffffffffffff, 0x0) 11.580630948s ago: executing program 8 (id=11919): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0x158}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @remote}, &(0x7f0000000280)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000000)=0x36) r5 = accept$netrom(0xffffffffffffffff, 0x0, 0x0) writev(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r7, &(0x7f00000000c0), 0x2) read(r7, &(0x7f00000001c0)=""/93, 0x5d) 10.425754787s ago: executing program 2 (id=11920): syz_open_dev$loop(0x0, 0x1, 0x6102) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x48a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) 10.298311884s ago: executing program 9 (id=11921): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x100, 0xfffffffffffffe70, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x3, 0x1, 0x42, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x700, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) unshare(0x46000200) 10.240546369s ago: executing program 7 (id=11922): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d46730cd8", 0x32}], 0x1}}], 0x1, 0x8004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7b, 0x4, 0xfb, 0x0, 0x7, 0xa, 0x1, 0x2, 0x8a, 0x1, 0x7, 0x1, 0x0, 0xfffffffa, 0x1, 0x40, 0x80, 0xc, 0x8f, '\x00', 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.83704304s ago: executing program 8 (id=11923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x80) 9.676864261s ago: executing program 8 (id=11924): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x200, 0x100, 0x80, 0x4, 0x20, 0x6, 0x7}, &(0x7f0000000580)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r1, 0x5, 0x3, 0x5}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r6, 0x3ff}}, 0x10) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x2d, 0x0, 0x90) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x19c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0xa0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmmsg$inet6(r8, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404000c) 9.442952362s ago: executing program 0 (id=11925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141042, 0x80) socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r4, 0x0, 0x0, 0xce2) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f0000000240)="b91bfde94813437a0c626f5724f3b85eeed7fc000192cc3a3d4864935eb7dff28dd8996b0a854cfa849635b5a719564d457fc633f9", 0x35}], 0x2, 0x0, 0x0, 0x4a0f0000}, 0x8004) 5.881797067s ago: executing program 8 (id=11926): socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x220, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20}}}, @common=@unspec=@devgroup={{0x38}, {0xb}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "8842", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1, 0x0, 0x7]}, {0x0, [0x0, 0x0, 0x0, 0x5, 0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 5.796565859s ago: executing program 0 (id=11927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/254, 0xfe, 0x0, &(0x7f00000006c0)=""/202, 0xca}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x15, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x63}, @generic={0xce, 0x0, 0x7, 0x9, 0x4b}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x5, 0xc, 0x900}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x47}, @map_fd={0x18, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x40f00, 0x10, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x4, 0x0, &(0x7f0000000ac0)=[{0x5, 0x3, 0x8, 0x7}, {0x3, 0x1, 0xf, 0xc}, {0x4, 0x1, 0x6, 0x3}, {0x0, 0x4, 0x4, 0x6}], 0x10, 0x10, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000002240)={r6}, &(0x7f0000002280)={'enc=', 'pkcs1', ' hash=', {'hmac(sha256-avx2)\x00'}}, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r7, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e032", 0x3a}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x31, 0x2c, 0x2f]}}}}]}) 5.794708612s ago: executing program 7 (id=11928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 4.742911096s ago: executing program 8 (id=11929): r0 = socket(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0xfffffffd) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000013c0)="f0", 0x1}], 0x1) connect$unix(r0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) 4.288838079s ago: executing program 7 (id=11930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980), 0x0, 0x2000c000) timer_create(0xb, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985", 0x5f}, {&(0x7f00000002c0)}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea185000000", 0x35}, {&(0x7f0000000b80)="b97edc68d71625", 0x7}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c", 0x15}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf", 0x5d}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc0) sendto$inet(r4, &(0x7f0000000580)="1713", 0x2, 0x10008095, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) 3.402695798s ago: executing program 9 (id=11931): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, &(0x7f0000000240)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) 3.127740337s ago: executing program 7 (id=11932): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_submit(0x0, 0x0, &(0x7f0000001d00)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.66959505s ago: executing program 9 (id=11933): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x2000004) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 1.207913001s ago: executing program 0 (id=11934): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x6}}, 0x18) dup3(0xffffffffffffffff, r0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x100000000000000) 1.177451271s ago: executing program 2 (id=11935): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_submit(0x0, 0x0, &(0x7f0000001d00)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.169730763s ago: executing program 9 (id=11936): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7b, 0x4, 0xfb, 0x0, 0x7, 0xa, 0x1, 0x2, 0x8a, 0x1, 0x7, 0x1, 0x0, 0xfffffffa, 0x1, 0x40, 0x80, 0xc, 0x8f, '\x00', 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.149796614s ago: executing program 7 (id=11937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141042, 0x80) socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r4, 0x0, 0x0, 0xce2) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f0000000240)="b91bfde94813437a0c626f5724f3b85eeed7fc000192cc3a3d4864935eb7dff28dd8996b0a854cfa849635b5a719564d457fc633f9", 0x35}], 0x2, 0x0, 0x0, 0x4a0f0000}, 0x8004) 1.07208877s ago: executing program 0 (id=11938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1ffffffffffffe96, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x44fd, 0x3, 0x1, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 120.332715ms ago: executing program 2 (id=11939): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x8, &(0x7f0000000600)) write(0xffffffffffffffff, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5", 0x1d) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 8 (id=11940): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000100)={&(0x7f00000000c0)=[r1, r1, r1], 0x3}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x847, 0x2972, 0x23, 0x10, 0x897d, {0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8d95, 0x1, 0x1, 0xbea, 0x149}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x3ff, 0xb, 0x5, 0x449, 0x8, 0x7, 0x8fe9, 0x8, r3}, 0x20) openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x100010, r2, 0x927f3000) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000400)={0x1, &(0x7f0000000300)=""/13, &(0x7f00000003c0)=[{0x473f2e51, 0x5a, 0x5, &(0x7f0000000340)=""/90}]}) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r5, &(0x7f00000024c0)={0x20, 0x0, r6, {0x0, 0x14}}, 0x20) r7 = socket$nl_crypto(0x10, 0x3, 0x15) accept4(r7, &(0x7f0000002500)=@hci, &(0x7f0000002580)=0x80, 0x0) write$FUSE_INIT(r5, &(0x7f00000025c0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x402000, 0xc, 0x7, 0x7, 0x1, 0x0, 0x0, 0x10, 0xfffffffb}}, 0x50) mq_open(&(0x7f0000002640)='/dev/dri/renderD128\x00', 0x40, 0x4, &(0x7f0000002680)={0xe6d2, 0x1, 0xbaf, 0x6}) ioctl$FIOCLEX(r4, 0x5451) r8 = dup(r7) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f00000026c0)=0x3ff, 0x4) r9 = syz_open_dev$vim2m(&(0x7f0000002700), 0x5d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000002740)={0x9, 0x34343459, 0x3cf66aa66462e32e, @discrete={0x30, 0x5}}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000002940)={&(0x7f0000002800)=[0x0, 0x0], &(0x7f0000002840)=[{}], &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000002a00)={&(0x7f00000029c0)=[0x0, r10, r11], 0x3, 0x800}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002a40)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002b00)="0810504b4ad0b11223499594d5fbe2b4d455c776212cdc7f47138aeb9e20a62fd00645a7e15f92d105aaecbbd3f3687204395ff93ddfc95d7d959141be672aacd825a0bb4838b0837cb32c49bb496808a22e3f4266009fa0bd5225f1a87ae9fc9b602854a62fe0cefe896b6eea13ab2ed4468d8e5b558d08fc4d08e71333fd060d65dbd44520d026be0188be5eaa9633282920140efc956c5f33bb42b025e95d96644df82dad61dbea43be7296b8f82c50dbd85192b7eb9edb2c438f6e2f9f94796a789e58b56fe4cd930010e2c0ecb87fd72db4ce07b07e1b54794e9abe04e0b867c6c45e4a", 0xe6}], 0x1}, 0x48100) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000002c80)={0x7, 0x7, 0x1}, &(0x7f0000002cc0)=0x28) openat(0xffffffffffffff9c, &(0x7f0000002d00)='./file0\x00', 0x200, 0x12) kernel console output (not intermixed with test programs): 984': attribute type 3 has an invalid length. [ 3033.114483][ T9146] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3033.492617][ T9146] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3033.501829][ T9146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3033.509913][ T9146] usb 3-1: Product: syz [ 3033.514214][ T9146] usb 3-1: Manufacturer: syz [ 3033.519194][ T9146] usb 3-1: SerialNumber: syz [ 3033.526466][ T9146] usb 3-1: config 0 descriptor?? [ 3033.894646][ T9146] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3034.714094][ T9146] gspca_sunplus: reg_r err -110 [ 3036.858013][T25445] usb 3-1: USB disconnect, device number 25 [ 3037.396888][T10124] SELinux: failed to load policy [ 3038.517475][T10135] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 3043.360817][T10177] hub 2-0:1.0: USB hub found [ 3043.524765][T10177] hub 2-0:1.0: 1 port detected [ 3043.884266][T17026] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 3044.093948][T17026] usb 9-1: Using ep0 maxpacket: 32 [ 3044.351156][T17026] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3044.373486][T17026] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3044.389723][T17026] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3044.411233][T17026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3044.430187][T17026] usb 9-1: config 0 descriptor?? [ 3044.437800][T17026] hub 9-1:0.0: USB hub found [ 3044.638304][T17026] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 3045.563045][T10195] netlink: 'syz.0.11020': attribute type 10 has an invalid length. [ 3045.961459][T17026] hid-generic 0003:046D:C31C.0021: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 3046.049592][T17026] usb 9-1: USB disconnect, device number 107 [ 3046.213808][ T8881] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3046.414148][ T8881] usb 3-1: Using ep0 maxpacket: 32 [ 3046.552542][ T8881] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3046.567513][ T8881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3046.589696][ T8881] usb 3-1: config 0 descriptor?? [ 3046.601280][ T8881] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3047.573941][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 3047.824936][ T8881] gspca_nw80x: reg_r err -32 [ 3047.829626][ T8881] nw80x 3-1:0.0: probe with driver nw80x failed with error -32 [ 3047.859557][ T8881] usb 3-1: USB disconnect, device number 26 [ 3047.917346][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3047.945687][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3048.107113][ T24] usb 5-1: Product: syz [ 3048.119500][ T24] usb 5-1: Manufacturer: syz [ 3048.179633][ T24] usb 5-1: SerialNumber: syz [ 3049.474615][ T24] usb 5-1: config 0 descriptor?? [ 3049.606618][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11034'. [ 3049.900173][ T24] usb-storage 5-1:0.0: USB Mass Storage device detected [ 3050.582065][ T24] usb 5-1: USB disconnect, device number 6 [ 3051.427802][T10257] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11037'. [ 3051.833884][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3052.207771][T10268] hub 2-0:1.0: USB hub found [ 3052.213846][T10268] hub 2-0:1.0: 1 port detected [ 3052.633831][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 3052.656406][ T24] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 3052.706155][ T24] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 3052.807518][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3052.893846][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3052.910466][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3052.940495][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3052.996096][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3053.047616][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3053.086479][ T24] usb 3-1: Product: syz [ 3053.111772][ T24] usb 3-1: Manufacturer: syz [ 3053.138941][ T24] usb 3-1: SerialNumber: syz [ 3053.188654][ T24] usb 3-1: config 0 descriptor?? [ 3053.212979][ T24] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 3053.494651][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 3053.619345][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 3053.651788][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 3053.729076][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 3053.748326][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 3053.759270][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 3053.777737][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 3053.894951][ T8881] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 3053.930804][ T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3054.052557][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 3054.162003][ T8881] usb 8-1: Using ep0 maxpacket: 32 [ 3054.204032][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 3054.245793][ T8881] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3054.270453][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 3054.284134][ T8881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3054.292374][ T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 3054.302024][ T8881] usb 8-1: config 0 descriptor?? [ 3054.312632][ T8881] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3054.331150][ T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3054.352149][T10288] lo speed is unknown, defaulting to 1000 [ 3054.370213][T10290] input: syz0 as /devices/virtual/input/input150 [ 3055.117131][ T8881] gspca_nw80x: reg_r err -32 [ 3055.121882][ T8881] nw80x 8-1:0.0: probe with driver nw80x failed with error -32 [ 3055.136824][T17026] usb 3-1: USB disconnect, device number 27 [ 3055.342264][T17026] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3055.527729][ T8881] usb 8-1: USB disconnect, device number 89 [ 3055.566627][T17026] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3055.625139][T17026] keyspan 3-1:0.0: device disconnected [ 3055.714134][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11054'. [ 3055.817160][T10310] netlink: 'syz.7.11056': attribute type 21 has an invalid length. [ 3055.830846][T10310] netlink: 128 bytes leftover after parsing attributes in process `syz.7.11056'. [ 3055.981834][T10310] netlink: 'syz.7.11056': attribute type 6 has an invalid length. [ 3055.990037][T10310] netlink: 3 bytes leftover after parsing attributes in process `syz.7.11056'. [ 3057.413756][ T8881] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3057.700798][ T8881] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3057.786552][ T8881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3057.820502][T10336] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11062'. [ 3057.851395][ T8881] usb 3-1: Product: syz [ 3057.871029][ T8881] usb 3-1: Manufacturer: syz [ 3057.893792][ T8881] usb 3-1: SerialNumber: syz [ 3057.941916][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11061'. [ 3057.974589][T10340] netlink: 'syz.8.11061': attribute type 4 has an invalid length. [ 3058.005280][ T8881] usb 3-1: config 0 descriptor?? [ 3058.016156][ T8881] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3058.324122][ T5827] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 3058.504668][ T5827] usb 8-1: Using ep0 maxpacket: 16 [ 3058.525163][ T5827] usb 8-1: config index 0 descriptor too short (expected 1828, got 36) [ 3058.535599][ T5827] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 3058.549613][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 3058.553960][ T8881] gspca_sunplus: reg_r err -110 [ 3058.575219][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 3058.588161][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3058.629501][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3058.886816][ T5827] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 3058.917011][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3059.425363][ T5827] usb 8-1: Product: syz [ 3059.429579][ T5827] usb 8-1: Manufacturer: syz [ 3059.434739][ T5827] usb 8-1: SerialNumber: syz [ 3059.442825][ T5827] usb 8-1: config 0 descriptor?? [ 3059.470557][ T5827] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 3059.671373][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 3059.753685][T17026] usb 3-1: USB disconnect, device number 28 [ 3059.762064][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 3059.774623][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 3059.782726][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 3059.862465][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 3059.918575][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 3059.928043][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 3059.940978][T10364] syzkaller1: entered promiscuous mode [ 3059.958615][ T5827] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 3059.969670][T10364] syzkaller1: entered allmulticast mode [ 3060.013458][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 3060.103854][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3060.105281][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 3060.132508][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 3060.150339][ T5827] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 3060.184389][ T5827] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 3060.220535][ T5827] usb 8-1: USB disconnect, device number 90 [ 3060.231809][ T5827] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 3060.343785][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 3060.370382][ T5827] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 3060.381398][ T5827] keyspan 8-1:0.0: device disconnected [ 3060.389633][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3060.411108][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 3060.454954][ T24] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3060.941525][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3060.959611][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 3060.979002][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3060.987524][ T24] usb 5-1: Product: syz [ 3060.991776][ T24] usb 5-1: Manufacturer: syz [ 3060.996990][ T24] usb 5-1: SerialNumber: syz [ 3061.019131][ T24] usb 5-1: config 0 descriptor?? [ 3061.039900][ T24] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 3061.309598][ T24] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 3061.340431][ T24] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 3061.681222][ T24] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 3062.135020][T10388] tmpfs: Unknown parameter '/' [ 3062.210032][ T24] usb 5-1: USB disconnect, device number 7 [ 3064.372181][T10400] netlink: 'syz.0.11075': attribute type 4 has an invalid length. [ 3064.417767][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11075'. [ 3069.855733][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11089'. [ 3070.691034][T10456] usb usb8: usbfs: process 10456 (syz.7.11092) did not claim interface 0 before use [ 3070.715541][ T30] audit: type=1326 audit(3070.665:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3070.921129][ T30] audit: type=1326 audit(3070.665:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3070.996718][ T30] audit: type=1326 audit(3070.795:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3071.051568][ T30] audit: type=1326 audit(3070.795:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3071.107010][ T30] audit: type=1326 audit(3070.795:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3071.140305][ T30] audit: type=1326 audit(3070.795:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f509178d41f code=0x7ffc0000 [ 3071.164406][ T5827] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3071.228258][ T30] audit: type=1326 audit(3070.795:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3071.342253][ T5827] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3071.360438][ T5827] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3071.378598][ T30] audit: type=1326 audit(3070.795:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3071.443787][ T5827] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3071.482898][ T5827] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3071.512830][ T30] audit: type=1326 audit(3070.795:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3071.513682][ T5827] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3071.607621][ T30] audit: type=1326 audit(3070.795:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10458 comm="syz.4.11095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3071.677086][ T5827] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3071.686753][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3071.706118][ T5827] usb 5-1: Product: syz [ 3071.710691][ T5827] usb 5-1: Manufacturer: syz [ 3071.721678][ T5827] cdc_wdm 5-1:1.0: skipping garbage [ 3071.741836][ T5827] cdc_wdm 5-1:1.0: skipping garbage [ 3071.755975][ T5827] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3071.772164][ T5827] cdc_wdm 5-1:1.0: Unknown control protocol [ 3072.211302][T25445] usb 5-1: USB disconnect, device number 8 [ 3072.697581][ T8881] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 3072.883473][ T8881] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3072.949951][ T8881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3073.049812][ T8881] usb 8-1: Product: syz [ 3073.098642][ T8881] usb 8-1: Manufacturer: syz [ 3073.148869][ T8881] usb 8-1: SerialNumber: syz [ 3073.282639][ T8881] usb 8-1: config 0 descriptor?? [ 3073.557091][ T8881] usb-storage 8-1:0.0: USB Mass Storage device detected [ 3075.551396][ T5827] usb 8-1: USB disconnect, device number 91 [ 3075.669538][T10491] netlink: 'syz.4.11104': attribute type 1 has an invalid length. [ 3075.777757][T10495] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11104'. [ 3075.863461][T10492] lo speed is unknown, defaulting to 1000 [ 3075.915884][T10491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3076.437631][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 3076.437647][ T30] audit: type=1326 audit(3076.395:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3076.483241][ T30] audit: type=1326 audit(3076.395:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3076.714002][ T5827] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 3076.876776][ T30] audit: type=1326 audit(3076.425:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3076.926132][ T30] audit: type=1326 audit(3076.425:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3076.949186][ C0] vkms_vblank_simulate: vblank timer overrun [ 3076.960946][ T30] audit: type=1326 audit(3076.425:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3076.987229][ T30] audit: type=1326 audit(3076.425:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f855e78d41f code=0x7ffc0000 [ 3077.010395][ T5827] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3077.019187][ T5827] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3077.030911][ T5827] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3077.031971][T10491] bond1 (unregistering): Released all slaves [ 3077.077964][ T5827] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3077.089422][ T30] audit: type=1326 audit(3076.425:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3077.116856][ C0] vkms_vblank_simulate: vblank timer overrun [ 3077.123418][ T5827] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3077.136571][ T30] audit: type=1326 audit(3076.425:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3077.194405][ T5827] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3077.203493][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3077.299119][ T5827] usb 8-1: Product: syz [ 3077.303328][ T5827] usb 8-1: Manufacturer: syz [ 3077.312040][ T30] audit: type=1326 audit(3076.425:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3077.669826][ T5827] cdc_wdm 8-1:1.0: skipping garbage [ 3077.675612][ T5827] cdc_wdm 8-1:1.0: skipping garbage [ 3077.690151][ T30] audit: type=1326 audit(3076.425:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10510 comm="syz.7.11111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3077.713207][ C0] vkms_vblank_simulate: vblank timer overrun [ 3077.720583][ T5827] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 3077.731632][ T5827] cdc_wdm 8-1:1.0: Unknown control protocol [ 3077.770541][T10520] SELinux: failed to load policy [ 3078.030242][T25445] usb 8-1: USB disconnect, device number 92 [ 3078.994219][T10550] netlink: 'syz.7.11124': attribute type 1 has an invalid length. [ 3079.156566][T10550] netlink: 52 bytes leftover after parsing attributes in process `syz.7.11124'. [ 3079.170843][T10550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3079.214187][ T8881] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3080.030081][ T8881] usb 3-1: Using ep0 maxpacket: 32 [ 3080.035618][T10559] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 3080.035661][T10559] SELinux: failed to load policy [ 3080.102672][ T8881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3080.143332][ T8881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3080.156232][ T8881] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3080.168671][ T8881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3080.208742][ T8881] usb 3-1: config 0 descriptor?? [ 3080.221397][ T8881] hub 3-1:0.0: USB hub found [ 3080.315273][T10550] bond1 (unregistering): Released all slaves [ 3080.423145][ T8881] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 3080.443962][ T5921] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 3080.613817][ T5921] usb 9-1: Using ep0 maxpacket: 32 [ 3080.633741][ T5921] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3080.643719][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3080.664869][ T5921] usb 9-1: config 0 descriptor?? [ 3080.851647][ T8881] hid-generic 0003:046D:C31C.0022: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 3080.877487][ T5921] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3080.905162][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3080.926048][ T5921] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3080.935074][ T5921] usb 9-1: media controller created [ 3080.963813][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3081.079071][ T5921] az6027: usb out operation failed. (-71) [ 3081.086159][ T5921] az6027: usb out operation failed. (-71) [ 3081.091984][ T5921] stb0899_attach: Driver disabled by Kconfig [ 3081.102508][ T5921] az6027: no front-end attached [ 3081.102508][ T5921] [ 3081.111473][ T5921] az6027: usb out operation failed. (-71) [ 3081.121847][ T5921] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3081.141624][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input151 [ 3081.158006][ T5921] dvb-usb: schedule remote query interval to 400 msecs. [ 3081.165190][ T5921] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3081.176235][ T5921] usb 9-1: USB disconnect, device number 108 [ 3081.191040][ T5827] usb 3-1: USB disconnect, device number 29 [ 3081.242526][ T5921] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3081.846045][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.853039][T10582] netlink: 'syz.7.11131': attribute type 21 has an invalid length. [ 3081.861106][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.996795][T10582] netlink: 128 bytes leftover after parsing attributes in process `syz.7.11131'. [ 3083.333379][T10582] netlink: 'syz.7.11131': attribute type 6 has an invalid length. [ 3083.349297][T10582] netlink: 3 bytes leftover after parsing attributes in process `syz.7.11131'. [ 3085.064911][T10595] SELinux: failed to load policy [ 3085.192186][T10611] netlink: 828 bytes leftover after parsing attributes in process `syz.0.11140'. [ 3085.838822][T10613] lo speed is unknown, defaulting to 1000 [ 3087.034491][T10621] SELinux: failed to load policy [ 3087.729228][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11149'. [ 3089.173698][T10654] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 3089.256083][T10654] SELinux: failed to load policy [ 3089.635471][T10658] netlink: 'syz.0.11154': attribute type 72 has an invalid length. [ 3089.653746][T10658] netlink: 'syz.0.11154': attribute type 8 has an invalid length. [ 3092.841781][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11164'. [ 3093.434221][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3094.531867][ T24] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3094.549776][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3094.572187][ T24] usb 3-1: Product: syz [ 3094.577865][ T24] usb 3-1: Manufacturer: syz [ 3094.582977][ T24] usb 3-1: SerialNumber: syz [ 3094.771129][ T24] usb 3-1: config 0 descriptor?? [ 3094.786449][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3095.065044][T10707] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11165'. [ 3095.314268][ T24] gspca_sunplus: reg_r err -110 [ 3096.336470][ T8881] usb 3-1: USB disconnect, device number 30 [ 3097.359365][T10732] netlink: 'syz.8.11173': attribute type 72 has an invalid length. [ 3097.392096][T10732] netlink: 'syz.8.11173': attribute type 8 has an invalid length. [ 3097.412715][T10733] netlink: 'syz.4.11172': attribute type 1 has an invalid length. [ 3097.495836][T10733] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 3097.761378][T10733] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 3097.856789][T10733] bond1 (unregistering): Released all slaves [ 3099.151414][T10750] tmpfs: Unknown parameter '/' [ 3100.011093][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 3100.011143][ T30] audit: type=1400 audit(3099.865:2572): avc: granted { setsecparam } for pid=10751 comm="syz.4.11179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3102.834609][T10795] netlink: 'syz.4.11190': attribute type 1 has an invalid length. [ 3102.903747][ T9146] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 3103.402603][T10795] bond1 (unregistering): Released all slaves [ 3103.539892][ T9146] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3103.589578][ T9146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3103.710289][ T9146] usb 9-1: Product: syz [ 3104.874574][ T9146] usb 9-1: Manufacturer: syz [ 3104.919071][ T9146] usb 9-1: SerialNumber: syz [ 3105.017726][ T9146] usb 9-1: config 0 descriptor?? [ 3105.079296][ T9146] usb 9-1: can't set config #0, error -71 [ 3105.814892][ T9146] usb 9-1: USB disconnect, device number 109 [ 3105.875494][T10815] netlink: 'syz.4.11195': attribute type 3 has an invalid length. [ 3106.464143][ T9146] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 3106.631766][ T9146] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3106.817983][ T9146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3106.957638][ T9146] usb 9-1: Product: syz [ 3107.022178][ T9146] usb 9-1: Manufacturer: syz [ 3107.089712][ T9146] usb 9-1: SerialNumber: syz [ 3107.167692][ T9146] usb 9-1: config 0 descriptor?? [ 3107.787768][ T9146] usb-storage 9-1:0.0: USB Mass Storage device detected [ 3108.122475][T10836] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3108.957904][ T9146] usb 9-1: USB disconnect, device number 110 [ 3109.172717][T10830] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 3109.183092][T10830] SELinux: failed to load policy [ 3112.013789][ T9146] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3112.153850][ T9146] usb 3-1: device descriptor read/64, error -71 [ 3112.513881][ T9146] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3112.673846][ T9146] usb 3-1: device descriptor read/64, error -71 [ 3112.784526][ T9146] usb usb3-port1: attempt power cycle [ 3114.328607][T10890] syz!: rxe_newlink: already configured on team_slave_0 [ 3114.727262][ T9146] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3115.702810][ T30] audit: type=1400 audit(3115.245:2573): avc: granted { setsecparam } for pid=10891 comm="syz.0.11215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3116.252257][ T9146] usb 3-1: device descriptor read/8, error -71 [ 3118.607836][T10924] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3123.157021][ T5261] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3123.434125][ T5261] usb 5-1: Using ep0 maxpacket: 8 [ 3123.521811][ T5261] usb 5-1: config 7 has an invalid interface number: 43 but max is 1 [ 3123.587765][ T5261] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 3123.676674][ T5261] usb 5-1: config 7 has an invalid interface number: 141 but max is 1 [ 3123.969298][ T5261] usb 5-1: config 7 has an invalid descriptor of length 142, skipping remainder of the config [ 3123.979980][ T5261] usb 5-1: config 7 has no interface number 0 [ 3123.986149][ T5261] usb 5-1: config 7 has no interface number 1 [ 3123.992272][ T5261] usb 5-1: config 7 interface 43 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 3124.003534][ T5261] usb 5-1: config 7 interface 43 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 3124.015060][ T5261] usb 5-1: config 7 interface 43 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 3124.026150][ T5261] usb 5-1: config 7 interface 43 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 3124.047352][ T5261] usb 5-1: config 7 interface 43 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 3124.069211][ T5261] usb 5-1: config 7 interface 43 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 3124.089916][ T5261] usb 5-1: config 7 interface 43 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 3124.111744][ T5261] usb 5-1: config 7 interface 43 altsetting 7 endpoint 0x5 has invalid maxpacket 528, setting to 64 [ 3124.295534][ T5261] usb 5-1: config 7 interface 141 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3124.343889][ T9146] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3124.419073][ T5261] usb 5-1: config 7 interface 43 has no altsetting 0 [ 3124.482673][ T5261] usb 5-1: config 7 interface 141 has no altsetting 0 [ 3124.523824][ T9146] usb 3-1: Using ep0 maxpacket: 32 [ 3124.530953][ T9146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3124.542769][ T5261] usb 5-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice=e7.29 [ 3124.582238][ T9146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3124.595310][ T5261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3124.603376][ T5261] usb 5-1: Product: Ѓ [ 3124.619586][ T9146] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3124.639528][ T5261] usb 5-1: Manufacturer: з [ 3124.644976][ T5261] usb 5-1: SerialNumber: Ё [ 3124.649587][ T9146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 3124.665444][T10952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3124.675045][ T9146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 3124.704504][ T9146] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3124.713848][ T9146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3124.721914][ T9146] usb 3-1: Product: syz [ 3124.727138][ T9146] usb 3-1: Manufacturer: syz [ 3124.731808][ T9146] usb 3-1: SerialNumber: syz [ 3124.756202][ T9146] usb 3-1: config 0 descriptor?? [ 3124.773734][T10959] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3124.804732][T10967] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11237'. [ 3124.887066][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11237'. [ 3124.926010][ T9146] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input152 [ 3125.265631][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3125.334556][ T5171] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3125.492865][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 3125.502863][ T9146] usb 3-1: USB disconnect, device number 35 [ 3125.513326][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3125.694500][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3125.812507][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3125.919245][ T5261] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 3125.952872][ T5261] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3125.979539][ T5261] dib0700: firmware download failed at 7 with -22 [ 3126.012418][ T5261] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 3126.037746][ T5261] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3126.081909][ T5261] dib0700: firmware download failed at 7 with -22 [ 3126.986352][ T5261] usb 5-1: USB disconnect, device number 9 [ 3129.100967][T11004] syz.0.11245: attempt to access beyond end of device [ 3129.100967][T11004] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3129.114805][T11004] FAT-fs (loop1): unable to read boot sector [ 3129.735149][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11249'. [ 3129.998809][T11009] netlink: 'syz.4.11249': attribute type 4 has an invalid length. [ 3130.033473][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11249'. [ 3130.506825][T11021] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3131.405161][T11033] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 3131.973211][ T9146] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3132.396976][T11042] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 3132.765628][ T9146] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3132.795926][ T9146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3132.804244][ T9146] usb 5-1: Product: syz [ 3132.808435][ T9146] usb 5-1: Manufacturer: syz [ 3132.813038][ T9146] usb 5-1: SerialNumber: syz [ 3132.891403][ T9146] usb 5-1: config 0 descriptor?? [ 3132.926722][ T9146] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3132.936576][T11017] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3133.725582][ T9146] gspca_sunplus: reg_r err -110 [ 3134.221621][T11052] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3134.713258][ T5827] usb 5-1: USB disconnect, device number 10 [ 3136.437937][T11065] SELinux: failed to load policy [ 3137.206102][ T30] audit: type=1326 audit(3137.165:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3137.243460][ T30] audit: type=1326 audit(3137.165:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3137.278823][ T30] audit: type=1326 audit(3137.165:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3137.319848][ T30] audit: type=1326 audit(3137.165:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3137.758203][T11082] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 3137.772920][ T30] audit: type=1326 audit(3137.165:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3137.797962][ T30] audit: type=1326 audit(3137.165:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f509178d41f code=0x7ffc0000 [ 3137.910120][ T30] audit: type=1326 audit(3137.165:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3138.213753][ T8881] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3138.244225][ T30] audit: type=1326 audit(3137.165:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3138.270525][ T30] audit: type=1326 audit(3137.165:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3138.961324][ T30] audit: type=1326 audit(3137.165:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11073 comm="syz.4.11267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f509178e969 code=0x7ffc0000 [ 3138.985732][ T8881] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3139.294011][T17026] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3139.540561][T17026] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3140.285348][ T8881] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3140.298061][ T8881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3140.307168][ T8881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3140.318292][ T8881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3140.360200][T17026] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3140.421869][ T8881] usb 5-1: string descriptor 0 read error: -71 [ 3140.428148][ T8881] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3140.443336][ T8881] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3140.452237][T17026] usb 3-1: Product: syz [ 3140.479464][T17026] usb 3-1: Manufacturer: syz [ 3140.537937][ T8881] usb 5-1: can't set config #1, error -71 [ 3140.544060][T17026] usb 3-1: SerialNumber: syz [ 3140.546359][T17026] usb 3-1: config 0 descriptor?? [ 3140.652270][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11274'. [ 3140.661776][ T8881] usb 5-1: USB disconnect, device number 11 [ 3140.938846][T11105] syz.8.11275: attempt to access beyond end of device [ 3140.938846][T11105] loop17: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3140.953159][T11105] FAT-fs (loop17): unable to read boot sector [ 3141.707141][T17026] usb-storage 3-1:0.0: USB Mass Storage device detected [ 3141.867490][T17026] usb 3-1: USB disconnect, device number 36 [ 3143.630614][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.637408][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3146.100847][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 3146.100882][ T30] audit: type=1400 audit(3145.995:2604): avc: granted { setsecparam } for pid=11129 comm="syz.4.11281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3147.081114][ T30] audit: type=1326 audit(3146.855:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3147.876229][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11285'. [ 3147.881952][ T30] audit: type=1326 audit(3146.865:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3148.123744][ T24] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 3148.269707][ T30] audit: type=1326 audit(3147.065:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3148.494716][ T30] audit: type=1326 audit(3147.075:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3148.531484][ T30] audit: type=1326 audit(3147.565:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3148.586508][T11157] tmpfs: Unknown parameter '/' [ 3148.909565][ T30] audit: type=1326 audit(3147.625:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3149.030242][ T30] audit: type=1326 audit(3147.645:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3149.225547][ T24] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3149.234324][ T24] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3149.245699][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3149.253726][T13400] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3149.284140][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3149.292918][ T30] audit: type=1326 audit(3147.645:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3149.297390][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3149.319199][ T30] audit: type=1326 audit(3147.665:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11136 comm="syz.7.11284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3149.408809][T11167] netlink: 'syz.8.11291': attribute type 1 has an invalid length. [ 3149.433949][T13400] usb 5-1: Using ep0 maxpacket: 32 [ 3149.441110][T13400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3149.453460][T13400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3149.463225][T13400] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3149.475482][T13400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 3149.488006][T13400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 3149.503448][T13400] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3149.513436][T13400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3149.523081][T13400] usb 5-1: Product: syz [ 3149.527908][T13400] usb 5-1: Manufacturer: syz [ 3149.532528][T13400] usb 5-1: SerialNumber: syz [ 3149.540700][T13400] usb 5-1: config 0 descriptor?? [ 3149.546727][T11153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3149.558764][T13400] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input153 [ 3149.584301][ T5171] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3149.647423][ T5171] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3149.661288][ T24] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3149.674485][ T24] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3149.684344][ T5171] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3149.694858][ T24] usb 8-1: Product: syz [ 3149.699317][ T24] usb 8-1: Manufacturer: syz [ 3149.713767][ T9146] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3149.954979][ T9146] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3150.002359][ T5171] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3150.147333][ T24] usb 8-1: can't set config #1, error -71 [ 3150.160478][ T9146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3150.181873][ T24] usb 8-1: USB disconnect, device number 93 [ 3150.192103][ T9146] usb 3-1: Product: syz [ 3150.205966][ T9146] usb 3-1: Manufacturer: syz [ 3150.211979][ T9146] usb 3-1: SerialNumber: syz [ 3150.228968][T11171] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 3150.231733][ T9146] usb 3-1: config 0 descriptor?? [ 3150.329507][T11153] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3150.364049][T13400] usb 5-1: USB disconnect, device number 12 [ 3150.366508][ T9146] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3150.386139][T11172] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 3150.427917][T11172] bond1 (unregistering): Released all slaves [ 3150.592876][ T9146] gspca_sunplus: reg_r err -71 [ 3150.630320][ T9146] usb 3-1: USB disconnect, device number 37 [ 3153.626358][T11196] SELinux: failed to load policy [ 3153.665369][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11299'. [ 3153.714166][ T9146] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3153.968549][T11213] tmpfs: Unknown parameter '/' [ 3154.540397][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11302'. [ 3154.557772][ T9146] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3154.613994][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 3154.614014][ T30] audit: type=1326 audit(3154.535:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3154.675616][ T9146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.684514][ T9146] usb 3-1: Product: syz [ 3154.688772][ T9146] usb 3-1: Manufacturer: syz [ 3154.693448][ T9146] usb 3-1: SerialNumber: syz [ 3154.727959][ T9146] usb 3-1: config 0 descriptor?? [ 3154.734441][ T30] audit: type=1326 audit(3154.535:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3154.741483][ T9146] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3154.824443][ T5827] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 3155.772932][ T9146] gspca_sunplus: reg_r err -110 [ 3155.786569][ T5827] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3155.804661][ T5827] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3155.810529][ T30] audit: type=1326 audit(3154.545:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3155.825774][ T5827] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3155.852760][ T5827] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3155.869610][ T30] audit: type=1326 audit(3154.545:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3155.919214][ T5827] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3156.094109][ T30] audit: type=1326 audit(3154.545:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3156.095229][T11229] affs: No valid root block on device nullb0 [ 3156.194217][T11230] input: syz0 as /devices/virtual/input/input154 [ 3156.962665][ T5827] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3156.972150][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3156.992629][ T5827] usb 8-1: Product: syz [ 3157.022851][ T30] audit: type=1326 audit(3154.545:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f855e78d41f code=0x7ffc0000 [ 3157.022867][ T5827] usb 8-1: Manufacturer: syz [ 3157.065130][ T5827] cdc_wdm 8-1:1.0: skipping garbage [ 3157.070399][ T5827] cdc_wdm 8-1:1.0: skipping garbage [ 3157.079229][ T30] audit: type=1326 audit(3154.545:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3157.105809][ T30] audit: type=1326 audit(3154.545:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3157.160243][ T5827] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 3157.180142][ T5827] cdc_wdm 8-1:1.0: Unknown control protocol [ 3157.271951][ T30] audit: type=1326 audit(3154.545:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3157.303129][ T30] audit: type=1326 audit(3154.545:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11216 comm="syz.7.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f855e78e969 code=0x7ffc0000 [ 3157.367214][ T5261] usb 3-1: USB disconnect, device number 38 [ 3159.045186][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11309'. [ 3159.219169][ T24] usb 8-1: USB disconnect, device number 94 [ 3165.779325][T11294] mkiss: ax0: crc mode is auto. [ 3166.732866][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 3166.732883][ T30] audit: type=1326 audit(3166.645:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3166.776462][ T30] audit: type=1326 audit(3166.655:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3166.802059][ T30] audit: type=1326 audit(3166.685:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3166.825362][ T30] audit: type=1326 audit(3166.685:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3166.848666][ T30] audit: type=1326 audit(3166.685:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3166.872759][ T30] audit: type=1326 audit(3166.725:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f78de18d41f code=0x7ffc0000 [ 3166.902150][ T30] audit: type=1326 audit(3166.725:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3167.133572][ T30] audit: type=1326 audit(3166.725:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3167.159433][ T30] audit: type=1326 audit(3166.725:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3167.359950][T11312] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3167.863172][ T30] audit: type=1326 audit(3166.745:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11297 comm="syz.8.11325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78de18e969 code=0x7ffc0000 [ 3168.143528][T13400] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 3169.259534][T13400] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3169.268594][T13400] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3169.279943][T13400] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3169.289329][T13400] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3169.402609][T13400] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3169.418415][T13400] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3169.452878][T13400] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3169.519487][T13400] usb 9-1: Product: syz [ 3169.525668][T13400] usb 9-1: Manufacturer: syz [ 3169.536499][T13400] cdc_wdm 9-1:1.0: skipping garbage [ 3169.541735][T13400] cdc_wdm 9-1:1.0: skipping garbage [ 3170.392019][T13400] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 3170.399448][T13400] cdc_wdm 9-1:1.0: Unknown control protocol [ 3170.518822][T13400] usb 9-1: USB disconnect, device number 111 [ 3171.854763][ T24] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 3171.984270][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11339'. [ 3172.038106][ T24] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3172.544294][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3172.552867][ T24] usb 9-1: Product: syz [ 3172.562568][ T24] usb 9-1: Manufacturer: syz [ 3172.581317][ T24] usb 9-1: SerialNumber: syz [ 3172.589572][ T24] usb 9-1: config 0 descriptor?? [ 3172.612499][ T24] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3172.808756][T11375] siw: device registration error -23 [ 3173.191723][ T24] gspca_sunplus: reg_r err -110 [ 3173.777552][T11383] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3174.683736][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3175.986342][ T9146] usb 9-1: USB disconnect, device number 112 [ 3176.167220][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 3176.217646][ T24] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 3176.449108][T11399] affs: No valid root block on device nullb0 [ 3176.591282][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3176.637825][ T24] usb 5-1: config 0 descriptor?? [ 3176.680642][ T24] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state [ 3176.721509][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11354'. [ 3176.723817][ T24] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3177.758750][ T24] dvb_usb_anysee 5-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 3177.777442][T11409] netlink: 'syz.0.11355': attribute type 10 has an invalid length. [ 3179.032165][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 3179.032185][ T30] audit: type=1400 audit(3178.545:2767): avc: granted { setsecparam } for pid=11417 comm="syz.2.11358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3179.057886][ T24] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 3179.303822][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 3179.313932][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3179.330652][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3179.353847][ T24] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3179.367146][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 3179.414836][T11434] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.11363'. [ 3179.748404][T11435] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 3179.802497][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 3179.819298][T11433] SELinux: failed to load policy [ 3179.899360][ T24] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3179.923339][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11365'. [ 3179.925697][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3179.969488][ T24] usb 9-1: Product: syz [ 3179.979055][ T24] usb 9-1: Manufacturer: syz [ 3180.183433][ T24] usb 9-1: SerialNumber: syz [ 3180.191234][ T24] usb 9-1: config 0 descriptor?? [ 3180.201540][T11419] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3180.227458][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input155 [ 3180.456006][ T5171] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3180.728731][T11449] siw: device registration error -23 [ 3180.759672][T17026] usb 5-1: USB disconnect, device number 13 [ 3180.762619][ T24] usb 9-1: USB disconnect, device number 113 [ 3185.924052][T25445] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 3185.979483][T11484] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 3186.180327][T11491] netlink: 212356 bytes leftover after parsing attributes in process `syz.7.11381'. [ 3186.515842][T25445] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3186.544303][T25445] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3186.588374][T25445] usb 9-1: Product: syz [ 3186.592581][T25445] usb 9-1: Manufacturer: syz [ 3186.622871][T25445] usb 9-1: SerialNumber: syz [ 3187.005014][T25445] usb 9-1: config 0 descriptor?? [ 3187.209970][T25445] usb-storage 9-1:0.0: USB Mass Storage device detected [ 3187.770560][T11509] mkiss: ax0: crc mode is auto. [ 3188.045599][T25445] usb 9-1: USB disconnect, device number 114 [ 3188.273761][T11501] netlink: 'syz.0.11383': attribute type 21 has an invalid length. [ 3188.296722][T11501] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11383'. [ 3188.328583][T11501] netlink: 'syz.0.11383': attribute type 6 has an invalid length. [ 3188.344517][T11501] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11383'. [ 3188.590571][ T5921] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3189.034302][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 3189.062694][ T5921] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 3189.089519][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3189.127273][ T5921] usb 3-1: config 0 descriptor?? [ 3189.148540][ T5921] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state [ 3189.176525][ T5921] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 3189.208253][ T5921] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 3189.463283][T11529] lo speed is unknown, defaulting to 1000 [ 3192.947364][ T5827] usb 3-1: USB disconnect, device number 39 [ 3195.774729][T11584] mkiss: ax0: crc mode is auto. [ 3199.275632][T11598] lo speed is unknown, defaulting to 1000 [ 3199.679164][T11611] input: syz1 as /devices/virtual/input/input156 [ 3204.743465][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.750045][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3206.191431][T11654] netlink: 'syz.2.11422': attribute type 4 has an invalid length. [ 3206.499172][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11422'. [ 3208.551355][T11676] syz_tun: entered allmulticast mode [ 3208.650604][T11677] tmpfs: Unknown parameter '/' [ 3211.443600][T11704] siw: device registration error -23 [ 3211.486886][T11710] netlink: 'syz.0.11438': attribute type 4 has an invalid length. [ 3211.583541][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11438'. [ 3212.888739][T11719] affs: No valid root block on device nullb0 [ 3213.168370][T11729] tmpfs: Unknown parameter '/' [ 3213.983774][ T5827] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 3214.159823][T11735] input: syz0 as /devices/virtual/input/input157 [ 3214.160064][ T5827] usb 8-1: Using ep0 maxpacket: 32 [ 3214.206154][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3214.243555][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3214.269894][ T5827] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3215.290394][T11738] netlink: 'syz.0.11451': attribute type 1 has an invalid length. [ 3215.374785][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 3215.387056][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 3215.408862][ T5827] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3215.418981][ T5827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3215.438875][ T5827] usb 8-1: Product: syz [ 3215.444760][T11738] bond1 (unregistering): Released all slaves [ 3215.475613][ T5827] usb 8-1: Manufacturer: syz [ 3215.522301][ T5827] usb 8-1: SerialNumber: syz [ 3215.529808][ T5827] usb 8-1: config 0 descriptor?? [ 3215.536044][T11727] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 3215.581187][ T5827] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input158 [ 3215.619055][ T5171] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3215.634304][ T5171] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3215.650959][ T5171] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3215.665017][ T5171] xpad 8-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3216.416727][T17026] usb 8-1: USB disconnect, device number 95 [ 3216.445858][ T6476] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3216.964736][ T6476] usb 5-1: Using ep0 maxpacket: 32 [ 3216.993216][ T6476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3217.050735][ T6476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3217.328334][T11756] SELinux: failed to load policy [ 3217.353211][ T6476] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3217.425942][T11759] netlink: 212356 bytes leftover after parsing attributes in process `syz.7.11457'. [ 3217.721214][ T6476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 3217.722337][T11759] lo speed is unknown, defaulting to 1000 [ 3217.740161][ T6476] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 3217.765766][ T6476] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3217.777700][ T6476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3217.785774][ T6476] usb 5-1: Product: syz [ 3217.789912][ T6476] usb 5-1: Manufacturer: syz [ 3217.797835][ T6476] usb 5-1: SerialNumber: syz [ 3217.804592][ T6476] usb 5-1: config 0 descriptor?? [ 3217.810305][T11746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3217.823236][ T6476] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input159 [ 3217.911111][ T5171] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3217.966827][ T5171] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3218.627292][ T5171] xpad 5-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3218.713279][ T6476] usb 5-1: USB disconnect, device number 14 [ 3221.616197][T11781] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11463'. [ 3221.676384][T11781] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11463'. [ 3221.708855][T11781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11463'. [ 3221.774032][T11781] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11463'. [ 3222.591244][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11468'. [ 3223.167561][T11799] SELinux: failed to load policy [ 3223.368709][T11804] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11471'. [ 3223.588036][T11808] syz!: rxe_newlink: already configured on team_slave_0 [ 3224.667134][T11820] netlink: 'syz.7.11475': attribute type 15 has an invalid length. [ 3224.705909][T11820] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11475'. [ 3225.854784][ T5827] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 3227.172691][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11480'. [ 3227.414423][ T5827] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 3227.424978][ T5827] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3227.518275][ T9146] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 3227.891948][ T5827] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3227.939670][ T5827] usb 8-1: config 0 interface 0 has no altsetting 0 [ 3227.950876][ T5827] usb 8-1: unable to read config index 1 descriptor/start: -71 [ 3227.977181][ T5827] usb 8-1: can't read configurations, error -71 [ 3228.160173][ T9146] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3228.177358][ T9146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3228.250651][ T9146] usb 9-1: Product: syz [ 3228.298054][ T9146] usb 9-1: Manufacturer: syz [ 3228.337706][ T9146] usb 9-1: SerialNumber: syz [ 3228.551590][ T9146] usb 9-1: config 0 descriptor?? [ 3228.770471][ T9146] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3230.683754][ T9146] gspca_sunplus: reg_r err -110 [ 3232.064009][ T5921] usb 9-1: USB disconnect, device number 115 [ 3232.096830][T11863] input: syz0 as /devices/virtual/input/input160 [ 3233.570760][T11887] affs: No valid root block on device nullb0 [ 3235.579372][T25445] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3235.701008][T11915] tmpfs: Bad value for 'mpol' [ 3235.761864][T25445] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 3236.520884][T25445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3236.630105][T11918] netlink: 'syz.7.11505': attribute type 3 has an invalid length. [ 3236.652863][T25445] usb 5-1: Product: syz [ 3236.678636][T25445] usb 5-1: Manufacturer: syz [ 3236.683291][T25445] usb 5-1: SerialNumber: syz [ 3236.753277][T25445] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 3236.797354][T11922] vivid-000: disconnect [ 3237.498278][ T6476] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 3237.548454][T11923] netlink: 892 bytes leftover after parsing attributes in process `syz.2.11506'. [ 3237.853356][T11919] vivid-000: reconnect [ 3238.474662][ T5827] usb 5-1: USB disconnect, device number 15 [ 3239.054186][ T6476] usb 5-1: Service connection timeout for: 256 [ 3239.060369][ T6476] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 3239.068467][T25445] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3239.150749][ T6476] ath9k_htc: Failed to initialize the device [ 3239.187475][ T5827] usb 5-1: ath9k_htc: USB layer deinitialized [ 3239.302866][T25445] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3239.408803][T25445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3239.501649][T25445] usb 3-1: Product: syz [ 3239.561133][T25445] usb 3-1: Manufacturer: syz [ 3239.625858][T25445] usb 3-1: SerialNumber: syz [ 3239.815745][T25445] usb 3-1: config 0 descriptor?? [ 3240.102262][T25445] usb-storage 3-1:0.0: USB Mass Storage device detected [ 3241.987205][ T5921] usb 3-1: USB disconnect, device number 40 [ 3242.320945][T11954] netlink: 892 bytes leftover after parsing attributes in process `syz.2.11519'. [ 3242.327251][T11948] lo speed is unknown, defaulting to 1000 [ 3242.425318][T11956] netlink: 212356 bytes leftover after parsing attributes in process `syz.8.11518'. [ 3242.683839][T11956] lo speed is unknown, defaulting to 1000 [ 3245.873734][ T6476] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 3246.192273][T12000] input: syz0 as /devices/virtual/input/input161 [ 3246.394444][ T5921] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3246.563870][ T6476] usb 8-1: Using ep0 maxpacket: 8 [ 3246.618342][ T6476] usb 8-1: config 7 has an invalid interface number: 43 but max is 1 [ 3246.633003][ T6476] usb 8-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 3246.660959][ T6476] usb 8-1: config 7 has an invalid interface number: 141 but max is 1 [ 3246.692174][ T6476] usb 8-1: config 7 has an invalid descriptor of length 142, skipping remainder of the config [ 3246.722532][ T6476] usb 8-1: config 7 has no interface number 0 [ 3246.911974][ T6476] usb 8-1: config 7 has no interface number 1 [ 3246.926252][ T6476] usb 8-1: config 7 interface 43 altsetting 7 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 3246.965211][ T5921] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3246.974948][ T6476] usb 8-1: config 7 interface 43 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 3247.004333][ T6476] usb 8-1: config 7 interface 43 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 3247.023757][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.023769][ T6476] usb 8-1: config 7 interface 43 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 3247.063811][ T6476] usb 8-1: config 7 interface 43 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 3247.084441][ T6476] usb 8-1: config 7 interface 43 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 3247.116388][ T6476] usb 8-1: config 7 interface 43 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 3247.164850][ T6476] usb 8-1: config 7 interface 43 altsetting 7 endpoint 0x5 has invalid maxpacket 528, setting to 64 [ 3247.207487][ T5921] usb 5-1: Product: syz [ 3247.212371][ T5921] usb 5-1: Manufacturer: syz [ 3247.221318][ T5921] usb 5-1: SerialNumber: syz [ 3247.242493][ T5921] usb 5-1: config 0 descriptor?? [ 3247.251371][ T5921] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3247.267809][ T6476] usb 8-1: config 7 interface 43 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 3247.294525][ T6476] usb 8-1: config 7 interface 141 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3247.405598][T12012] syz.0.11531: attempt to access beyond end of device [ 3247.405598][T12012] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3247.419166][T12012] FAT-fs (loop1): unable to read boot sector [ 3247.791451][ T5921] gspca_sunplus: reg_r err -110 [ 3247.821229][ T6476] usb 8-1: config 7 interface 43 has no altsetting 0 [ 3247.828063][ T6476] usb 8-1: config 7 interface 141 has no altsetting 0 [ 3247.837326][ T6476] usb 8-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice=e7.29 [ 3247.863736][ T6476] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3247.872002][ T6476] usb 8-1: Product: Ѓ [ 3247.883711][ T6476] usb 8-1: Manufacturer: з [ 3247.888274][ T6476] usb 8-1: SerialNumber: Ё [ 3247.917753][T12015] netlink: 'syz.2.11532': attribute type 4 has an invalid length. [ 3247.947948][T11981] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 3247.963422][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11532'. [ 3248.194665][ T6476] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 3248.214454][T12017] SELinux: failed to load policy [ 3248.245798][ T6476] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3248.271846][ T6476] dib0700: firmware download failed at 7 with -22 [ 3249.266804][ T5921] usb 5-1: USB disconnect, device number 16 [ 3249.286961][ T6476] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 3249.345343][ T6476] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3249.388289][ T6476] dib0700: firmware download failed at 7 with -22 [ 3249.438637][ T6476] usb 8-1: USB disconnect, device number 98 [ 3249.639016][T12032] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3249.923910][ T5921] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3250.293755][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 3250.321609][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3250.346845][ T5921] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3250.423575][ T5921] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3250.461515][ T5921] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 3250.504300][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3250.715910][ T5921] usb 5-1: Product: syz [ 3250.725709][ T5921] usb 5-1: Manufacturer: syz [ 3250.732466][ T5921] usb 5-1: SerialNumber: syz [ 3250.742154][ T5921] usb 5-1: config 0 descriptor?? [ 3250.755199][ T5921] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 3251.169380][ T5921] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 3251.177546][ T5921] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 3251.188132][ T5921] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 3251.315034][ T5921] usb 5-1: USB disconnect, device number 17 [ 3252.639705][T12062] lo speed is unknown, defaulting to 1000 [ 3253.401161][T12070] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 3253.413080][T12070] SELinux: failed to load policy [ 3254.783975][ T8881] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3255.397116][ T8881] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 3255.526623][ T8881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3255.536434][ T8881] usb 3-1: Product: syz [ 3255.540670][ T8881] usb 3-1: Manufacturer: syz [ 3255.549310][ T8881] usb 3-1: SerialNumber: syz [ 3255.570567][ T8881] usb 3-1: config 0 descriptor?? [ 3255.578914][ T8881] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 3256.527418][ T8881] gspca_sunplus: reg_r err -110 [ 3256.782206][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11559'. [ 3256.936662][ T30] audit: type=1400 audit(3256.855:2768): avc: granted { setsecparam } for pid=12106 comm="syz.7.11557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3257.889906][ T5921] usb 3-1: USB disconnect, device number 41 [ 3258.499051][T12119] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 3258.509934][T12119] SELinux: failed to load policy [ 3261.590006][T12153] block device autoloading is deprecated and will be removed. [ 3261.601460][T12153] syz.4.11567: attempt to access beyond end of device [ 3261.601460][T12153] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3261.614862][T12153] FAT-fs (loop9): unable to read boot sector [ 3262.644167][ T5921] usb 9-1: new high-speed USB device number 116 using dummy_hcd [ 3263.335894][ T5921] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3264.197215][T12165] tmpfs: Bad value for 'mpol' [ 3264.771661][ T5921] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3264.813791][ T5921] usb 9-1: Product: syz [ 3264.818141][ T5921] usb 9-1: Manufacturer: syz [ 3264.822899][ T5921] usb 9-1: SerialNumber: syz [ 3264.845845][ T5921] usb 9-1: config 0 descriptor?? [ 3265.107245][T12169] SELinux: failed to load policy [ 3266.168690][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.175356][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.748579][ T5921] usb-storage 9-1:0.0: USB Mass Storage device detected [ 3267.899881][ T5921] usb 9-1: USB disconnect, device number 116 [ 3268.328772][T12206] lo speed is unknown, defaulting to 1000 [ 3268.698267][ T30] audit: type=1400 audit(3268.585:2769): avc: granted { setsecparam } for pid=12211 comm="syz.8.11586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 3270.378517][T12225] input: syz0 as /devices/virtual/input/input162 [ 3270.572458][T12226] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3273.591901][T12249] lo speed is unknown, defaulting to 1000 [ 3274.298037][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11599'. [ 3279.776291][T12303] vivid-000: disconnect [ 3280.696543][T12298] vivid-000: reconnect [ 3284.650356][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11617'. [ 3285.126619][T12337] SELinux: failed to load policy [ 3285.193900][T13400] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 3285.236370][T12347] tmpfs: Unknown parameter '/' [ 3286.423589][T13400] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 3286.989128][T13400] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3287.013481][T13400] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3287.033354][T13400] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3287.041550][T13400] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3287.092377][T13400] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3287.118503][T13400] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3287.184839][T13400] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3287.223537][T13400] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3287.244329][T13400] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3287.254428][T13400] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3287.414688][T13400] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3287.625126][T13400] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3287.915844][T12371] lo speed is unknown, defaulting to 1000 [ 3288.111272][T13400] usb 9-1: unable to read config index 4 descriptor/start: -71 [ 3288.154040][T13400] usb 9-1: can't read configurations, error -71 [ 3288.188110][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11629'. [ 3288.763535][T12384] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 3290.519424][T12404] netlink: 224 bytes leftover after parsing attributes in process `syz.8.11637'. [ 3290.628361][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11638'. [ 3292.680842][T12429] autofs: Unknown parameter './file1' [ 3294.113892][T12440] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.11646'. [ 3294.551984][T12441] netlink: 'syz.0.11645': attribute type 21 has an invalid length. [ 3294.560022][T12441] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11645'. [ 3294.569744][T12441] netlink: 'syz.0.11645': attribute type 6 has an invalid length. [ 3294.577675][T12441] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11645'. [ 3295.173005][T12440] lo speed is unknown, defaulting to 1000 [ 3297.405126][T12467] syz!: rxe_newlink: already configured on team_slave_0 [ 3299.151703][T12479] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 3299.598801][T12484] SELinux: failed to load policy [ 3300.970190][T12500] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11662'. [ 3303.103848][T13400] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 3303.295827][T13400] usb 9-1: Using ep0 maxpacket: 32 [ 3303.366130][T13400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3303.444320][T13400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3303.496532][T13400] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3303.573991][T13400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 3303.648492][T13400] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 3303.841800][T13400] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3303.892089][T13400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3303.953093][T13400] usb 9-1: Product: syz [ 3303.986135][T13400] usb 9-1: Manufacturer: syz [ 3304.010406][T13400] usb 9-1: SerialNumber: syz [ 3304.541135][T13400] usb 9-1: config 0 descriptor?? [ 3304.659614][T12513] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3304.986074][T13400] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input163 [ 3305.411881][ T5171] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3305.447869][ T5171] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3305.607841][T12528] syz.7.11668: attempt to access beyond end of device [ 3305.607841][T12528] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3305.621534][T12528] FAT-fs (loop15): unable to read boot sector [ 3306.958900][T13400] usb 9-1: USB disconnect, device number 119 [ 3308.217402][T12548] vivid-000: disconnect [ 3308.626380][T12554] syz!: rxe_newlink: already configured on team_slave_0 [ 3309.034523][T13400] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3309.243081][T13400] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3309.271394][T12545] vivid-000: reconnect [ 3309.297308][T13400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3309.361713][T13400] usb 5-1: Product: syz [ 3309.400370][T13400] usb 5-1: Manufacturer: syz [ 3309.435280][T13400] usb 5-1: SerialNumber: syz [ 3309.518001][T13400] usb 5-1: config 0 descriptor?? [ 3309.776976][T13400] usb-storage 5-1:0.0: USB Mass Storage device detected [ 3311.040994][T17026] usb 5-1: USB disconnect, device number 18 [ 3311.071814][T12567] netlink: 224 bytes leftover after parsing attributes in process `syz.8.11681'. [ 3312.315606][T12587] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3312.778624][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11687'. [ 3316.938296][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11696'. [ 3317.306683][T17026] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 3317.415507][T12626] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3317.885094][T17026] usb 8-1: Using ep0 maxpacket: 32 [ 3317.908366][T17026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3317.938949][T17026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3317.969915][T17026] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3318.002270][T17026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 3318.009082][T12634] lo speed is unknown, defaulting to 1000 [ 3318.078003][T17026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 3318.099889][T17026] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3318.109326][T17026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3318.555706][T17026] usb 8-1: Product: syz [ 3318.559959][T17026] usb 8-1: Manufacturer: syz [ 3318.569920][T12640] netlink: 'syz.2.11705': attribute type 1 has an invalid length. [ 3318.684490][ T8881] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3318.937762][ T8881] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3319.020730][ T8881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3319.127016][ T8881] usb 5-1: Product: syz [ 3319.179669][ T8881] usb 5-1: Manufacturer: syz [ 3319.231642][ T8881] usb 5-1: SerialNumber: syz [ 3319.403725][ T8881] usb 5-1: config 0 descriptor?? [ 3319.814271][ T8881] usb-storage 5-1:0.0: USB Mass Storage device detected [ 3319.882516][T12644] bond2 (unregistering): Released all slaves [ 3320.412810][T17026] usb 8-1: SerialNumber: syz [ 3320.488288][T17026] usb 8-1: config 0 descriptor?? [ 3320.494191][T13400] usb 5-1: USB disconnect, device number 19 [ 3320.515724][T17026] usb 8-1: can't set config #0, error -71 [ 3320.525874][T17026] usb 8-1: USB disconnect, device number 99 [ 3320.894414][T12648] SELinux: failed to load policy [ 3325.175300][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11710'. [ 3325.202800][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11710'. [ 3325.212345][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11710'. [ 3325.360503][T12671] netlink: 224 bytes leftover after parsing attributes in process `syz.7.11711'. [ 3325.782000][T12681] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3326.332713][T12685] netlink: 'syz.2.11717': attribute type 1 has an invalid length. [ 3326.770292][T12685] bond2 (unregistering): Released all slaves [ 3327.608517][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.615006][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.810136][T12694] lo speed is unknown, defaulting to 1000 [ 3327.978240][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11722'. [ 3331.035825][T12728] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3333.875715][T12740] netlink: 'syz.7.11732': attribute type 1 has an invalid length. [ 3334.922754][T12753] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 3335.132322][T12753] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 3335.289838][T12753] bond1 (unregistering): Released all slaves [ 3335.777069][T12773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11738'. [ 3335.917091][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11740'. [ 3336.624079][T12787] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 3337.504601][T12796] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3338.811628][T12807] tmpfs: Unknown parameter '/' [ 3339.764722][T12809] lo speed is unknown, defaulting to 1000 [ 3339.768167][T12817] netlink: 'syz.7.11752': attribute type 1 has an invalid length. [ 3339.925824][T12817] bond1 (unregistering): Released all slaves [ 3342.913248][T12849] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3343.018222][T12851] tmpfs: Unknown parameter '/' [ 3344.423330][T12859] misc userio: No port type given on /dev/userio [ 3345.901831][T12864] lo speed is unknown, defaulting to 1000 [ 3348.143847][ T5924] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3348.364892][ T5924] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3348.434209][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.524860][ T5924] usb 3-1: Product: syz [ 3348.563343][ T5924] usb 3-1: Manufacturer: syz [ 3349.227608][ T5924] usb 3-1: SerialNumber: syz [ 3349.290237][ T5924] usb 3-1: config 0 descriptor?? [ 3349.996168][ T5924] usb-storage 3-1:0.0: USB Mass Storage device detected [ 3350.553767][T12243] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3350.657660][ T5924] usb 3-1: USB disconnect, device number 42 [ 3350.764969][T12899] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.11774'. [ 3351.056657][T12243] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 3351.097799][T12243] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3351.115424][T12243] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3351.143580][T12243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3351.165184][T12243] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3351.175313][T12243] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3351.212818][T12243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3351.348983][T12243] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3351.368567][T12243] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3351.378746][T12899] lo speed is unknown, defaulting to 1000 [ 3351.393898][T12243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3351.863220][T12243] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3351.879113][T12243] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3351.897529][T12243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3351.916363][T12243] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3351.933139][T12243] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3352.042882][T12243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3352.139674][T12243] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3352.299266][T12243] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3352.504256][T12243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3352.519766][T12243] usb 5-1: unable to read config index 6 descriptor/start: -71 [ 3352.530446][T12243] usb 5-1: can't read configurations, error -71 [ 3353.790616][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11782'. [ 3354.336855][ T5000] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3354.693948][ T5261] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3355.360271][T12010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3355.394174][T12010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3355.426418][T12010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3355.450075][T12010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3355.457988][T12010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3355.569078][ T5261] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3355.596143][ T5000] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3356.386247][ T5261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3356.394747][ T5261] usb 5-1: Product: syz [ 3356.399702][ T5261] usb 5-1: Manufacturer: syz [ 3356.408663][ T5261] usb 5-1: SerialNumber: syz [ 3356.418233][ T5261] usb 5-1: config 0 descriptor?? [ 3356.520657][ T5000] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3356.582710][T12932] lo speed is unknown, defaulting to 1000 [ 3356.829118][ T5261] usb-storage 5-1:0.0: USB Mass Storage device detected [ 3356.840508][ T5000] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3356.934074][ T9146] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3357.021063][ T5261] usb 5-1: USB disconnect, device number 22 [ 3357.104519][ T9146] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 3357.135522][ T9146] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3357.188223][ T9146] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3357.208101][ T9146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3357.244453][ T9146] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3357.274221][ T9146] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3357.327520][ T9146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3357.356879][ T9146] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3357.593387][T10001] Bluetooth: hci0: command tx timeout [ 3357.773045][ T9146] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3357.826995][ T9146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3357.852960][ T9146] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3357.870597][ T9146] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3357.897017][ T9146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3357.909800][ T9146] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3357.933042][ T9146] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3357.951465][ T9146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3358.187972][ T9146] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3358.489534][ T9146] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3358.575252][ T9146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3359.002114][ T9146] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3359.553282][ T9146] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3359.614651][T10001] Bluetooth: hci0: command tx timeout [ 3359.654080][ T9146] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3361.683740][T10001] Bluetooth: hci0: command tx timeout [ 3362.488906][ T9146] usb 3-1: unable to read config index 7 descriptor/start: -71 [ 3362.501934][ T9146] usb 3-1: can't read configurations, error -71 [ 3363.720819][T12984] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.11801'. [ 3363.765422][T10001] Bluetooth: hci0: command tx timeout [ 3364.943379][ T5000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3364.959185][ T5000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3364.971877][ T5000] bond0 (unregistering): Released all slaves [ 3365.001152][T12957] lo speed is unknown, defaulting to 1000 [ 3365.676390][T12984] lo speed is unknown, defaulting to 1000 [ 3367.574192][T12243] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3367.753562][T12243] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 3367.762352][T12243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3367.790965][T12243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3367.811954][T12243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3367.825805][T12243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3367.843735][T12243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3367.863235][T12243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3367.924561][T12243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3367.933958][T12243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3367.946470][T12243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3367.969660][T12243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3368.001794][T12243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3368.015218][T12243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3368.166122][T12243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3368.187258][T12243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3368.206919][T12243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3368.221604][T12243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3368.256847][T12243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3368.274445][T12243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3368.288787][T12243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3368.313636][T12243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3368.362235][T12243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3368.385684][T12243] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3368.397466][T12243] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3368.418462][T12243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3368.427956][T12932] chnl_net:caif_netlink_parms(): no params data found [ 3368.436559][T12243] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3368.454174][T12243] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3368.462669][T12243] usb 3-1: Product: syz [ 3368.467265][T12243] usb 3-1: Manufacturer: syz [ 3368.471870][T12243] usb 3-1: SerialNumber: syz [ 3368.487256][T12243] usb 3-1: config 0 descriptor?? [ 3368.497590][T12243] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 3368.512531][ T5000] hsr_slave_0: left promiscuous mode [ 3368.528808][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3368.554064][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3368.570059][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3368.589749][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3368.714667][ T9146] usb 3-1: USB disconnect, device number 45 [ 3368.734894][ T9146] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 3368.745649][ T5000] veth1_macvtap: left promiscuous mode [ 3368.754405][ T5000] veth0_macvtap: left promiscuous mode [ 3368.760745][ T5000] veth1_vlan: left promiscuous mode [ 3368.768586][ T5000] veth0_vlan: left promiscuous mode [ 3370.065473][T12243] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 3370.223223][ T5000] team0 (unregistering): Port device team_slave_1 removed [ 3370.230890][T12243] usb 9-1: Using ep0 maxpacket: 32 [ 3370.238559][T12243] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3370.268394][T12243] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3370.278491][T12243] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3370.305000][T12243] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 3370.335512][T12243] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 3370.370559][T12243] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3370.372564][ T5000] team0 (unregistering): Port device team_slave_0 removed [ 3370.382673][T12243] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3370.396156][T12243] usb 9-1: Product: syz [ 3370.400422][T12243] usb 9-1: Manufacturer: syz [ 3370.410971][T12243] usb 9-1: SerialNumber: syz [ 3370.428321][T12243] usb 9-1: config 0 descriptor?? [ 3370.438937][T13023] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 3370.482254][T12243] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input166 [ 3370.504129][ T5171] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3370.517715][ C0] xpad 9-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 3370.529391][ T5171] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3370.568537][ T5171] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3370.598202][ T5171] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3370.718066][T13023] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 3370.739705][T12243] usb 9-1: USB disconnect, device number 120 [ 3372.157303][T13040] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.11815'. [ 3373.031851][T13040] lo speed is unknown, defaulting to 1000 [ 3373.135789][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 3373.165721][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 3373.173045][T12932] bridge_slave_0: entered allmulticast mode [ 3373.424695][T12932] bridge_slave_0: entered promiscuous mode [ 3373.566726][T13050] SELinux: failed to load policy [ 3373.581134][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 3373.588732][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 3373.612499][T12932] bridge_slave_1: entered allmulticast mode [ 3373.629110][T12932] bridge_slave_1: entered promiscuous mode [ 3373.890003][T12932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3373.938408][T12932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3373.967563][T12010] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3373.979204][T12010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3373.987429][T12010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3374.018549][T12010] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3374.028842][T12010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3374.466076][T12932] team0: Port device team_slave_0 added [ 3374.558993][T12932] team0: Port device team_slave_1 added [ 3374.739877][T12932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3374.748359][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3374.775301][T12932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3374.831479][T13066] tmpfs: Unknown parameter '/' [ 3375.221110][T12932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3375.229157][T12932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3375.256661][T12932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3375.305751][T13055] lo speed is unknown, defaulting to 1000 [ 3375.543310][T12932] hsr_slave_0: entered promiscuous mode [ 3375.564778][T12932] hsr_slave_1: entered promiscuous mode [ 3375.571085][T12932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3375.589084][T12932] Cannot create hsr debugfs directory [ 3376.086322][T12010] Bluetooth: hci4: command tx timeout [ 3376.892171][T13072] 9pnet: Found fid 0 not clunked [ 3377.728655][T13087] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 3377.742690][T13087] SELinux: failed to load policy [ 3378.921745][T12010] Bluetooth: hci4: command tx timeout [ 3379.162061][ T5924] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3380.401668][ T5924] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 3380.411103][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3380.549917][T13055] chnl_net:caif_netlink_parms(): no params data found [ 3380.562857][ T5924] usb 3-1: Product: syz [ 3380.570362][ T5924] usb 3-1: Manufacturer: syz [ 3380.660928][ T5924] usb 3-1: SerialNumber: syz [ 3380.829807][ T5924] usb 3-1: config 0 descriptor?? [ 3380.915900][ T5924] usb-storage 3-1:0.0: USB Mass Storage device detected [ 3380.974487][T12010] Bluetooth: hci4: command tx timeout [ 3381.977772][ T5924] usb 3-1: USB disconnect, device number 46 [ 3382.129553][T13055] bridge0: port 1(bridge_slave_0) entered blocking state [ 3382.154800][T13055] bridge0: port 1(bridge_slave_0) entered disabled state [ 3382.216750][T13055] bridge_slave_0: entered allmulticast mode [ 3382.264421][T13055] bridge_slave_0: entered promiscuous mode [ 3382.334308][T12932] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3382.461585][T13055] bridge0: port 2(bridge_slave_1) entered blocking state [ 3382.500028][T13055] bridge0: port 2(bridge_slave_1) entered disabled state [ 3382.555587][T13055] bridge_slave_1: entered allmulticast mode [ 3383.044171][T12010] Bluetooth: hci4: command tx timeout [ 3383.217276][T13126] SELinux: failed to load policy [ 3383.256788][T13055] bridge_slave_1: entered promiscuous mode [ 3383.314194][T12932] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3383.335477][T12932] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3383.480665][T12932] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3383.652407][T13055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3383.818710][T13055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3384.225636][T13137] netlink: 212392 bytes leftover after parsing attributes in process `syz.8.11840'. [ 3384.585476][T13055] team0: Port device team_slave_0 added [ 3384.666989][T13055] team0: Port device team_slave_1 added [ 3384.768843][T13137] lo speed is unknown, defaulting to 1000 [ 3384.804540][T13055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3384.811629][T13055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3384.846161][T13055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3384.925085][T13055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3384.932116][T13055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3384.962281][T13055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3385.033365][T13145] tmpfs: Unknown parameter '/' [ 3385.569766][T13055] hsr_slave_0: entered promiscuous mode [ 3385.579580][T13055] hsr_slave_1: entered promiscuous mode [ 3385.592433][T13055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3385.613710][T13055] Cannot create hsr debugfs directory [ 3385.829557][T13150] netlink: 'syz.0.11843': attribute type 3 has an invalid length. [ 3386.301658][T13155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11845'. [ 3389.058927][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.065474][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.937587][T12932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3390.090096][T12932] 8021q: adding VLAN 0 to HW filter on device team0 [ 3390.105366][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 3390.112524][ T5000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3390.137977][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11848'. [ 3390.171864][T13055] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3390.201512][T13055] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3390.241080][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 3390.248254][ T5000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3390.284635][T13055] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3390.327229][T13055] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3391.138855][T13055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3391.257578][T13055] 8021q: adding VLAN 0 to HW filter on device team0 [ 3391.421499][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 3391.428951][ T6425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3391.633013][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 3391.640220][ T6425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3394.885577][T13195] lo speed is unknown, defaulting to 1000 [ 3395.496986][T13055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3395.541340][T13055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3395.652372][T12932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3395.945161][T13213] lo speed is unknown, defaulting to 1000 [ 3396.262856][T13055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3397.690855][T13226] lo speed is unknown, defaulting to 1000 [ 3398.191822][T12932] veth0_vlan: entered promiscuous mode [ 3398.488332][T12932] veth1_vlan: entered promiscuous mode [ 3398.897968][T12932] veth0_macvtap: entered promiscuous mode [ 3398.908585][T12932] veth1_macvtap: entered promiscuous mode [ 3398.936528][T12932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3398.962006][T12932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3398.963955][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11865'. [ 3398.981761][T12932] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3398.992033][T12932] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.002685][T12932] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.011824][T12932] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.454034][T17712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3399.482796][T17712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3399.619896][T17712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3399.642860][T17712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3399.662390][T13055] veth0_vlan: entered promiscuous mode [ 3400.066706][T13055] veth1_vlan: entered promiscuous mode [ 3401.100237][T13055] veth0_macvtap: entered promiscuous mode [ 3401.244488][T13055] veth1_macvtap: entered promiscuous mode [ 3402.168721][T13055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3402.243354][T13055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3402.260524][T13055] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.270322][T13055] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.290726][T13055] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.372720][T13055] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.617620][ T5163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3402.641719][ T5163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3402.703392][T17712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3402.834254][T17712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3402.997019][T13263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3405.019611][ T5000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3405.032749][ T8881] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 3405.116575][T13297] netlink: 'syz.2.11878': attribute type 4 has an invalid length. [ 3405.129248][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11878'. [ 3405.235730][ T5000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3405.248766][ T8881] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 3405.259906][ T8881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3405.276875][ T8881] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3405.288473][ T8881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3405.301246][ T8881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3405.311656][ T8881] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3405.323574][ T8881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3405.359920][ T8881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3405.371105][ T8881] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3405.385121][ T8881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3405.396403][ T5000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3405.412529][ T8881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3405.422143][ T8881] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3405.433919][ T8881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3405.456301][ T8881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3405.469232][ T8881] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3405.507662][ T5000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3405.520740][ T8881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3405.531725][ T8881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3405.541278][ T8881] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3405.557280][ T8881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3405.586633][ T8881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3405.595820][ T8881] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3406.759064][ T8881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3406.767237][ T8881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3406.779862][ T8881] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3406.790956][ T8881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3406.799982][ T8881] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3406.810605][ T8881] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3406.819089][ T8881] usb 9-1: Product: syz [ 3406.823372][ T8881] usb 9-1: Manufacturer: syz [ 3406.828053][ T8881] usb 9-1: SerialNumber: syz [ 3406.836065][ T8881] usb 9-1: config 0 descriptor?? [ 3406.849276][ T8881] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 3406.968378][ T8881] usb 9-1: USB disconnect, device number 121 [ 3407.217788][ T8881] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 3409.383827][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11887'. [ 3409.634751][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11888'. [ 3410.692035][ T5000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3410.703402][ T5000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3410.714819][ T5000] bond0 (unregistering): Released all slaves [ 3411.609102][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11892'. [ 3411.766723][T13350] netlink: 'syz.0.11892': attribute type 4 has an invalid length. [ 3413.044233][T12243] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 3413.746375][T12243] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 3413.760533][T12243] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3413.770528][T12243] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3413.806343][T12243] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3414.666618][T12243] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3414.734638][T12243] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3414.822952][ T5000] hsr_slave_0: left promiscuous mode [ 3414.824850][T12243] usb 9-1: config 0 interface 0 has no altsetting 0 [ 3414.882629][T12243] usb 9-1: unable to read config index 2 descriptor/start: -71 [ 3414.895970][T12243] usb 9-1: can't read configurations, error -71 [ 3415.117110][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3415.126563][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3415.142412][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3415.152940][ T5000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3415.522401][ T5000] veth1_macvtap: left promiscuous mode [ 3415.528296][ T5000] veth0_macvtap: left promiscuous mode [ 3415.535162][ T5000] veth1_vlan: left promiscuous mode [ 3415.540705][ T5000] veth0_vlan: left promiscuous mode [ 3416.757476][T12010] Bluetooth: hci4: command 0x0405 tx timeout [ 3416.951014][T13415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3417.171020][T12243] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 3417.362218][T12243] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 3417.412983][T12243] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3417.446053][T12243] usb 9-1: config 0 descriptor?? [ 3417.465341][T12243] gspca_main: spca508-2.14.0 probing 8086:0110 [ 3417.705207][ T5000] team0 (unregistering): Port device team_slave_1 removed [ 3417.802254][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11909'. [ 3417.819558][ T5000] team0 (unregistering): Port device team_slave_0 removed [ 3418.000411][T12243] gspca_spca508: reg_read err -110 [ 3418.010698][T12243] gspca_spca508: reg_read err -32 [ 3418.020311][T12243] gspca_spca508: reg_read err -32 [ 3418.041045][T12243] gspca_spca508: reg_read err -32 [ 3418.047658][T12243] gspca_spca508: reg_read err -32 [ 3418.053306][T12243] gspca_spca508: reg write: error -32 [ 3418.075070][T12243] spca508 9-1:0.0: probe with driver spca508 failed with error -32 [ 3418.709828][T13421] netlink: 'syz.2.11909': attribute type 4 has an invalid length. [ 3419.058640][T13405] lo speed is unknown, defaulting to 1000 [ 3419.295639][T13434] netlink: 'syz.2.11912': attribute type 21 has an invalid length. [ 3419.303642][T13434] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11912'. [ 3419.313088][T13434] netlink: 'syz.2.11912': attribute type 6 has an invalid length. [ 3419.321002][T13434] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11912'. [ 3419.429528][T13431] tmpfs: Unknown parameter '/' [ 3419.575872][T13003] usb 9-1: USB disconnect, device number 124 [ 3421.020468][T13436] lo speed is unknown, defaulting to 1000 [ 3421.030150][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11914'. [ 3422.545709][ T5924] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3423.192651][ T5924] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 3423.210982][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3423.238600][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3423.278111][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3423.289410][T13455] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 3423.322029][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3423.467765][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3423.479866][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3423.497541][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3423.534083][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3423.585623][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3423.764446][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3424.293778][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3424.317971][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3424.339066][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3424.362282][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3424.451166][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3424.473778][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3424.482955][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3424.495924][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3424.503905][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3424.522301][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3424.542537][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3424.603493][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3425.527083][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3425.568919][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3425.674771][ T5924] usb 3-1: string descriptor 0 read error: -71 [ 3425.684044][ T5924] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3425.693092][ T5924] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3425.716911][ T5924] usb 3-1: config 0 descriptor?? [ 3425.726244][ T5924] usb 3-1: can't set config #0, error -71 [ 3425.831320][ T5924] usb 3-1: USB disconnect, device number 47 [ 3426.329474][T13471] lo speed is unknown, defaulting to 1000 [ 3427.290404][T13485] netlink: 'syz.0.11925': attribute type 21 has an invalid length. [ 3427.298746][T13485] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11925'. [ 3427.308480][T13485] netlink: 'syz.0.11925': attribute type 6 has an invalid length. [ 3427.316814][T13485] netlink: 3 bytes leftover after parsing attributes in process `syz.0.11925'. [ 3430.355036][T13487] netlink: 68 bytes leftover after parsing attributes in process `syz.8.11926'. [ 3431.516988][T13498] tmpfs: Unknown parameter '/' [ 3433.192823][T13507] syz.9.11931: attempt to access beyond end of device [ 3433.192823][T13507] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3433.209133][T13507] FAT-fs (loop19): unable to read boot sector [ 3436.049531][T13528] netlink: 'syz.7.11937': attribute type 21 has an invalid length. [ 3436.057939][T13528] netlink: 128 bytes leftover after parsing attributes in process `syz.7.11937'. [ 3436.146737][T13528] netlink: 'syz.7.11937': attribute type 6 has an invalid length. [ 3436.155003][T13528] netlink: 3 bytes leftover after parsing attributes in process `syz.7.11937'. [ 3436.358447][T13536] ================================================================== [ 3436.366540][T13536] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x549/0x640 [ 3436.374189][T13536] Read of size 1 at addr ffff88807d24d430 by task syz.8.11940/13536 [ 3436.382171][T13536] [ 3436.384530][T13536] CPU: 0 UID: 0 PID: 13536 Comm: syz.8.11940 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 3436.384548][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3436.384561][T13536] Call Trace: [ 3436.384567][T13536] [ 3436.384574][T13536] dump_stack_lvl+0x116/0x1f0 [ 3436.384598][T13536] print_report+0xc3/0x670 [ 3436.384611][T13536] ? __virt_addr_valid+0x5e/0x590 [ 3436.384633][T13536] ? __phys_addr+0xc6/0x150 [ 3436.384649][T13536] ? rose_get_neigh+0x549/0x640 [ 3436.384667][T13536] kasan_report+0xe0/0x110 [ 3436.384680][T13536] ? rose_get_neigh+0x549/0x640 [ 3436.384698][T13536] rose_get_neigh+0x549/0x640 [ 3436.384715][T13536] rose_connect+0x2d4/0x1540 [ 3436.384730][T13536] ? __pfx_rose_connect+0x10/0x10 [ 3436.384742][T13536] ? selinux_netlbl_socket_connect+0x30/0x40 [ 3436.384760][T13536] ? rcu_is_watching+0x12/0xc0 [ 3436.384774][T13536] ? __local_bh_enable_ip+0xa4/0x120 [ 3436.384789][T13536] ? lockdep_hardirqs_on+0x7c/0x110 [ 3436.384804][T13536] ? selinux_netlbl_socket_connect+0x30/0x40 [ 3436.384820][T13536] ? __local_bh_enable_ip+0xa4/0x120 [ 3436.384835][T13536] ? selinux_netlbl_socket_connect+0x30/0x40 [ 3436.384851][T13536] ? selinux_socket_connect+0x6b/0x80 [ 3436.384867][T13536] ? __pfx_rose_connect+0x10/0x10 [ 3436.384879][T13536] __sys_connect_file+0x13e/0x1a0 [ 3436.384891][T13536] __sys_connect+0x14d/0x170 [ 3436.384902][T13536] ? __pfx___sys_connect+0x10/0x10 [ 3436.384915][T13536] ? rcu_is_watching+0x12/0xc0 [ 3436.384929][T13536] __x64_sys_connect+0x72/0xb0 [ 3436.384939][T13536] ? lockdep_hardirqs_on+0x7c/0x110 [ 3436.384954][T13536] do_syscall_64+0xcd/0x260 [ 3436.384971][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3436.384984][T13536] RIP: 0033:0x7f78de18e969 [ 3436.384999][T13536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3436.385010][T13536] RSP: 002b:00007f78df012038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 3436.385022][T13536] RAX: ffffffffffffffda RBX: 00007f78de3b5fa0 RCX: 00007f78de18e969 [ 3436.385031][T13536] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000006 [ 3436.385039][T13536] RBP: 00007f78de210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3436.385046][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3436.385054][T13536] R13: 0000000000000000 R14: 00007f78de3b5fa0 R15: 00007ffef31f9908 [ 3436.385066][T13536] [ 3436.385071][T13536] [ 3436.625931][T13536] Allocated by task 13373: [ 3436.630334][T13536] kasan_save_stack+0x33/0x60 [ 3436.635007][T13536] kasan_save_track+0x14/0x30 [ 3436.639688][T13536] __kasan_slab_alloc+0x89/0x90 [ 3436.644524][T13536] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 3436.650406][T13536] __alloc_skb+0x2b2/0x380 [ 3436.654812][T13536] tipc_buf_acquire+0x26/0xe0 [ 3436.659478][T13536] tipc_msg_build+0x112/0x1150 [ 3436.664232][T13536] __tipc_sendstream+0x6f9/0x1170 [ 3436.669247][T13536] tipc_send_packet+0x6c/0xa0 [ 3436.673913][T13536] ____sys_sendmsg+0xa95/0xc70 [ 3436.678669][T13536] ___sys_sendmsg+0x134/0x1d0 [ 3436.683338][T13536] __sys_sendmmsg+0x200/0x420 [ 3436.688008][T13536] __x64_sys_sendmmsg+0x9c/0x100 [ 3436.692939][T13536] do_syscall_64+0xcd/0x260 [ 3436.697437][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3436.703324][T13536] [ 3436.705633][T13536] Freed by task 13376: [ 3436.709684][T13536] kasan_save_stack+0x33/0x60 [ 3436.714785][T13536] kasan_save_track+0x14/0x30 [ 3436.719448][T13536] kasan_save_free_info+0x3b/0x60 [ 3436.724464][T13536] __kasan_slab_free+0x51/0x70 [ 3436.729214][T13536] kmem_cache_free+0x2d4/0x4d0 [ 3436.733976][T13536] kfree_skbmem+0x16c/0x1f0 [ 3436.738474][T13536] sk_skb_reason_drop+0x136/0x1a0 [ 3436.743491][T13536] __tipc_shutdown+0xaa7/0xee0 [ 3436.748243][T13536] tipc_release+0xe2/0x1640 [ 3436.752754][T13536] __sock_release+0xb0/0x270 [ 3436.757359][T13536] sock_close+0x1c/0x30 [ 3436.761516][T13536] __fput+0x402/0xb70 [ 3436.765491][T13536] task_work_run+0x150/0x240 [ 3436.770076][T13536] syscall_exit_to_user_mode+0x27b/0x2a0 [ 3436.775724][T13536] do_syscall_64+0xda/0x260 [ 3436.780243][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3436.786139][T13536] [ 3436.788454][T13536] The buggy address belongs to the object at ffff88807d24d400 [ 3436.788454][T13536] which belongs to the cache skbuff_fclone_cache of size 488 [ 3436.803457][T13536] The buggy address is located 48 bytes inside of [ 3436.803457][T13536] freed 488-byte region [ffff88807d24d400, ffff88807d24d5e8) [ 3436.817200][T13536] [ 3436.819534][T13536] The buggy address belongs to the physical page: [ 3436.825965][T13536] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d24c [ 3436.834747][T13536] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3436.843265][T13536] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3436.850803][T13536] page_type: f5(slab) [ 3436.854779][T13536] raw: 00fff00000000040 ffff888141aa8a00 dead000000000122 0000000000000000 [ 3436.863357][T13536] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 3436.871951][T13536] head: 00fff00000000040 ffff888141aa8a00 dead000000000122 0000000000000000 [ 3436.880614][T13536] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 3436.889294][T13536] head: 00fff00000000001 ffffea0001f49301 00000000ffffffff 00000000ffffffff [ 3436.897959][T13536] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 3436.906618][T13536] page dumped because: kasan: bad access detected [ 3436.913029][T13536] page_owner tracks the page as allocated [ 3436.918730][T13536] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13373, tgid 13368 (syz.0.11898), ts 3413656049310, free_ts 3395780464997 [ 3436.940542][T13536] post_alloc_hook+0x181/0x1b0 [ 3436.945327][T13536] get_page_from_freelist+0x135c/0x3920 [ 3436.950870][T13536] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 3436.956755][T13536] alloc_pages_mpol+0x1fb/0x550 [ 3436.961601][T13536] new_slab+0x244/0x340 [ 3436.965789][T13536] ___slab_alloc+0xd9c/0x1940 [ 3436.970496][T13536] __slab_alloc.constprop.0+0x56/0xb0 [ 3436.975878][T13536] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 3436.981681][T13536] __alloc_skb+0x2b2/0x380 [ 3436.986090][T13536] tipc_buf_acquire+0x26/0xe0 [ 3436.990764][T13536] tipc_msg_build+0x112/0x1150 [ 3436.995526][T13536] __tipc_sendstream+0x6f9/0x1170 [ 3437.000542][T13536] tipc_send_packet+0x6c/0xa0 [ 3437.005216][T13536] ____sys_sendmsg+0xa95/0xc70 [ 3437.009978][T13536] ___sys_sendmsg+0x134/0x1d0 [ 3437.014644][T13536] __sys_sendmmsg+0x200/0x420 [ 3437.019311][T13536] page last free pid 13213 tgid 13207 stack trace: [ 3437.025797][T13536] __free_frozen_pages+0x69d/0xff0 [ 3437.030909][T13536] qlist_free_all+0x4e/0x120 [ 3437.035497][T13536] kasan_quarantine_reduce+0x195/0x1e0 [ 3437.040956][T13536] __kasan_slab_alloc+0x69/0x90 [ 3437.045795][T13536] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 3437.051244][T13536] create_new_namespaces+0x30/0xad0 [ 3437.056443][T13536] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 3437.062075][T13536] ksys_unshare+0x45b/0xa40 [ 3437.066578][T13536] __x64_sys_unshare+0x31/0x40 [ 3437.071336][T13536] do_syscall_64+0xcd/0x260 [ 3437.075836][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3437.081721][T13536] [ 3437.084048][T13536] Memory state around the buggy address: [ 3437.089671][T13536] ffff88807d24d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 3437.097734][T13536] ffff88807d24d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3437.105789][T13536] >ffff88807d24d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3437.113840][T13536] ^ [ 3437.119456][T13536] ffff88807d24d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3437.127502][T13536] ffff88807d24d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3437.135547][T13536] ================================================================== [ 3437.143762][T13536] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3437.150963][T13536] CPU: 0 UID: 0 PID: 13536 Comm: syz.8.11940 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 3437.163129][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3437.173198][T13536] Call Trace: [ 3437.176502][T13536] [ 3437.179440][T13536] dump_stack_lvl+0x3d/0x1f0 [ 3437.184076][T13536] panic+0x71c/0x800 [ 3437.187988][T13536] ? __pfx_panic+0x10/0x10 [ 3437.192507][T13536] ? irqentry_exit+0x3b/0x90 [ 3437.197111][T13536] ? lockdep_hardirqs_on+0x7c/0x110 [ 3437.202326][T13536] ? rose_get_neigh+0x549/0x640 [ 3437.207184][T13536] ? rose_get_neigh+0x549/0x640 [ 3437.212061][T13536] check_panic_on_warn+0xab/0xb0 [ 3437.217014][T13536] end_report+0x107/0x170 [ 3437.221360][T13536] kasan_report+0xee/0x110 [ 3437.225792][T13536] ? rose_get_neigh+0x549/0x640 [ 3437.230654][T13536] rose_get_neigh+0x549/0x640 [ 3437.235337][T13536] rose_connect+0x2d4/0x1540 [ 3437.239927][T13536] ? __pfx_rose_connect+0x10/0x10 [ 3437.244949][T13536] ? selinux_netlbl_socket_connect+0x30/0x40 [ 3437.250940][T13536] ? rcu_is_watching+0x12/0xc0 [ 3437.255686][T13536] ? __local_bh_enable_ip+0xa4/0x120 [ 3437.260955][T13536] ? lockdep_hardirqs_on+0x7c/0x110 [ 3437.266137][T13536] ? selinux_netlbl_socket_connect+0x30/0x40 [ 3437.272102][T13536] ? __local_bh_enable_ip+0xa4/0x120 [ 3437.277368][T13536] ? selinux_netlbl_socket_connect+0x30/0x40 [ 3437.283347][T13536] ? selinux_socket_connect+0x6b/0x80 [ 3437.288704][T13536] ? __pfx_rose_connect+0x10/0x10 [ 3437.293709][T13536] __sys_connect_file+0x13e/0x1a0 [ 3437.298774][T13536] __sys_connect+0x14d/0x170 [ 3437.303350][T13536] ? __pfx___sys_connect+0x10/0x10 [ 3437.308443][T13536] ? rcu_is_watching+0x12/0xc0 [ 3437.313279][T13536] __x64_sys_connect+0x72/0xb0 [ 3437.318018][T13536] ? lockdep_hardirqs_on+0x7c/0x110 [ 3437.323203][T13536] do_syscall_64+0xcd/0x260 [ 3437.327787][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3437.333676][T13536] RIP: 0033:0x7f78de18e969 [ 3437.338101][T13536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3437.357694][T13536] RSP: 002b:00007f78df012038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 3437.366095][T13536] RAX: ffffffffffffffda RBX: 00007f78de3b5fa0 RCX: 00007f78de18e969 [ 3437.374056][T13536] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000006 [ 3437.382008][T13536] RBP: 00007f78de210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 3437.389960][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3437.397915][T13536] R13: 0000000000000000 R14: 00007f78de3b5fa0 R15: 00007ffef31f9908 [ 3437.405895][T13536] [ 3437.409141][T13536] Kernel Offset: disabled [ 3437.413454][T13536] Rebooting in 86400 seconds..