last executing test programs: 2m56.990480559s ago: executing program 4 (id=82): r0 = socket$inet6(0xa, 0x3, 0x3a) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8000000893, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000300)={0x0, 0x0, 0x201c, 0x81, 0x0, 0x3ff, 0x0, 0x1}) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x6) (async, rerun: 64) ioctl$TCSBRKP(r2, 0x5425, 0x80000000) (rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async, rerun: 64) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) (rerun: 32) r6 = fcntl$dupfd(r5, 0x0, r5) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '/dev/ttyS3\x00'}], 0xa, "dbba41015b643a7c99a8554e4569d1306fcde0f307dfd87c9ca3e31d1b53ff517ff49fa7768e89f7670a8aac455eb88944f25255d4be7425e67b5fd62c39"}, 0x55) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x3, 0x1, 0x8, 0x7}, 0x9, 0x1) (async) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) recvmmsg(r7, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000000, 0x0) write$sequencer(r6, &(0x7f0000000000), 0xca80) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x0, 0x840, 0x1, 0x0, 0x400400}}, 0x50) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}}) 2m56.756374445s ago: executing program 4 (id=84): timer_create(0x4, &(0x7f0000000340)={0x0, 0x39, 0x4, @thr={&(0x7f00000001c0)="77a0531ab0cf", &(0x7f0000000240)="b5df522c14cf807fc43200002833d214bb3815796986df6d84703311f1fcb35e4a17195a02d1dfbb2dedc78d3a09647c80e78a6faee6d088c107af499d80bc12a0684622c7dccb09b6c1"}}, &(0x7f0000000380)=0x0) timer_settime(r0, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000400)) mmap(&(0x7f00008ee000/0x1000)=nil, 0x1000, 0x2, 0x4c831, 0xffffffffffffffff, 0x58397000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002160, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_robust_list(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(0x0) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 2m52.692626421s ago: executing program 4 (id=102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x119, 0x70bd26, 0x25dfdbff, {0x2, 0x20, 0x0, 0x40, 0x1f8, 0x0, 0xfe, 0x9, 0x1800}, [@RTA_OIF={0x8, 0x4, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40045}, 0x2404888c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xc3adb000) 2m52.346062979s ago: executing program 4 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000"]) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2m51.80618118s ago: executing program 4 (id=108): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fcntl$addseals(r1, 0x409, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 2m50.808996835s ago: executing program 4 (id=109): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf250b00000004000b000a0006000802110000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 2m35.611600823s ago: executing program 32 (id=109): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf250b00000004000b000a0006000802110000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 17.222372392s ago: executing program 3 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000380)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000400)={r6, r7, 0x1, 0x7}) (async) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) r9 = socket$inet6(0xa, 0x80003, 0x4000ff) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r2) (async) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PTP_CLOCK_GETCAPS(r10, 0x80503d01, &(0x7f0000000040)) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000001080)=ANY=[@ANYBLOB="120100007a319b203b0905a0fa1e01020301090224f000e000100309043d00022d16ad00090507020002020000090584"], 0x0) (async) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000801) 15.683396135s ago: executing program 3 (id=588): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '/dev/sequencer2\x00'}, 0x29, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000cc9000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, r0, 0x200000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) r4 = dup(r3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x50060}, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{}, 0x3}}, 0x10) socket$tipc(0x1e, 0x7, 0x0) listen(r0, 0x100) 13.714231021s ago: executing program 3 (id=593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/86, 0x56}], 0x2, &(0x7f00000002c0)=""/31, 0x1f}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xc9}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0x1000000b, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r5}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0x15}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r10, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 13.579184199s ago: executing program 2 (id=594): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(0x0, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) mkdirat(r3, &(0x7f0000000440)='./file0\x00', 0x45) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x24a2, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0xff08, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000be9149001000090c000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700ac1e00010a000100aaaaaaaaaaaa0000"], 0x48}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x8d, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x9, 0x60, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "373652ca"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x81, 0xb, 0x6}, {0x6, 0x24, 0x1a, 0x3ff}, [@country_functional={0x6, 0x24, 0x7, 0x8c, 0x1d6a}, @mdlm={0x15, 0x24, 0x12, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x3, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x9, 0x6}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x201, 0xc, 0x10, 0x8, 0x8, 0x7f}, 0x1a, &(0x7f0000000580)={0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x7, 0xb1, 0x87c, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x7, 0x2, 0x8001}]}, 0x1, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x340a}}]}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 10.494951253s ago: executing program 0 (id=603): prlimit64(0x0, 0xe, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = getpid() fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 10.416651097s ago: executing program 0 (id=604): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) syz_usb_connect(0x6, 0xfffffffffffffc8e, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r3, 0x1, 0x0, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$kcm(0x10, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000540)=@ocfs2_parent={0x18, 0x2, {{0x80000000, 0x2, 0xac9a}, {0x7, 0x9, 0x5}}}, 0x20003) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61"], 0x10000) 9.531107955s ago: executing program 5 (id=608): socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r2, 0x0, 0x0, 0xfffffe04, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0xc0000, 0x143, 0xc}, 0x18) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x2, 0x2}, 0x0, 0x0) r6 = eventfd(0x9) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000300)=r6, 0x1) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0xa2, 0x0, 0x10}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000440)={@desc={0x1, 0x0, @desc3}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000002000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) semget$private(0x0, 0x2, 0x100) 8.986478457s ago: executing program 3 (id=609): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x800, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xb0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x5, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, r6, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 8.702428444s ago: executing program 2 (id=610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r7, 0x58, &(0x7f0000000180)}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018460000f9ffffff0000000000000000183200000400000000000000000000009500000000000000cafc1143f53e0396ecf286232e9b7ba0d918ebfa7f833196f3ed3bb36198e82363d123c08c559b15c1a45bc61ef0e1ad6c3f60fb7ab7b2d86af2a9f8f0e2f38f83beb1fbf6a9391924533cb67c55c59a36aee55313a0de4cf86727e8680684a51aa0e2ad8d3815537c1e22ca560e103a59c4b40afd29b5b8b2e50f1c8d89e4ae16607a6b68c0830c9c363aae16b56e2b84aa74dea967bd8927460dee5c40c042423e5db3d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 7.669563689s ago: executing program 2 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x63, 0x0, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df, 0xfb}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800000, 0x0, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x5, 0x100fff, 0xfd, 0x2000004}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x5, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) read$msr(r4, &(0x7f0000000380)=""/149, 0x95) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='smaps_rollup\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) connect$unix(r5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a000905040200000000007f92bf39ff03000000"], 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x2e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) syz_usb_disconnect(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x20000000}) 6.319897972s ago: executing program 1 (id=614): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in=@broadcast, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0xfffffffffffffffe, 0x1000}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x4d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$tipc(0x1e, 0x5, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000002140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="20002a00821a0706040c5fb4f7cb02110000010900000001000000030000000008007700320000001c002d800a00000001010101010100000a00100002020202020200000a0006000802110000010000"], 0x6c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) syz_usb_connect(0x0, 0x4c, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7c1f"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}, @hid_hid={0x9, 0x21, 0x7, 0x5a, 0x1, {0x22, 0xd46}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x8, &(0x7f0000001880)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}, 0x1, [{0x0, 0x0}]}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/keys\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001000000000000ecc80007000000", @ANYRES32=r8, @ANYBLOB="0000000008000900030400000a0002"], 0x30}}, 0x0) read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) chdir(&(0x7f0000000000)='./file0\x00') ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0xa0, 0xe000000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) 6.038516289s ago: executing program 0 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000240)="b4", 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000880)="8b", 0x1}], 0xd}}], 0x2, 0x240408d4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 5.871249229s ago: executing program 5 (id=616): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x4) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000500)={r7, r7, r6}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r8, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 5.366779391s ago: executing program 3 (id=617): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0xfffffffffffffc45, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x34}}, 0x1c}, 0x1, 0x0, 0x0, 0x44841}, 0x0) syz_usb_disconnect(r0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x7fff, 0xfffffffffffffff7, 0x81, 0x100000, 0x8, 0x2004ca, 0x8000003, 0x0, 0x0, 0x7, 0xfffd, 0x5, 0x8000000000000002, 0x95af, 0x4], 0x80a0000, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@newqdisc={0x118, 0x24, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff1}, {0xa, 0xc}, {0xa, 0x6}}, [@TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x94, 0x1, 0x80, 0x5, 0x2, 0x712c, 0x3, 0x4}}, {0xc, 0x2, [0x2, 0x8001, 0x4, 0x3ff]}}, {{0x1c, 0x1, {0x1, 0x4, 0x7237, 0x7, 0x0, 0x7, 0x261bd782, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x0, 0xb, 0xdc, 0xff, 0x0, 0x9bc, 0x7, 0x3}}, {0xa, 0x2, [0xc, 0x1, 0x7]}}, {{0x1c, 0x1, {0x7, 0x5, 0x0, 0x1c, 0x1, 0x5, 0x0, 0x6}}, {0x10, 0x2, [0xf4, 0xfff7, 0xfff8, 0x0, 0x4, 0xbd]}}, {{0x1c, 0x1, {0xff, 0x6, 0x82e9, 0x6319e698, 0x2, 0x3, 0x8, 0x5}}, {0xe, 0x2, [0x81, 0x80, 0x2, 0x8, 0x0]}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000180)) write$dsp(r9, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)={0x18, 0x8000, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) accept$ax25(r3, &(0x7f0000000280)={{0x3, @default}, [@default, @bcast, @netrom, @bcast, @remote, @rose, @null, @netrom]}, &(0x7f0000000200)=0x48) ppoll(&(0x7f0000000080)=[{r8, 0xa000}, {0xffffffffffffffff, 0x2000}, {r6, 0x1080}, {r9, 0x8002}], 0x4, &(0x7f0000000540), &(0x7f0000000580)={[0xfffffffffffffe01]}, 0x8) 5.119261605s ago: executing program 0 (id=618): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) unlink(0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) socket$unix(0x1, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000014000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001000300"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="62ad906dcd5e44666b6c649d8d956023416e9b8d"], 0x5c}}, 0x0) 4.798458063s ago: executing program 2 (id=619): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810001000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b74000c00e63b9ba2ea4f115a67245b00000000000000000000000000584cbf2649a50f2dbc0000a8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d9cfd56d3c86e55010000000000000000000000004137dfff2f8f00009a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10202) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10202) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/148) (async) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/148) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r1], 0x44}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc000) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.559384413s ago: executing program 1 (id=620): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x8, 0x43, &(0x7f0000000940)=""/67, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x5, 0x7114}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ec0)=[{0x2, 0x4, 0x5, 0x6}], 0x10, 0xe0a}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138f486dd6349080006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x28, 0x1, 0x1, [r2, r0, r1, r1, r2, 0xffffffffffffffff]}}], 0x28, 0x40a0}}], 0x1, 0x4418) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, &(0x7f0000000100)) 3.884886758s ago: executing program 1 (id=621): syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000100)={0x8c, "b673df7204b843642322f378c4886ec9ce56c29073380cc7f9c92a86b767730b", 0x10, 0x53, 0x800d00e, 0x1, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, &(0x7f0000000240)="dfd9", 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x1c947e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r4) r5 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x1, 0x141142) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYRES8=r7], 0xac}, 0x1, 0x0, 0x0, 0x8050}, 0x4008040) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_PASTESEL(r8, 0x541c, &(0x7f0000000000)) 3.166467786s ago: executing program 2 (id=622): socket$inet_tcp(0x2, 0x1, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)={0x1480, 0x13, 0x200, 0x70bd28, 0x25dfdbfd, {0x8}, [@nested={0x12ac, 0xf0, 0x0, 0x1, [@generic="0023cac3895119f71429ccb823f2f550e1f71715936afb", @generic="b47b30a2a4dfcb1ed2d7e5e29b63979abc69f9bd585b9892622a62776bfcffe24a9b6a2488add9fdc15c17a7acfd942bbbc086db1d044571d85d6c4370e8ec4773f9825d6783c585ab774ad23eb28d5a7205b9e49b6ece54cc3f0db08e8d145f8da17f3c9c2583044dcb388aa7f272e73a1ed3756a15af3fcc2626388254186c4c3b9a850580d4218abc8f8448f970e752bf2afe1ca7bad26ec4f341cea5ef57d2dae63d97fbf74c95d2bb2f4fa110f634981a550be63ae4ecdc8dfd02e0", @nested={0x4, 0x14}, @generic="a7ad3ccfb5489fb1c36a3cf4e6ee81222604709a855c5c56e41550a61a4ae18599263cffb3908ef86bec73adeac6b609028e2b5c1b53fcc441ca932f467872a201fabe2d50f3780fea9ecb606a7bf6f00374cadfe7054b9b4457c9425ad25e9b9653ea956bee37bc1133bfeecdd7a2330c3216bd5df7d4495982688c34b5018890661fa54278dda11642e324d59682503659670ac6ac1f0dffcfc2e791b17af9e7dba2f7d3f47e44c26c0da5a931cba0989786ff20e12eabf250b3ca85c3872b9ddf21cdc81999062d9a1869", @generic="3ddf597d3895eb0b330510cea261bad0836852da8414e120bac75fd82bb3bfbd68cf61174a32a88c2089f1a945c031f8981aced3489f0f9826fc95c2f11c45c434200b7c6ef26476cd6c908af3377b6df847db69899c7c0b20fe294577131daf528e0cd6718af65f5e3a646f11400a70d666c8585d2833b694f7319142627dadde0a1bec3b413f910edd4fb3c72ea604e3da1c81802808c92ea4c14206ec843eb76eb90d39c7a76d4ebc34fd82781ff09a4836ffcee150ec242b51997e1f9fb075194e1a9bd5e41dbd6d3514bb0ab732e5e7d016d00383047aa69131ec4a081d77f9ca263d62f87d2b1ec02e69bd51dec934c3524686fbff32f163281137c8336f18e5531b5025801dcbb34590b3b3da68ca39cc83f27a877a0259dd0db012485d97c8df7b03507d463dcbaca4643e66afdab79c351ea713a1d0c9bdcf6bf9b34cb0871b0fe2251419fa1d1f7e80a08dbea5075d3b98f1801d883ffe4ee6784912e79fae436fda1307174abe1733426c506384416f8bdf0146981e514b9f3e0d51a4939049ffb7395f7cbaef580c5e49558b46eba283e0f055781a449ab5b0c92be74ab606dd845fae43f5675d51ce0ad8ddaab8c0c955a0d83b2fe1e7492e28f22973931a21dd152eefbf80e0f79141b26fd87c6a8f4ef4075b38957f3601a8355ab2b0fed54f1f49d26fd48cbea8a4b3cae360912c99b48e5edeaffc406084ebfc4a81b03e5a4558b459ef5dc63951c4d5388b95932ec7965faed81a26360310c23143922f11878749c4416ebf2a0b30383ac0b370829540b34a7155d630dfff4761b7bd174c5205f284934393f225512cd255e3287b2b42b31286001a36dd6d172340f227a424862e56e25f08b6fcb265c223c2249094da66ef7672d7f0ab3cb27acf731818008b374164127d97d6271f77db305898dd35f43eab0b9dd0936a6007b5de06f9ad5de5030e7b1523a8110650d35383e9a45dd7886c7a7a002098e4b41c43b629b3da3dab4122f2b9058ebb81d0bc4ed7720d5f8101e25da5704cce5c13bdaa205cd2560f00c4263be48252db33d9069f7dc30a1576c011fc5f136dd71c27389ae871c35c60271b31facd22fb1963012a7f70aa4ed80ffc77af6a13efd3617ab0eb34cb7469e3d2591bebe1d8024716338b2d187bb08b77dda104fb5e7823abeeaeb400e2b42fa7b5f913c39aa83eb8167f43691a95cb0cc7623e377feea509a999f6f5f8a33ab3f49ea8a6e4a6336caf1e27df0b6392725113937b443e2713a1d7d1a61393dbb03e9f85f44fafee1a2bb9d054f511cf0b31e487af3b87bd556cb2d85314bd2cab2b8e3871be434dcf8717359de351f4f45f3690b0b493432d97f0bca896a09fbde751831d2623a822b86f4cf98ef7e061ff0aa9214ccad0738737efc74ed90e41a7fafc92baff979e9b75d5ed9aaab674f066cccd08e2115e664ec1b97272c88e1bd53dbe2697e67dd87224a1a543aa5644242340b5163b4016586f302a2fd0a13e2a1e438f5a63af6eb7466d61f4a0e47a8f759d92d6d896357d5d9dec076f341b906ce85befa4bc607d0d92afdff58f2ba0f65e444ae699fd6e339d59775b045d8b3776c21481d3d13ff8a5ce13ca70b70461daea77d544f43668eb217a23bc7d814cce3cf8aeaaa9e18b1c1869690b8f3de7e7ab0cc63b6d30ac54e838a4c23182105a041faf3980ae65ebd915d7628999a65bb2b06af2f40d458c80435aaaf0129b52d477b8d3c17157ab1e08788f682403fded993cc02343a78d5da1757837272a21fc7c236951bd2b2d735a77ded4115b03479806904bf95ad8fb16c0d91d016c1da05c65fa03c3264a25ecedc8aeb3b9f2da694e0f31b3b0cfe2c835635cd2dfa511716412b323b8f1310d8d75118af97b564d04830b410e566d261bdcc9fce151d16bdd7714f9887313ad186c942ffe430483283ea4d24069f3d7fb268af8c2f178a74b10186e1882766874d3b3c89e274a238f32bf050b6d0fb1e5238ca2e639dc318e09d0214ee49cadf1005e827caa465fa49c585ee26dd147101e05a300818fe9c4dcbab19ac6eab3446b256fba8f48a92859d277a45e8e14c9cb01323f8b02e51d19101bed51f012b5abbe848ee090fc8a5aaa93186a3ff9b8b62fee1853addbb4677af3979d9e2daca65cbfd665a9bad18f1b291040eb9f06a36d0c83194795688da881963e2af00b1f10adb121b0e389fcebbf6bbcebc5a9d41a32d1e016838c067f7dac3fc7c329356e06f42b6fe2e5eb49a2eb07cb404e346f0d1cb37aedeb9ff9e12ea900249b0b4295c9ea33e2ca43c6d5b2fae5db3b3441d1ed24dbeb0001b1c873e6ad9d2e3f4aae397808b3e86269889f43b14609b2fdd20b2e81add2fdea06736d61af9560b202407810b4c8c4872ebe3beb0be10d91ca6ad89aea1c051966f1924dc6d73cbffb0245cb7582c24bed4ff33e45b8a2f65ce57ca4ca7df998cb1c7271588580d0620c2902d729114f79070ecb13cf332d0a52cad83fa6343b36b031d3a90548f316d5c45f74162298264880d543f0dd296d19da8459f3523e8115ea55c2028f3c146835cab1875d9bed0d1681849afb32ab00859869b74b6e426b8ac4635512f91d2fbe795243af4a270b09e03c3b615c9827f1a7934b36a975d05e61421e2246ca11644c817e379853ba2abfc0feb80cafb26a4698dccd07ed20d8e7d2a4eae8fbc4c78d29fb32b4629856afe3018a122a534bea6cc59c86217ad1503ebb1a3df74e617b8531de3ff95ce0947c8b5e5c945311e4ee2cdcbd0fa1d2e80478763c8f0e6f5cc229c0d75acfe46948ed613582ed7aec17859b316470c55bb2196c6a9584309f33fc3cffa4382b23577c1223b69ce95b91e1fa339e5da3bcbd142eb6aab5982a7ddcff921ea48178e3c80aecf39864ae2450d1d332ed32331aae154de3fc6184adb2c5c9e3dfa3fe1f8e03c17ca06a1ae7cb9879893efe2936305980c08b918123c362df87adab847d1985001171dd9a2ebabea3e2c5a9378de2982033fed0ab79226760b9b6bbfe67e58c2fcae458f9b40f27b82f92e41acbe00e66bdd0634ed095c88c72a90b9e91a7be1cb9dbda4b1a307baf60a25f19d8186f900655c32dcf580f3f712845119f732b2859aac94f66252ac06da25c052f87cef4267e87f4ae32f3b2700986ae2438b94729b4e95a5dc3db894b417c82978838106efaf52dd57aef24d0a8210c6465173e75c305de7231e74272129adab9b72e14642fad9e23556829f2da49af9dcba6f820834f834682f56584b0f147501f8805ee3964d930e79cbe22252c78ebbca571335fa12b02a64b91e55550fc84a05e66cea5a34244f91b1180980a12f9695d63d28a64d02858ff988fb8805489c60c9cd5d5d051b05052e5eb629aec276b0b05390d83299fcb61e875a30b7e01f722a198ffae0a8112aa14c6451368b5c612ba674369cc051c040af8fd6e6ef3a3a0dc4c78552c8ec97aa2ba6a829c553a7508b8f8fd56790601850fd08a8730c2baf639bef64ace9dbd7e7a98621d03e8947da691c51fd17c39e0d249f059530e21b50cf14213558f783e22a1f05f83229a6263b9e461f37200119ea2f860c87fa20e8dd73e8b0f5170e09f53a617661813c36876149bcb001377cac4c24d281407360790df12ad07595035681a3a35b2540bf269267b5fcc19012fe881de9257263af663ffd5283fa6efc91079a77896c31503b80134243f2db96f2454c726272008196bb4e1ac27ea1d3c1031641d94b200343a83f4a2812485d31e95b59b3cb8ee029b9230dc659544c819a22b0c05b99e41031a96d5198b3453c56f49980e47d345f8c48d9068fb8bb7a381ec8779a3b24d291283e74d6c5d6764a1107eed5aa80789a37779e067bb3bcbcff16dbdf184da92b7ab59f556ed105eb22dfd124f514e0adf96b59909ac89dee78101112adb90e63c5c43d03ed8e082bbc978f3b2a1b827e7b4ba03b17239e3b398d4f3a7fcb85727a5b03911de82fc58d69f340c3a42ef6ac3cdbeb284815173e686e25c31eaf0eb3cd68990a592b1ebb1c26dc2c305e897fbf64ff1e9a951f4e544a9969cfdfb4172061081180164eb335fa7ab2745b05624898c681f94b8d4f292cc20418b68effb64a28d6fcd2d588184a699a0399814b4dc3e4046abff97817241aeeb4ea3c694d727f67a9a191527cb6b6b8744e4455f90f12b0ccc5dd768b3f6721a5daac9ede58f008a4438f80bb2941579881e7ac3d43a3358bf0251c97b8af394b68ab24343dbc9dd5f4749d0e88f5e8984899c38bd040a1d3223c768f410ccb695b8d7e5b2b9a301a9f84cdb25a1ee7653e613cb25be73f943631e1003edfb6a99b57d60babc89c042c46ae35a8eeae1baafa1f6436eb78b77e5195cbe33b2b3cc070f3b3f079e85cd72abc6f5a79768232c0441cb4ec7b34682116ed45dcf257dea4a8b6df7608f8ca2b1bd65e6b724733c8751c377f0216ba87c524b736a139d594c21259d0432e45706fd069a0227d16a7b9c02bef3c2d8e7678d33d9b18c0a5f147481f53f702f2dde29d9997ba44f4e78efd37d16c08b14c18dbd8e806e404518699ebdab9a312024fd90d3fe8b85128c7614d0ac3c9b759c169f649449b30b131d45f8bf067655b8ec053479f52f49bb8fa8d82092f6017256d5a12d9f8c9f20725249385de2a26d5f763be312af5945674dad455ba42ae4d455c8543ca0656afa19911bdb5ee5739dfe5e9602f33d2df6412277c58c12b5d8a04b12c573725afbec9a5bc8e92912176e0e8501beac9dc4d449b32864b5f4acd81f82284e608948120a27a735014b896186fe874d649f048e1f699a723f3a86b10ce26f7b9be2378ad456731dc47e1b8758adac03081d19e0d8218684583d8cdf62cced18bca7512693638574c3992afaf69cb774a15b0ac372dfe8c1241222d2703579a091c07fff559618247747203469b6c51f966aa2f606dc3f520612b7cab01489f4740df018a13f7a6af4f620bc3905cee2c8c0ef5b863f6b050ed62a2db420c898f6dd93b69e53baab0c293ec141297184d2feb0637d5604bab90a2055e95541bc78462af64e3889949d3596686a42dc5a1b293e344ceadbdeafaeee28f1f24d8da68070d20bffd70cd6e29e67ffd5974e10aa18fff6b78eebb19106273ac51ab99591507e784a5c20b091194ec796d60e622cae0685046a0a54124f775df1983dcac55ac118dfac5edd2394149bee9d1f1d9125a64260cd5936203c4f3a0c7ab312435d207e5deff82f1e333476caf01a1cfe72a0ed46a90885326d87ca1c1aa2bf2dc90123016b8a73e178088a94a9b627e284f7f07601c0a0ca93939f7d541f6bb88f40fa39c19658031852cdd7e6f46f1110ae0c641762d1812af96dc50f2df63c42e49bf66e98e337b0c3a9586f1611e6b110cc5edfcf6c99e7cc41af6ab79d3c9d6d0f178825dfb79af45475da5448ef5bfaa38ad4fe30b3d5fafcb4f6e86e386e37f4526130969cb323a1e6229648352848f29df6d97f2cb740949e62366e83fc6238549a30581008410a4c7474fffcdffdc3d4ef870584e6e2a204373c795c45402261624f7ef210ad0e5fe5d56ac1077c39dd6bbe13b5c3e02760610f79187dbf020a4af76b4d8e4bd53bca2651d618a6d4a6c1a5eddcf752b79f1951a364107dc8957cab530f93f48652697f41c3bce86bbd74aac5f99284ebfa1044985f6c594d6494c53ebc51ec414b805c3c8598676281be19d4e5e37b1ebaefa39bc137a31191d8dafcfc7c2096243ab1", @generic="b4c484b793ab050a21f923f800d791e607a6e58356178cce508307cf00214032a44a4e6a8f3797814a09de694f623808fd3a1ef4c8f5516f0e00cb96bea85d94f4765f586f07c1ca6743697f1874dbebc79cac480202beedf86a062335341fe77ab83d0f533b7966f2964c08edbb29f32d364c688cbd9bec51247e5f5265b790922afd3f11fe6d1a01a05cec8b55da93127b10ea42a1b21dc2b5beaf72ba9218737790f6fb897175c910f0f460b8a15590f030c77236062abfe98eae7b7d516b968232a0d1bda387f1e51e8f33449b85d4c8171c52cd590e2e7288192dd5bd05afb91bbdcae57b0b8bf8bbff92a099a617c5517aee37071a5a450fd40ca10e", @nested={0x4, 0xa0}]}, @generic="2f0f2b75230e94b6a2d920e25b88d67da8a52321aa1f6dcdd7263ab9b1802ddd0be4c39350e94e22efd2d96172e714615180c6491f4bddd40ff98cfaea4230eae5f83ba7b78473c0b28091fe26ecb8267b7cb59ce98a2fa8d4bdc071d28cf6914162ee0ad56ebb6771a051dc172497b80a4b99409296e9051a66cd8bd3ee85e58b2ed6aeb190bce8c2f235c17e2385b071e96a6e58f2b26118f41ef5b7f450c811c14f0c92b37f158464f45d989f1964e0b8ccf71de9", @nested={0x108, 0x2c, 0x0, 0x1, [@typed={0xf9, 0x148, 0x0, 0x0, @binary="4b18beb234d630089139358ed4979245527d07ba0412291874c6e1c7c3e15169b8407abd87f767ca2f59d1f95e607770b18c2abb6666ed6da05e0999a52f08bd9a3b6de12bdad42507a8f98ec6e7717f4fb4d63b126ee4e0729660b94d3462bf5218e2ae9c24b8a876cb070812936e9b9915f8a6392c7dc2c640e2020fc1828dfa9f06b4a278a441b1d87e97b9b35723e42d939da9d293416a3a0e3677d5df00a376d644fbd099858c207899d1c10289e4145eb6acd240ebafa096b59bd80f2b1fc765e53dfb35977819d32668da6711ad46bf32f873eb285c515db8844d293edd31ad8dd764fcc9728449cb1e72201d51c5d565cd"}, @nested={0x4, 0xad}, @typed={0x4, 0x6e}]}]}, 0x1480}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mq_notify(r3, &(0x7f0000000180)={0x0, 0x37, 0x0, @thr={&(0x7f0000000280)="c5e0b651fa95eb06d5e9ea596bb9f039677a177f7759a3e3c2c1b7c6642ce97d555e357fade68a3d2b9ee26126c8ff3793eef0f7db6d798c16a1a43dfe3a2579311d75cd3aa04c32a451a295c24b3ca0eec2e8e4c9c8176aa2f259ef69e237acd0012770c3ee464f8fceff1bc8967241d4b5c2cb8cc125d46e8fd1f2b3e69d18868179a61335203247292f0d375a2dcd69dbf9425dbcecd5738920032db7e89716334e9bd8d14c7ab2382f62df3706862d6f9b77476d45be004198a4110e671132452b9b52ddecfc31b0f8a8fb242a56eab3", &(0x7f0000000380)="978885e5f00b7a8b8b5f348192a2364d6e3c7e231a5c589545207d335dce7e5a44aebe1e9e2a1e377df7a6d9b053a765286360f393c4726d48594e8d974653ff08264689a15b669215f1a51317e5c35a36873a048ab99c60f31b8b09607bddff802819434756de26b8975f0d51432ce134e86913d0f3f6dc419aadea2d41063a7c2f63e1df1eed013880c00653fd1071cb7d0a6e60d4556a9a17ed061ad71ef697f6ecda2e5e7ffa385363ce3223ae2d2ebbcc1fb642947f7625b4641802f6aec4a74430266d0364700872b0"}}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000ed0000e02d33351b82a7f3fc2f"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) 3.009347562s ago: executing program 1 (id=623): syz_clone3(&(0x7f0000000080)={0x305700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0xdddd0000, 0x4, 0xf0, 0x40, 0xb0, 0xd4, 0xc, 0xb2, 0x1, 0x7, 0x7}, {0x80a0000, 0x8080000, 0xd, 0x80, 0xa, 0x3, 0x6, 0x48, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x9, 0x6}, {0xeeef0000, 0x3000, 0x8, 0x11, 0x3, 0x46, 0x4, 0xd, 0x0, 0x9, 0x0, 0x1}, {0x2, 0x0, 0x9, 0x1, 0x5, 0x9, 0x9, 0x7, 0x5, 0x4, 0x3e, 0x4b}, {0x80107802, 0x1000, 0x8, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x3, 0xfc}, {0x6000, 0x1000, 0xf, 0x99, 0x3, 0x0, 0x1, 0x92, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0x0, 0x0, 0x3, 0x3, 0x6, 0x9, 0x8, 0x6, 0x4, 0x7}, {0x1000, 0x5}, {0xeeee8000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x3, 0x5c00, 0x80a0000, [0xffffffffffffff47, 0x103ff, 0x7, 0x10800000000000c5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000f08"]) syz_clone3(&(0x7f0000000080)={0x305700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0xdddd0000, 0x4, 0xf0, 0x40, 0xb0, 0xd4, 0xc, 0xb2, 0x1, 0x7, 0x7}, {0x80a0000, 0x8080000, 0xd, 0x80, 0xa, 0x3, 0x6, 0x48, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x9, 0x6}, {0xeeef0000, 0x3000, 0x8, 0x11, 0x3, 0x46, 0x4, 0xd, 0x0, 0x9, 0x0, 0x1}, {0x2, 0x0, 0x9, 0x1, 0x5, 0x9, 0x9, 0x7, 0x5, 0x4, 0x3e, 0x4b}, {0x80107802, 0x1000, 0x8, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x3, 0xfc}, {0x6000, 0x1000, 0xf, 0x99, 0x3, 0x0, 0x1, 0x92, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0x0, 0x0, 0x3, 0x3, 0x6, 0x9, 0x8, 0x6, 0x4, 0x7}, {0x1000, 0x5}, {0xeeee8000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x3, 0x5c00, 0x80a0000, [0xffffffffffffff47, 0x103ff, 0x7, 0x10800000000000c5]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000f08"]) (async) 2.870164941s ago: executing program 1 (id=624): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000b80)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$usbfs(0x0, 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000440)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b20000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x5) 2.699043514s ago: executing program 5 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258) close(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r8, 0x58, &(0x7f0000000180)}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000c30f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018460000f9ffffff0000000000000000183200000400000000000000000000009500000000000000cafc1143f53e0396ecf286232e9b7ba0d918ebfa7f833196f3ed3bb36198e82363d123c08c559b15c1a45bc61ef0e1ad6c3f60fb7ab7b2d86af2a9f8f0e2f38f83beb1fbf6a9391924533cb67c55c59a36aee55313a0de4cf86727e8680684a51aa0e2ad8d3815537c1e22ca560e103a59c4b40afd29b5b8b2e50f1c8d89e4ae16607a6b68c0830c9c363aae16b56e2b84aa74dea967bd8927460dee5c40c042423e5db3d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r9}, 0x18) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.577757458s ago: executing program 2 (id=626): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x80, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x4) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000500)={r7, r7, r6}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3300000010001fff0000000001000000000000d7", @ANYRESOCT=r8, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x81) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x0) 1.57682049s ago: executing program 3 (id=627): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x3}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x12}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r5, 0x80) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}, {&(0x7f00000004c0)="a27996190162232c7e264aac5d3b1c9c1951d3ba4f3cde38ae6acbdf1a6e975b476b6add3d11f1", 0x27}, {&(0x7f00000005c0)="3e3101ba7a9b3c627e7959218e57311b4cf90c93d1bc6426325a6d3672cd65f62eaf86caba6a26c381f95abd0b3c2ca90ab93c4e7313dc5a16f4f8dbfe5ca4d31701960f87df2d7d13519d2d21964d3dd3ecb8673aeb5081905046e9c8b33c11c70e6097a7587384b18d6e60a9656c85ea1add43a91f84b455bb01ca1a81dbebf348c0c2aff7915356f9991aa2def0a71b06131f7e699e6e8918856f", 0x9c}, {&(0x7f0000001640)="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", 0xffc}, {&(0x7f0000000500)="191d8ca1dbc1b0f61dce17d879b7b570e64ddaf21d1ed5646e784d21a95ce4ddf86e4895627279239ec6cf4915981fd9c69d295659a65f29e6d0e1757efd37d50b9795e93f30cdeef11f5dd9f6efab415fe9", 0x52}, {&(0x7f0000000680)="3040905fb8440fd2ee0b0ec8cfccd0bdc7448df49e37c5fdd258b00d07f3f271d2bda70c9d49cac29e60f547e2277c506c71", 0x32}], 0x6) r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SLAVE(r7, 0x703, 0x4) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) 1.576271116s ago: executing program 5 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c00000010000104000000000000000000001700", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.436743204s ago: executing program 1 (id=629): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x4, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.238489308s ago: executing program 5 (id=630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x3000000, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 1.094643453s ago: executing program 0 (id=631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) accept4(r3, &(0x7f0000000440)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r6, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f40000000800070000"], 0x58}}, 0x0) 102.804808ms ago: executing program 5 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0xa9) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000001c0)="e27bb73553608680b91bb646d26f46013b6cf762c94dc7bf40e6135d4d2f09d0d25092", 0x23}, {&(0x7f0000000340)="98a4d017eae3e505cafa82c29e5af2cf91850fc1ae1edb21ca8a311c5b3b1ed4a5e59b5af70e79c976551faa62d2808f3fa3fbd4e09defc144208e00c4e7b9ea25b249423414d91ae0f1a5366c86a0fcd5c9f64314475ca2d0574459ab5bffea79c9865b2f744f3758977a927dcaddb42a79b5d2f7e810401651b2767d853b7d44b8305818e3de1adb710add97171f6e550b8289d30ae518ea1f11b5cfb1d5", 0x9f}, {&(0x7f0000000480)="269407698f96004dcc4f669876252336eed2177217261cc5f0668439ef1fe03140c01b1b34b39839a4f50539a80e", 0x2e}, {&(0x7f0000000500)="387a428fbbb5", 0x6}, {&(0x7f0000000540)="1596643c943ab935205c104bdf696836431209f92c1e294dc8e3e6445ab6b34d6108be04ed6b3176a440cf626c3ccc9ca3477d7a38d0129acecf7818d11e620ccfe2797768594823a5bded74e5e4b7482b1ccd5e1d04a177f192c887f9e60803fe1636a8ee4c9d85e7e47c43d6c7c3e673dcb9577b36d6e914ac0d20865942717fed72b6948f141db3e969a3e299a91e918af964f98287ad80320293a14bb72586b20bffa68302bdc289cc", 0xab}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000600)="5b810984543987cba1239d7920c6a4d8d4fefe7e0cf53c6bad1f654767f4ed2edb00287642df7c759e0ceb546ce9c4ab77b17ae2b04dba0a19e16635c5b771b8f3b37cc77b35a665b0b08c49eaea62ee6cbc8d420fa3c9c7aa6b3e13c51525e134614ab564d46bb0f01bdd9116d1c50e45986d20d357421b4bfb0bb0a8cbd305017e4e657b83eeb5", 0x88}, {&(0x7f00000006c0)="22b2ca465f95f2a11a3e97536ee9898dcf1c4eb7de70fff87a0740715895df0f779621276589e0ff0bb95a2c6e77b4b15f893e2e026d6c60c9aaaf2414cd2a19db22ef5ba4b03babfa26701816374ab61714a5ab526affad2bcf60a0cef409974e003f4be4d7dd4accf51a2b225a18c20ddd55c58901c703aeb2896e0ce2cfa74c88bfe23694f6b193d754faa21bd95a88e9719f584601cb6d1dad105537b743995962dfaab4380ef1", 0xa9}], 0x8, &(0x7f0000000800), 0x0, 0x40}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = semget$private(0x0, 0x4, 0x29b) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeec, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r8 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYRES16=r8, @ANYRESHEX=r9]) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) 0s ago: executing program 0 (id=633): syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', &(0x7f0000000200)='PCI:', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="159c4ca6d5f2db29c58d190c7d"], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x295) syz_usb_disconnect(r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="20000000000c001a8008000a80050071c3"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100002192ea0845050c800a0301020301090212000100000000090400000079e6010073cf9bfe47530e8d9418287bff612cae923a6753dda562ad7b263f17cca575bc351d2027cccddca5f93d3422d36d0c056580f411b4b79a72351a005aba0a2ba42f0577e1fb6d2ba127776add70c7be8e72156e6cc0c0807f"], 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) faccessat2(r5, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) kernel console output (not intermixed with test programs): ing attributes in process `syz.3.113'. [ 107.546614][ T6444] netlink: 'syz.3.113': attribute type 6 has an invalid length. [ 107.554269][ T6444] netlink: 3 bytes leftover after parsing attributes in process `syz.3.113'. [ 107.912776][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 107.912792][ T30] audit: type=1400 audit(1759070178.798:264): avc: denied { read } for pid=6453 comm="syz.2.117" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.923970][ T6454] binder: 6453:6454 ioctl c018620c 200000000000 returned -22 [ 108.043726][ T6455] netdevsim netdevsim0: Direct firmware load for . [ 108.043726][ T6455] failed with error -2 [ 108.068878][ T6455] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 108.068878][ T6455] [ 108.234570][ T30] audit: type=1400 audit(1759070178.798:265): avc: denied { open } for pid=6453 comm="syz.2.117" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.354251][ T30] audit: type=1400 audit(1759070178.798:266): avc: denied { ioctl } for pid=6453 comm="syz.2.117" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.379220][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.496051][ T30] audit: type=1400 audit(1759070178.948:267): avc: denied { firmware_load } for pid=6448 comm="syz.0.116" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.007990][ T30] audit: type=1400 audit(1759070179.888:268): avc: denied { create } for pid=6463 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.027212][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.268229][ T30] audit: type=1400 audit(1759070179.888:269): avc: denied { write } for pid=6463 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.348526][ T30] audit: type=1400 audit(1759070179.888:270): avc: denied { setattr } for pid=6463 comm="syz.1.119" name="RAW" dev="sockfs" ino=10711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.461612][ T30] audit: type=1400 audit(1759070180.048:271): avc: denied { read } for pid=6461 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.195267][ T30] audit: type=1400 audit(1759070181.078:272): avc: denied { create } for pid=6474 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 110.355277][ T30] audit: type=1326 audit(1759070181.228:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6477 comm="syz.2.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9c2d8eec9 code=0x7ffc0000 [ 110.378495][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.361832][ T5924] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.696826][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.739346][ T6501] netlink: 'syz.1.127': attribute type 5 has an invalid length. [ 111.749498][ T5924] usb 3-1: config 117 has too many interfaces: 160, using maximum allowed: 32 [ 111.774923][ T5924] usb 3-1: config 117 has an invalid descriptor of length 208, skipping remainder of the config [ 111.804607][ T5924] usb 3-1: config 117 has 0 interfaces, different from the descriptor's value: 160 [ 111.828367][ T5924] usb 3-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=52.dd [ 111.856795][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.877026][ T5924] usb 3-1: Product: syz [ 111.881361][ T5924] usb 3-1: Manufacturer: syz [ 111.901664][ T5924] usb 3-1: SerialNumber: syz [ 112.619102][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 112.940187][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 112.940205][ T30] audit: type=1400 audit(1759070183.818:289): avc: denied { ioctl } for pid=6514 comm="syz.3.132" path="/dev/sg0" dev="devtmpfs" ino=776 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 113.132066][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 113.154431][ T30] audit: type=1400 audit(1759070183.928:290): avc: denied { setopt } for pid=6527 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.370711][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 113.922611][ T5924] usb 3-1: USB disconnect, device number 3 [ 114.240379][ T6543] vivid-007: ================= START STATUS ================= [ 114.248453][ T6543] vivid-007: Enable Output Cropping: true [ 114.254380][ T6543] vivid-007: Enable Output Composing: true [ 114.260200][ T6543] vivid-007: Enable Output Scaler: true [ 114.265794][ T6543] vivid-007: Tx RGB Quantization Range: Automatic [ 114.273067][ T6543] vivid-007: Transmit Mode: HDMI [ 114.278032][ T6543] vivid-007: Hotplug Present: 0x00000000 [ 114.283722][ T6543] vivid-007: RxSense Present: 0x00000000 [ 114.289367][ T6543] vivid-007: EDID Present: 0x00000000 [ 114.295549][ T6543] vivid-007: ================== END STATUS ================== [ 114.377486][ T5852] Bluetooth: hci5: command 0xfc11 tx timeout [ 114.384777][ T51] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 114.394121][ T30] audit: type=1400 audit(1759070185.068:291): avc: denied { write } for pid=6541 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.428229][ T30] audit: type=1400 audit(1759070185.118:292): avc: denied { ioctl } for pid=6538 comm="syz.2.138" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 114.459923][ T6507] sp0: Synchronizing with TNC [ 115.560698][ T30] audit: type=1400 audit(1759070186.438:293): avc: denied { map } for pid=6544 comm="syz.1.140" path="socket:[11137]" dev="sockfs" ino=11137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.749027][ T30] audit: type=1400 audit(1759070186.438:294): avc: denied { accept } for pid=6544 comm="syz.1.140" path="socket:[11137]" dev="sockfs" ino=11137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.282538][ T30] audit: type=1400 audit(1759070186.588:295): avc: denied { sys_module } for pid=6552 comm="syz.0.143" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.582452][ T30] audit: type=1400 audit(1759070187.468:296): avc: denied { mounton } for pid=6562 comm="syz.0.145" path="/proc/89/cgroup" dev="proc" ino=11168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 116.657651][ T30] audit: type=1400 audit(1759070187.488:297): avc: denied { remount } for pid=6562 comm="syz.0.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 116.677112][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.041901][ T30] audit: type=1400 audit(1759070187.488:298): avc: denied { ioctl } for pid=6562 comm="syz.0.145" path="ipc:[4026532790]" dev="nsfs" ino=4026532790 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 117.168446][ T6568] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 117.175261][ T6568] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.201768][ T5931] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.213366][ T6568] vhci_hcd vhci_hcd.0: Device attached [ 117.361213][ T6576] vhci_hcd: connection closed [ 117.364938][ T5946] vhci_hcd: stop threads [ 117.382234][ T5946] vhci_hcd: release socket [ 117.396852][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 117.407968][ T5946] vhci_hcd: disconnect device [ 117.420348][ T5931] usb 3-1: config 1 has an invalid interface number: 126 but max is 0 [ 117.428738][ T5931] usb 3-1: config 1 has an invalid interface number: 8 but max is 0 [ 117.442815][ T5931] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 117.568128][ T5931] usb 3-1: config 1 has no interface number 0 [ 117.613406][ T6589] syz_tun: entered allmulticast mode [ 117.757127][ T5931] usb 3-1: config 1 has no interface number 1 [ 117.763348][ T5931] usb 3-1: config 1 interface 126 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 117.776545][ T5931] usb 3-1: config 1 interface 126 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 117.867466][ T5931] usb 3-1: config 1 interface 126 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 117.929672][ T5931] usb 3-1: config 1 interface 126 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 117.995723][ T5931] usb 3-1: too many endpoints for config 1 interface 8 altsetting 150: 128, using maximum allowed: 30 [ 118.037699][ T5931] usb 3-1: config 1 interface 8 altsetting 150 has a duplicate endpoint with address 0xA, skipping [ 118.080834][ T5931] usb 3-1: config 1 interface 8 altsetting 150 bulk endpoint 0xF has invalid maxpacket 8 [ 118.111704][ T5931] usb 3-1: config 1 interface 8 altsetting 150 bulk endpoint 0xC has invalid maxpacket 1024 [ 118.167153][ T5931] usb 3-1: config 1 interface 8 altsetting 150 has an invalid descriptor for endpoint zero, skipping [ 118.216807][ T6583] syz_tun: left allmulticast mode [ 118.262399][ T5931] usb 3-1: config 1 interface 8 altsetting 150 has 5 endpoint descriptors, different from the interface descriptor's value: 128 [ 118.291518][ T5931] usb 3-1: config 1 interface 126 has no altsetting 0 [ 118.304758][ T5931] usb 3-1: config 1 interface 8 has no altsetting 0 [ 118.363733][ T5931] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=e6.cb [ 118.382963][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.390983][ T5931] usb 3-1: Product: ᠊ [ 118.412912][ T5931] usb 3-1: Manufacturer: Ѧ [ 118.417463][ T5931] usb 3-1: SerialNumber: Ф [ 118.494462][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 118.494477][ T30] audit: type=1400 audit(1759070189.378:304): avc: denied { mount } for pid=6590 comm="syz.3.151" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 118.717736][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.761992][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.938074][ T5931] qmi_wwan 3-1:1.126: probe with driver qmi_wwan failed with error -22 [ 119.010850][ T5931] usb 3-1: USB disconnect, device number 4 [ 119.401495][ T30] audit: type=1400 audit(1759070190.278:305): avc: denied { create } for pid=6604 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.571546][ T30] audit: type=1400 audit(1759070190.278:306): avc: denied { connect } for pid=6604 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.591489][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.660841][ T6614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.156'. [ 119.796470][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.156'. [ 120.663337][ T6629] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 120.677846][ T6629] Error validating options; rc = [-22] [ 121.472328][ T6631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.161'. [ 121.639567][ T6614] syz.2.156 (6614): drop_caches: 2 [ 122.022940][ T30] audit: type=1400 audit(1759070192.698:307): avc: denied { read write } for pid=6633 comm="syz.3.162" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.202859][ T30] audit: type=1400 audit(1759070192.698:308): avc: denied { open } for pid=6633 comm="syz.3.162" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.227721][ T30] audit: type=1400 audit(1759070192.858:309): avc: denied { firmware_load } for pid=6633 comm="syz.3.162" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 122.261978][ T30] audit: type=1400 audit(1759070192.888:310): avc: denied { watch } for pid=6633 comm="syz.3.162" path="/30" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.434047][ T6624] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 122.468995][ T6638] syz.3.162 (6638) used greatest stack depth: 18776 bytes left [ 122.542932][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.553154][ T5859] udevd[5859]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 122.563179][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.575727][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.584783][ T6624] Error validating options; rc = [-22] [ 122.596722][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.604530][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 122.607190][ T5966] udevd[5966]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 122.631045][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.662061][ T30] audit: type=1400 audit(1759070193.538:311): avc: denied { mounton } for pid=6641 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 122.762654][ T30] audit: type=1400 audit(1759070193.628:312): avc: denied { write } for pid=6649 comm="syz.3.165" name="cec3" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.870349][ T30] audit: type=1400 audit(1759070193.628:313): avc: denied { open } for pid=6649 comm="syz.3.165" path="/dev/cec3" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.089254][ T1148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.200343][ T1148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.307243][ T1207] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.521741][ T1207] usb 4-1: Using ep0 maxpacket: 8 [ 123.605601][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.995505][ T1207] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 124.015388][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.038492][ T1207] usb 4-1: config 0 descriptor?? [ 124.046734][ T1207] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 124.139172][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 124.139188][ T30] audit: type=1400 audit(1759070195.018:318): avc: denied { mount } for pid=6675 comm="syz.0.170" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.187992][ T1148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.293603][ T6687] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 124.307005][ T6687] Error validating options; rc = [-22] [ 124.739020][ T51] Bluetooth: hci5: command tx timeout [ 124.745458][ T1207] gspca_vc032x: reg_r err -110 [ 124.750273][ T1207] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 125.133230][ T1148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.247167][ T30] audit: type=1400 audit(1759070196.118:319): avc: denied { ioctl } for pid=6690 comm="syz.2.172" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12334 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.760896][ T6641] chnl_net:caif_netlink_parms(): no params data found [ 125.871933][ T1148] bridge_slave_1: left allmulticast mode [ 125.885723][ T1148] bridge_slave_1: left promiscuous mode [ 125.913234][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.962415][ T1148] bridge_slave_0: left allmulticast mode [ 125.968084][ T1148] bridge_slave_0: left promiscuous mode [ 125.978338][ T30] audit: type=1400 audit(1759070196.858:320): avc: denied { create } for pid=6696 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.090520][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.127842][ T30] audit: type=1400 audit(1759070196.888:321): avc: denied { connect } for pid=6696 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.251966][ T30] audit: type=1400 audit(1759070197.138:322): avc: denied { bind } for pid=6696 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.292155][ T30] audit: type=1400 audit(1759070197.158:323): avc: denied { write } for pid=6696 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.346704][ T30] audit: type=1400 audit(1759070197.158:324): avc: denied { read } for pid=6696 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.398993][ T10] usb 4-1: USB disconnect, device number 4 [ 126.600540][ T30] audit: type=1400 audit(1759070197.478:325): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.812448][ T51] Bluetooth: hci5: command tx timeout [ 126.881758][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 127.235211][ T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 127.260499][ T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 127.308467][ T10] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 127.310396][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.358722][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.370705][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.394160][ T1148] bond0 (unregistering): Released all slaves [ 128.561603][ T30] audit: type=1400 audit(1759070199.018:326): avc: denied { setopt } for pid=6711 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.698799][ T6714] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 128.721553][ T30] audit: type=1400 audit(1759070199.028:327): avc: denied { bind } for pid=6711 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 128.887027][ T10] usb 4-1: string descriptor 0 read error: -71 [ 128.891702][ T51] Bluetooth: hci5: command tx timeout [ 128.951957][ T6724] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 128.959616][ T6724] netlink: 'syz.0.177': attribute type 4 has an invalid length. [ 129.053886][ T10] usb 4-1: USB disconnect, device number 5 [ 129.195294][ T30] audit: type=1800 audit(1759070200.058:328): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.179" name="bus" dev="tmpfs" ino=218 res=0 errno=0 [ 129.579448][ T30] audit: type=1400 audit(1759070200.448:329): avc: denied { append } for pid=6730 comm="syz.3.180" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.602577][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.693999][ T30] audit: type=1400 audit(1759070200.448:330): avc: denied { sqpoll } for pid=6730 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 129.807609][ T6733] netlink: 'syz.3.180': attribute type 10 has an invalid length. [ 129.815716][ T6733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.180'. [ 129.892572][ T6739] netlink: del zone limit has 4 unknown bytes [ 129.899572][ T6739] netlink: del zone limit has 4 unknown bytes [ 130.066341][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.229838][ T6746] netlink: 'syz.2.182': attribute type 21 has an invalid length. [ 130.237743][ T6746] netlink: 128 bytes leftover after parsing attributes in process `syz.2.182'. [ 130.981770][ T51] Bluetooth: hci5: command tx timeout [ 130.981980][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.994411][ T6641] bridge_slave_0: entered allmulticast mode [ 131.001248][ T6641] bridge_slave_0: entered promiscuous mode [ 131.010775][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.353771][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.396544][ T6641] bridge_slave_1: entered allmulticast mode [ 131.477521][ T6641] bridge_slave_1: entered promiscuous mode [ 131.497125][ T6733] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 131.507036][ T6733] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 131.522325][ T6733] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 131.538810][ T6731] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 131.548514][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 131.581589][ T6746] netlink: 'syz.2.182': attribute type 6 has an invalid length. [ 131.589264][ T6746] netlink: 3 bytes leftover after parsing attributes in process `syz.2.182'. [ 131.721609][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.905628][ T1148] hsr_slave_0: left promiscuous mode [ 131.906741][ T24] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 131.929678][ T1148] hsr_slave_1: left promiscuous mode [ 131.935988][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.946908][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.957195][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.965325][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.973106][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.320615][ T1148] veth1_macvtap: left promiscuous mode [ 132.346827][ T1148] veth0_macvtap: left promiscuous mode [ 132.349253][ T24] usb 1-1: config 0 has no interface number 0 [ 132.375432][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 132.376127][ T1148] veth1_vlan: left promiscuous mode [ 132.514353][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.081734][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090314][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.117346][ T24] usb 1-1: Product: syz [ 133.124175][ T24] usb 1-1: Manufacturer: syz [ 133.129412][ T24] usb 1-1: SerialNumber: syz [ 133.137146][ T24] usb 1-1: config 0 descriptor?? [ 133.222413][ T24] usb 1-1: can't set config #0, error -71 [ 133.287484][ T24] usb 1-1: USB disconnect, device number 5 [ 133.512186][ T30] audit: type=1400 audit(1759070204.398:331): avc: denied { create } for pid=6750 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.549489][ T30] audit: type=1400 audit(1759070204.428:332): avc: denied { write } for pid=6750 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2578 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.575769][ T30] audit: type=1400 audit(1759070204.428:333): avc: denied { append } for pid=6750 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2578 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.174106][ T30] audit: type=1400 audit(1759070205.058:334): avc: denied { name_bind } for pid=6783 comm="syz.2.189" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 134.214657][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 134.259753][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 134.604460][ T6641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.652081][ T6774] hsr0: entered promiscuous mode [ 134.719877][ T6641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.740775][ T6774] hsr0: left promiscuous mode [ 134.923317][ T6641] team0: Port device team_slave_0 added [ 134.945387][ T6641] team0: Port device team_slave_1 added [ 134.999919][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 135.121032][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.161790][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.187952][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.237335][ T6641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.263479][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.270814][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.325894][ T5959] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.377423][ T6641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.532925][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 135.540747][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.566264][ T1148] IPVS: stop unused estimator thread 0... [ 135.566845][ T5959] usb 4-1: config 11 has an invalid interface number: 8 but max is 1 [ 135.588809][ T5959] usb 4-1: config 11 has an invalid interface number: 235 but max is 1 [ 135.599529][ T6641] hsr_slave_0: entered promiscuous mode [ 135.689602][ T6827] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 135.767493][ T6641] hsr_slave_1: entered promiscuous mode [ 135.784023][ T5959] usb 4-1: config 11 has no interface number 0 [ 135.790227][ T5959] usb 4-1: config 11 has no interface number 1 [ 135.797570][ T6641] debugfs: 'hsr0' already exists in 'hsr' [ 135.803350][ T6641] Cannot create hsr debugfs directory [ 135.810738][ T5959] usb 4-1: config 11 interface 8 has no altsetting 0 [ 135.817612][ T5959] usb 4-1: config 11 interface 235 has no altsetting 0 [ 135.827089][ T5959] usb 4-1: New USB device found, idVendor=1199, idProduct=9061, bcdDevice=55.31 [ 135.837823][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.846034][ T5959] usb 4-1: Product: syz [ 135.850766][ T5959] usb 4-1: Manufacturer: syz [ 135.857198][ T5959] usb 4-1: SerialNumber: syz [ 136.043887][ T6832] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 136.057283][ T6832] Error validating options; rc = [-22] [ 136.571799][ T6827] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 137.806148][ T30] audit: type=1400 audit(1759070208.688:335): avc: denied { audit_write } for pid=6798 comm="syz.3.193" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 137.977673][ T30] audit: type=1400 audit(1759070208.848:336): avc: denied { read } for pid=6798 comm="syz.3.193" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.049273][ T30] audit: type=1400 audit(1759070208.848:337): avc: denied { open } for pid=6798 comm="syz.3.193" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.073024][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.125919][ T6802] syzkaller0: entered promiscuous mode [ 138.133753][ T6802] syzkaller0: entered allmulticast mode [ 138.351668][ T30] audit: type=1400 audit(1759070209.228:338): avc: denied { create } for pid=6852 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.428465][ T5959] usb 4-1: USB disconnect, device number 6 [ 138.962773][ T30] audit: type=1400 audit(1759070209.848:339): avc: denied { connect } for pid=6863 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.026836][ T30] audit: type=1400 audit(1759070209.848:340): avc: denied { write } for pid=6863 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.046411][ T30] audit: type=1400 audit(1759070209.868:341): avc: denied { read } for pid=6863 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.251475][ T5903] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.799279][ T6883] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 139.812768][ T6883] Error validating options; rc = [-22] [ 140.017021][ T5903] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.067420][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.276792][ T5903] usb 1-1: config 0 descriptor?? [ 140.295507][ T5903] cp210x 1-1:0.0: cp210x converter detected [ 140.389354][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 140.398482][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'. [ 140.656551][ T30] audit: type=1400 audit(1759070211.538:342): avc: denied { mounton } for pid=6863 comm="syz.0.205" path="/proc/137/task" dev="proc" ino=11985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 140.768750][ T6890] fuse: Bad value for 'fd' [ 140.869236][ T30] audit: type=1400 audit(1759070211.538:343): avc: denied { associate } for pid=6887 comm="syz.0.205" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 142.565255][ T5903] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 142.586153][ T5903] cp210x 1-1:0.0: querying part number failed [ 142.599604][ T5903] usb 1-1: cp210x converter now attached to ttyUSB0 [ 142.615626][ T5903] usb 1-1: USB disconnect, device number 6 [ 142.628343][ T5903] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.661371][ T5903] cp210x 1-1:0.0: device disconnected [ 142.699883][ T6900] raw_sendmsg: syz.0.211 forgot to set AF_INET. Fix it! [ 142.782224][ T6641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.884449][ T6641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.087166][ T6641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.112752][ T5903] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 143.590351][ T6641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.721503][ T5903] usb 1-1: device descriptor read/64, error -71 [ 143.845872][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.874614][ T6641] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.884464][ T6924] capability: warning: `syz.2.215' uses deprecated v2 capabilities in a way that may be insecure [ 143.913789][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.920922][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.034242][ T5903] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 144.055569][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.062779][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.311557][ T5903] usb 1-1: device descriptor read/64, error -71 [ 144.374677][ T6935] Bluetooth: MGMT ver 1.23 [ 144.703302][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 144.841532][ T24] usb 4-1: device descriptor read/64, error -71 [ 144.862533][ T5903] usb usb1-port1: attempt power cycle [ 144.916778][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 144.954631][ T30] audit: type=1400 audit(1759070215.798:344): avc: denied { ioctl } for pid=6939 comm="syz.1.218" path="socket:[12998]" dev="sockfs" ino=12998 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.101680][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 145.103055][ T6641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.224469][ T5903] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 145.241937][ T24] usb 4-1: device descriptor read/64, error -71 [ 145.252281][ T5903] usb 1-1: device descriptor read/8, error -71 [ 145.362319][ T24] usb usb4-port1: attempt power cycle [ 145.502931][ T5903] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 145.545713][ T5903] usb 1-1: device descriptor read/8, error -71 [ 145.665268][ T5903] usb usb1-port1: unable to enumerate USB device [ 145.742039][ T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 145.814868][ T6969] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 145.828434][ T6969] Error validating options; rc = [-22] [ 145.871501][ T24] usb 4-1: device descriptor read/8, error -71 [ 146.176507][ T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 146.226244][ T6641] veth0_vlan: entered promiscuous mode [ 146.236155][ T24] usb 4-1: device descriptor read/8, error -71 [ 146.249058][ T6641] veth1_vlan: entered promiscuous mode [ 146.294007][ T6641] veth0_macvtap: entered promiscuous mode [ 146.311388][ T6641] veth1_macvtap: entered promiscuous mode [ 146.336147][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.348682][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.363660][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.374676][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.391743][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.419755][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.446432][ T24] usb usb4-port1: unable to enumerate USB device [ 146.514494][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.522587][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.572044][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.580675][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.605440][ T30] audit: type=1400 audit(1759070217.488:345): avc: denied { mount } for pid=6641 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 146.685139][ T30] audit: type=1400 audit(1759070217.558:346): avc: denied { mount } for pid=6641 comm="syz-executor" name="/" dev="gadgetfs" ino=8260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 146.764278][ T6979] netlink: 'syz.5.160': attribute type 1 has an invalid length. [ 146.772442][ T6979] netlink: 232 bytes leftover after parsing attributes in process `syz.5.160'. [ 146.784669][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.160'. [ 146.895948][ T30] audit: type=1400 audit(1759070217.758:347): avc: denied { setopt } for pid=6973 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.956495][ T30] audit: type=1400 audit(1759070217.758:348): avc: denied { write } for pid=6973 comm="syz.2.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.173956][ T5959] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.353585][ T30] audit: type=1400 audit(1759070218.228:349): avc: denied { mount } for pid=6981 comm="syz.3.223" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 147.567308][ T6986] netlink: 'syz.5.222': attribute type 10 has an invalid length. [ 147.614630][ T5959] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 147.783479][ T6986] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 148.257615][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 148.288631][ T5959] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 148.299435][ T30] audit: type=1400 audit(1759070218.378:350): avc: denied { ioctl } for pid=6982 comm="syz.5.222" path="socket:[13459]" dev="sockfs" ino=13459 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.530760][ T5959] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 148.569446][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.618515][ T30] audit: type=1400 audit(1759070219.498:351): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 148.625910][ T5959] usb 1-1: Product: syz [ 148.680639][ T5959] usb 1-1: Manufacturer: syz [ 148.687939][ T5959] usb 1-1: SerialNumber: syz [ 148.702672][ T5959] usb 1-1: config 0 descriptor?? [ 148.713795][ T6972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.721806][ T6972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 148.732643][ T5959] usb 1-1: ucan: probing device on interface #0 [ 149.954778][ T5959] usb 1-1: ucan: could not read protocol version, ret=-71 [ 150.167684][ T7001] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 150.177728][ T7001] bridge1: entered promiscuous mode [ 150.182997][ T7001] bridge1: entered allmulticast mode [ 150.258264][ T5959] usb 1-1: ucan: probe failed; try to update the device firmware [ 150.579790][ T5959] usb 1-1: USB disconnect, device number 11 [ 150.613699][ T7010] overlayfs: failed to clone upperpath [ 150.622526][ T30] audit: type=1400 audit(1759070221.488:352): avc: denied { read } for pid=7012 comm="syz.3.230" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.794417][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 151.081753][ T30] audit: type=1400 audit(1759070221.598:353): avc: denied { append } for pid=7006 comm="syz.0.228" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 151.105391][ T30] audit: type=1400 audit(1759070221.918:354): avc: denied { ioctl } for pid=7012 comm="syz.3.230" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 151.163471][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 151.233222][ T7026] vivid-007: ================= START STATUS ================= [ 151.249501][ T7026] vivid-007: Enable Output Cropping: true [ 151.255321][ T7026] vivid-007: Enable Output Composing: true [ 151.261139][ T7026] vivid-007: Enable Output Scaler: true [ 151.266723][ T7026] vivid-007: Tx RGB Quantization Range: Automatic [ 151.273183][ T7026] vivid-007: Transmit Mode: HDMI [ 151.278124][ T7026] vivid-007: Hotplug Present: 0x00000000 [ 151.283986][ T7026] vivid-007: RxSense Present: 0x00000000 [ 151.289700][ T7026] vivid-007: EDID Present: 0x00000000 [ 151.295164][ T7026] vivid-007: ================== END STATUS ================== [ 151.355405][ T7019] bond0: (slave bond_slave_1): Releasing backup interface [ 151.636925][ T30] audit: type=1400 audit(1759070222.518:355): avc: denied { ioctl } for pid=7030 comm="syz.0.233" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 151.661701][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.800155][ T7024] team0 (unregistering): Port device team_slave_0 removed [ 151.811493][ T5903] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 151.821227][ T7024] team0 (unregistering): Port device team_slave_1 removed [ 151.905999][ T7016] bridge_slave_0: left allmulticast mode [ 151.912674][ T7016] bridge_slave_0: left promiscuous mode [ 151.920246][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.945694][ T7016] bridge_slave_1: left allmulticast mode [ 151.963185][ T5903] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.964720][ T7016] bridge_slave_1: left promiscuous mode [ 151.988351][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 151.991479][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.017618][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.027658][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 152.041349][ T7016] bond0: (slave bond_slave_0): Releasing backup interface [ 152.042175][ T5903] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.058861][ T5903] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.067010][ T5903] usb 6-1: Manufacturer: syz [ 152.067467][ T7016] bond0: (slave bond_slave_1): Releasing backup interface [ 152.074577][ T5903] usb 6-1: config 0 descriptor?? [ 152.095480][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.103108][ T7016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.112198][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.125419][ T7016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.431788][ T5903] rc_core: IR keymap rc-hauppauge not found [ 152.437779][ T5903] Registered IR keymap rc-empty [ 152.447146][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.448676][ T5959] kernel write not supported for file /snd/seq (pid: 5959 comm: kworker/1:7) [ 152.480617][ T7039] input: syz1 as /devices/virtual/input/input7 [ 152.487852][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.506462][ T7029] bridge0: entered promiscuous mode [ 152.512433][ T7029] macvlan2: entered promiscuous mode [ 152.533203][ T30] audit: type=1400 audit(1759070223.408:356): avc: denied { read } for pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.533253][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 152.555701][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.570354][ T7037] unknown channel width for channel at 909000KHz? [ 152.593779][ T30] audit: type=1400 audit(1759070223.408:357): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.600874][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 152.622368][ T30] audit: type=1400 audit(1759070223.418:358): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2842 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.639407][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.682066][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.715961][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.761574][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.781538][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.801696][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.832001][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.871645][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.891965][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.915730][ T5903] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 152.957647][ T5903] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 152.981733][ T5903] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 152.991985][ T5959] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 153.011735][ T5903] usb 6-1: USB disconnect, device number 2 [ 153.333150][ T5959] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 153.345223][ T5959] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 153.357700][ T5959] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 153.367232][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.375527][ T5959] usb 1-1: Product: syz [ 153.379777][ T5959] usb 1-1: Manufacturer: syz [ 153.390161][ T5959] usb 1-1: SerialNumber: syz [ 154.065401][ T5903] usb 1-1: USB disconnect, device number 12 [ 154.129205][ T7083] vivid-007: ================= START STATUS ================= [ 154.137037][ T7083] vivid-007: Enable Output Cropping: true [ 154.142974][ T7083] vivid-007: Enable Output Composing: true [ 154.148791][ T7083] vivid-007: Enable Output Scaler: true [ 154.154402][ T7083] vivid-007: Tx RGB Quantization Range: Automatic [ 154.160831][ T7083] vivid-007: Transmit Mode: HDMI [ 154.165985][ T7083] vivid-007: Hotplug Present: 0x00000000 [ 154.171739][ T7083] vivid-007: RxSense Present: 0x00000000 [ 154.177379][ T7083] vivid-007: EDID Present: 0x00000000 [ 154.182900][ T7083] vivid-007: ================== END STATUS ================== [ 154.631678][ T30] audit: type=1400 audit(1759070225.498:359): avc: denied { execute } for pid=7086 comm="syz.3.245" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 156.491839][ T30] audit: type=1400 audit(1759070227.158:360): avc: denied { name_bind } for pid=7108 comm="syz.2.249" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 156.677229][ T30] audit: type=1400 audit(1759070227.548:361): avc: denied { setopt } for pid=7104 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 156.677278][ T30] audit: type=1400 audit(1759070227.548:362): avc: denied { mount } for pid=7104 comm="syz.0.248" name="/" dev="hugetlbfs" ino=13260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 156.705659][ T30] audit: type=1400 audit(1759070227.588:363): avc: denied { execute } for pid=7104 comm="syz.0.248" path="/bus" dev="hugetlbfs" ino=13262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 156.807952][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.253'. [ 156.808912][ T30] audit: type=1400 audit(1759070227.688:364): avc: denied { setopt } for pid=7124 comm="syz.5.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.008497][ T7132] netlink: 'syz.1.252': attribute type 1 has an invalid length. [ 157.008565][ T7132] netlink: 'syz.1.252': attribute type 4 has an invalid length. [ 157.402510][ T5924] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 157.532116][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.631155][ T5924] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 157.631185][ T5924] usb 3-1: config 0 has no interface number 0 [ 157.641052][ T5924] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 157.641083][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.641104][ T5924] usb 3-1: Product: syz [ 157.641121][ T5924] usb 3-1: Manufacturer: syz [ 157.641137][ T5924] usb 3-1: SerialNumber: syz [ 157.644124][ T5924] usb 3-1: config 0 descriptor?? [ 157.741187][ T10] usb 4-1: device descriptor read/64, error -71 [ 158.541479][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 158.560983][ T7138] infiniband syz2: set active [ 158.561041][ T7138] infiniband syz2: added syz_tun [ 158.608860][ T5924] usb 3-1: Firmware version (0.0) predates our first public release. [ 158.608888][ T5924] usb 3-1: Please update to version 0.2 or newer [ 158.625412][ T7138] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 158.630302][ T7138] infiniband syz2: Couldn't open port 1 [ 158.689913][ T7138] RDS/IB: syz2: added [ 158.690411][ T7138] smc: adding ib device syz2 with port count 1 [ 158.690549][ T7138] smc: ib device syz2 port 1 has pnetid [ 160.002400][ T7158] batadv_slave_1: entered promiscuous mode [ 160.230086][ T5924] usb 3-1: USB disconnect, device number 5 [ 160.871665][ T7169] kAFS: No cell specified [ 160.901564][ T30] audit: type=1400 audit(1759070231.758:365): avc: denied { unmount } for pid=7168 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 161.836938][ T7185] netlink: 'syz.2.257': attribute type 1 has an invalid length. [ 161.853686][ T7185] netlink: 'syz.2.257': attribute type 4 has an invalid length. [ 162.205094][ T7189] netlink: 48 bytes leftover after parsing attributes in process `syz.0.262'. [ 163.041824][ T5924] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 163.059935][ T7155] batadv_slave_1: left promiscuous mode [ 163.241496][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 163.273228][ T5924] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 163.304412][ T5924] usb 4-1: config 0 has no interface number 0 [ 163.341503][ T5924] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 163.376164][ T5924] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xE has an invalid bInterval 111, changing to 10 [ 163.572720][ T5924] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xE has invalid maxpacket 1302, setting to 1024 [ 163.602011][ T5924] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 163.611088][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 163.631608][ T5924] usb 4-1: Product: syz [ 163.635957][ T5924] usb 4-1: SerialNumber: syz [ 163.724327][ T30] audit: type=1400 audit(1759070234.578:366): avc: denied { setopt } for pid=7205 comm="syz.5.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.747074][ T5924] usb 4-1: config 0 descriptor?? [ 164.040593][ T7195] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 164.058828][ T30] audit: type=1400 audit(1759070234.588:367): avc: denied { accept } for pid=7205 comm="syz.5.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.079493][ T5924] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 164.092437][ T30] audit: type=1400 audit(1759070234.978:368): avc: denied { map } for pid=7208 comm="syz.2.267" path="/dev/video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 164.362394][ T1207] usb 4-1: USB disconnect, device number 13 [ 164.652355][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 164.667405][ T7232] kAFS: No cell specified [ 164.674100][ T30] audit: type=1400 audit(1759070235.558:369): avc: denied { unmount } for pid=7231 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.814546][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.829553][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 164.845638][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.868678][ T7241] kAFS: Can only specify source 'none' with -o dyn [ 164.875539][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.897979][ T10] usb 6-1: string descriptor 0 read error: -22 [ 164.905505][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.927566][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.005735][ T10] usb 6-1: 0:2 : does not exist [ 165.237862][ T30] audit: type=1400 audit(1759070236.028:370): avc: denied { ioctl } for pid=7227 comm="syz.2.269" path="socket:[13727]" dev="sockfs" ino=13727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.837492][ T30] audit: type=1400 audit(1759070236.028:371): avc: denied { read } for pid=7227 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.210365][ T7226] QAT: Invalid ioctl 21531 [ 166.285309][ T30] audit: type=1400 audit(1759070237.155:372): avc: denied { append } for pid=7225 comm="syz.5.268" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.639345][ T72] Bluetooth: hci3: Frame reassembly failed (-84) [ 166.739612][ T7263] mmap: syz.1.273 (7263) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.081612][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 167.274434][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.371212][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.418907][ T9] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 167.445858][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.534278][ T9] usb 4-1: config 0 descriptor?? [ 168.661526][ T5852] Bluetooth: hci3: command 0x1003 tx timeout [ 168.668952][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 170.079362][ T9] ortek 0003:05A4:2000.0002: item fetching failed at offset 4/5 [ 170.117217][ T10] usb 6-1: 5:0: failed to get current value for ch 0 (-110) [ 170.239924][ T9] ortek 0003:05A4:2000.0002: probe with driver ortek failed with error -22 [ 170.335316][ T30] audit: type=1400 audit(1759070241.215:373): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 170.365195][ T9] usb 4-1: USB disconnect, device number 14 [ 170.376763][ T10] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 170.471534][ T10] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 170.521931][ T10] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 170.813183][ T10] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 170.873533][ T10] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 170.967043][ T10] usb 6-1: USB disconnect, device number 3 [ 171.026426][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.089339][ T30] audit: type=1400 audit(1759070241.945:374): avc: denied { remount } for pid=7298 comm="syz.0.281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 171.231775][ T30] audit: type=1400 audit(1759070241.955:375): avc: denied { write } for pid=7297 comm="syz.2.280" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 171.263464][ T30] audit: type=1400 audit(1759070241.955:376): avc: denied { ioctl } for pid=7297 comm="syz.2.280" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 171.780951][ T7316] kAFS: No cell specified [ 172.949963][ T7338] process 'syz.5.284' launched './file0' with NULL argv: empty string added [ 173.287306][ T30] audit: type=1400 audit(1759070243.845:377): avc: denied { execute_no_trans } for pid=7318 comm="syz.5.284" path="/14/file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.351780][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 173.396100][ T7341] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 173.802421][ T1207] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 174.212604][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.240257][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.913751][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.946282][ T1207] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.959729][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.990064][ T1207] usb 4-1: config 0 descriptor?? [ 175.549563][ T1207] usbhid 4-1:0.0: can't add hid device: -71 [ 175.646376][ T1207] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.727160][ T1207] usb 4-1: USB disconnect, device number 15 [ 176.171724][ T7383] UBIFS error (pid: 7383): cannot open "c:::", error -22 [ 176.492624][ T30] audit: type=1400 audit(1759070247.145:378): avc: denied { ioctl } for pid=7378 comm="syz.5.295" path="socket:[13915]" dev="sockfs" ino=13915 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 178.112928][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 178.524908][ T7401] tty tty2: ldisc open failed (-12), clearing slot 1 [ 178.777266][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'. [ 179.404281][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 179.546906][ T10] usb 6-1: device descriptor read/64, error -71 [ 179.812147][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 179.852199][ T1207] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 179.951532][ T10] usb 6-1: device descriptor read/64, error -71 [ 180.061819][ T10] usb usb6-port1: attempt power cycle [ 180.117536][ T1207] usb 4-1: config index 0 descriptor too short (expected 234, got 18) [ 180.140723][ T1207] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.177136][ T1207] usb 4-1: config 0 has no interfaces? [ 180.194436][ T1207] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 180.209118][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.242913][ T1207] usb 4-1: Product: syz [ 180.266315][ T1207] usb 4-1: Manufacturer: syz [ 180.286409][ T1207] usb 4-1: SerialNumber: syz [ 180.314244][ T1207] usb 4-1: config 0 descriptor?? [ 180.401942][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 180.444803][ T7436] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 180.461840][ T10] usb 6-1: device descriptor read/8, error -71 [ 180.633276][ T1207] usb 4-1: USB disconnect, device number 16 [ 180.722004][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 180.775502][ T10] usb 6-1: device descriptor read/8, error -71 [ 181.392863][ T10] usb usb6-port1: unable to enumerate USB device [ 181.898985][ T30] audit: type=1400 audit(1759070252.775:379): avc: denied { ioctl } for pid=7450 comm="syz.2.310" path="socket:[14069]" dev="sockfs" ino=14069 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 181.932314][ T30] audit: type=1400 audit(1759070252.815:380): avc: denied { getopt } for pid=7456 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.422321][ T7458] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 182.486940][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 182.519410][ T7458] batman_adv: batadv0: Adding interface: team0 [ 182.664475][ T7458] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 183.211825][ T30] audit: type=1400 audit(1759070254.085:381): avc: denied { setopt } for pid=7475 comm="syz.5.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 184.025416][ T30] audit: type=1400 audit(1759070254.575:382): avc: denied { accept } for pid=7485 comm="syz.5.319" path="socket:[14130]" dev="sockfs" ino=14130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.963796][ T7501] ubi31: attaching mtd0 [ 185.014674][ T7501] ubi31: scanning is finished [ 185.019428][ T7501] ubi31: empty MTD device detected [ 186.041538][ T5931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 187.228413][ T7501] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 187.265617][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 187.414970][ T7501] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 187.442466][ T7501] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 187.449883][ T7501] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 187.644325][ T7523] use of bytesused == 0 is deprecated and will be removed in the future, [ 187.652848][ T7523] use the actual size instead. [ 187.901976][ T7501] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 187.927969][ T7501] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 187.941600][ T7501] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3946374609 [ 188.114014][ T30] audit: type=1400 audit(1759070258.865:383): avc: denied { append } for pid=7517 comm="syz.3.327" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 188.150129][ T7501] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 188.243741][ T7515] ubi31: background thread "ubi_bgt31d" started, PID 7515 [ 188.280183][ T30] audit: type=1400 audit(1759070259.155:384): avc: denied { setopt } for pid=7526 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 188.308752][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 188.333382][ T5931] usb 3-1: can't read configurations, error -71 [ 188.411569][ T30] audit: type=1400 audit(1759070259.175:385): avc: denied { connect } for pid=7526 comm="syz.5.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 188.505991][ T7535] FAULT_INJECTION: forcing a failure. [ 188.505991][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 188.571823][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.5.332 Not tainted syzkaller #0 PREEMPT(full) [ 188.571854][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.571871][ T7535] Call Trace: [ 188.571878][ T7535] [ 188.571886][ T7535] dump_stack_lvl+0x16c/0x1f0 [ 188.571929][ T7535] should_fail_ex+0x512/0x640 [ 188.571959][ T7535] _copy_from_user+0x2e/0xd0 [ 188.571990][ T7535] copy_msghdr_from_user+0x98/0x160 [ 188.572017][ T7535] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 188.572057][ T7535] ___sys_sendmsg+0xfe/0x1d0 [ 188.572084][ T7535] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.572145][ T7535] __sys_sendmsg+0x16d/0x220 [ 188.572171][ T7535] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.572216][ T7535] do_syscall_64+0xcd/0x4e0 [ 188.572245][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.572267][ T7535] RIP: 0033:0x7fdf1198eec9 [ 188.572288][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.572306][ T7535] RSP: 002b:00007fdf1283e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.572326][ T7535] RAX: ffffffffffffffda RBX: 00007fdf11be5fa0 RCX: 00007fdf1198eec9 [ 188.572340][ T7535] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 188.572354][ T7535] RBP: 00007fdf1283e090 R08: 0000000000000000 R09: 0000000000000000 [ 188.572366][ T7535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.572379][ T7535] R13: 00007fdf11be6038 R14: 00007fdf11be5fa0 R15: 00007ffc289308e8 [ 188.572407][ T7535] [ 188.753570][ T7537] overlayfs: failed to clone upperpath [ 188.834976][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 189.629626][ T30] audit: type=1400 audit(1759070260.505:386): avc: denied { listen } for pid=7545 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 190.892271][ T5931] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 191.057713][ T7542] Bluetooth: hci0: command 0x0406 tx timeout [ 191.085783][ T7542] Bluetooth: hci1: command 0x0406 tx timeout [ 191.092001][ T7542] Bluetooth: hci2: command 0x0406 tx timeout [ 191.131856][ T7542] Bluetooth: hci4: command 0x0405 tx timeout [ 191.252517][ T5931] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 191.260715][ T5931] usb 3-1: config 8 has no interface number 0 [ 191.267496][ T5931] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 191.374112][ T5931] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 191.385667][ T5931] usb 3-1: config 8 interface 177 has no altsetting 0 [ 191.392620][ T5931] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 191.402389][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.415914][ T7552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.643571][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.658849][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.713544][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.743795][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.801066][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.861115][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.884147][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.943636][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.975595][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.999033][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.037519][ T5931] usb 3-1: string descriptor 0 read error: -71 [ 192.093308][ T5931] ir_toy 3-1:8.177: required endpoints not found [ 192.215595][ T5931] usb 3-1: USB disconnect, device number 8 [ 192.673942][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 192.831534][ T10] usb 6-1: device descriptor read/64, error -71 [ 192.996707][ T5924] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 193.121610][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 193.261541][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 194.221428][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.227942][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.337290][ T5924] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 194.347580][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.817609][ T10] usb 6-1: device descriptor read/64, error -71 [ 194.832980][ T5924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.861807][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.879234][ T5924] usb 3-1: Product: 儸칯猭痣⻵זּ㴳⮙扶:繸螲틶ፗ᝕횣嬛텺싓톌忋સ૷贩ჼ旾賓㡝폶뀦頏ួ㨁爗鶂콧⺲뺄뻌散㛭ᠥ霐ᐻ괡㺺║醡0떼鋛 [ 194.970156][ T10] usb usb6-port1: attempt power cycle [ 195.064068][ T5924] usb 3-1: Manufacturer: Я [ 195.293602][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.344683][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.407954][ T7626] netlink: 'syz.5.354': attribute type 1 has an invalid length. [ 195.487881][ T7626] gretap1: entered promiscuous mode [ 195.961219][ T30] audit: type=1400 audit(1759070266.835:387): avc: denied { getopt } for pid=7639 comm="syz.3.359" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.038172][ T7626] macvlan3: entered promiscuous mode [ 196.045649][ T7626] macvlan3: entered allmulticast mode [ 196.105432][ T7644] ALSA: seq fatal error: cannot create timer (-19) [ 196.114037][ T7644] tmpfs: Unknown parameter 'R^ grpquota_inodehar' [ 196.121259][ T30] audit: type=1400 audit(1759070266.995:388): avc: denied { mounton } for pid=7641 comm="syz.3.360" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 196.157541][ T7644] ISOFS: Unable to identify CD-ROM format. [ 196.177455][ T7626] bond1: entered promiscuous mode [ 196.186706][ T7626] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 196.200108][ T7626] bond1: left promiscuous mode [ 196.211017][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 196.262590][ T7647] netlink: 'syz.1.361': attribute type 2 has an invalid length. [ 196.411803][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 196.558600][ T7646] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 196.568089][ T7646] macvtap1: entered allmulticast mode [ 196.578566][ T24] usb 4-1: config 0 has no interfaces? [ 196.584518][ T7646] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 196.594971][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 196.609592][ T7646] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 196.624211][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.635757][ T7646] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 196.669754][ T24] usb 4-1: config 0 descriptor?? [ 196.883935][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.892756][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.905105][ T24] usb 4-1: USB disconnect, device number 17 [ 196.986560][ T5924] usb 3-1: 0:2 : does not exist [ 197.029046][ T5924] usb 3-1: USB disconnect, device number 9 [ 197.085319][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.361706][ T5931] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 197.431614][ T5959] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 197.670630][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.681830][ T5931] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 197.690784][ T5931] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 197.700527][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.732608][ T5931] usb 6-1: config 0 descriptor?? [ 197.749002][ T30] audit: type=1400 audit(1759070268.625:389): avc: denied { shutdown } for pid=7667 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.780577][ T5931] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 197.791689][ T5924] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.800108][ T30] audit: type=1400 audit(1759070268.625:390): avc: denied { read } for pid=7667 comm="syz.0.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.802704][ T5931] dvb-usb: bulk message failed: -22 (3/0) [ 197.827308][ T5959] usb 4-1: config 0 has no interfaces? [ 197.833158][ T5959] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 197.842550][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.854058][ T5959] usb 4-1: config 0 descriptor?? [ 197.891663][ T5931] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 197.927998][ T5931] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 197.941056][ T5931] usb 6-1: media controller created [ 197.954929][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.980963][ T7657] dvb-usb: bulk message failed: -22 (2/0) [ 197.990190][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 198.011650][ T5924] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 198.030631][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.194096][ T30] audit: type=1400 audit(1759070268.925:391): avc: denied { mount } for pid=7671 comm="syz.0.368" name="/" dev="ramfs" ino=15012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 198.220896][ T5931] dvb-usb: bulk message failed: -22 (6/0) [ 198.230368][ T5924] usb 3-1: config 0 descriptor?? [ 198.232438][ T5931] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 198.267919][ T5931] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 198.291275][ T5931] dvb-usb: schedule remote query interval to 150 msecs. [ 198.295113][ T5924] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 198.313630][ T5931] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 198.473316][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 198.480074][ T5903] dvb-usb: error while querying for an remote control event. [ 198.662814][ T5903] dvb-usb: bulk message failed: -22 (1/0) [ 198.669106][ T5903] dvb-usb: error while querying for an remote control event. [ 198.831566][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 198.848114][ T5931] dvb-usb: error while querying for an remote control event. [ 198.898475][ T5924] gspca_vc032x: reg_w err -71 [ 198.915340][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.925805][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.942716][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.951480][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.958977][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.964411][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.969984][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.975699][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.981271][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.986792][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 198.994683][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.000148][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.005761][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.011210][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.019679][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.021938][ T5931] dvb-usb: bulk message failed: -22 (1/0) [ 199.031074][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.036603][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.042426][ T5924] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.048015][ T5924] gspca_vc032x: Unknown sensor... [ 199.053959][ T5924] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 199.090557][ T5931] dvb-usb: error while querying for an remote control event. [ 199.092757][ T5924] usb 3-1: USB disconnect, device number 10 [ 199.288954][ T5931] usb 6-1: USB disconnect, device number 11 [ 199.344720][ T5931] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 200.049470][ T5924] usb 4-1: USB disconnect, device number 18 [ 200.387142][ T7698] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 200.400860][ T7698] Error validating options; rc = [-22] [ 201.078507][ T30] audit: type=1400 audit(1759070271.955:392): avc: denied { create } for pid=7699 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 201.239245][ T7710] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 201.247006][ T7710] netlink: 'syz.3.379': attribute type 4 has an invalid length. [ 202.119442][ T30] audit: type=1400 audit(1759070272.585:393): avc: denied { append } for pid=7714 comm="syz.5.380" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.142931][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.201521][ T30] audit: type=1400 audit(1759070273.075:394): avc: denied { bind } for pid=7723 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.221392][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.363243][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 203.103209][ T7746] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 203.116618][ T7746] Error validating options; rc = [-22] [ 203.789765][ T7741] ip6erspan0: entered allmulticast mode [ 204.140902][ T7751] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 204.148579][ T7751] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 205.657416][ T7778] overlayfs: failed to clone upperpath [ 205.726901][ T7779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.399'. [ 206.495031][ T7781] overlayfs: failed to clone upperpath [ 206.824527][ T7793] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 206.837976][ T7793] Error validating options; rc = [-22] [ 209.701666][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 211.579767][ T7838] netlink: 'syz.0.415': attribute type 2 has an invalid length. [ 211.927080][ T7848] warning: `syz.1.418' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 212.351356][ T30] audit: type=1400 audit(1759070283.225:395): avc: denied { getopt } for pid=7850 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.105819][ T7866] netlink: 'syz.5.421': attribute type 12 has an invalid length. [ 213.853077][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.426'. [ 214.750094][ T7886] Invalid ELF section header size [ 214.766788][ T30] audit: type=1326 audit(1759070285.625:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 214.937229][ T7897] ptrace attach of "./syz-executor exec"[6641] was attempted by "./syz-executor exec"[7897] [ 215.024684][ T30] audit: type=1326 audit(1759070285.625:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 215.049253][ T30] audit: type=1326 audit(1759070285.625:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 215.103414][ T30] audit: type=1326 audit(1759070285.625:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 215.127640][ T30] audit: type=1326 audit(1759070285.625:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 215.238888][ T30] audit: type=1326 audit(1759070285.625:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 215.269566][ T7897] befs: (nbd5): No write support. Marking filesystem read-only [ 215.277864][ T7897] befs: (nbd5): unable to read superblock [ 215.331734][ T30] audit: type=1326 audit(1759070285.625:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 215.473067][ T30] audit: type=1326 audit(1759070285.625:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 215.501532][ T30] audit: type=1326 audit(1759070285.625:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7881 comm="syz.5.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 216.498865][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 218.098849][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 218.098869][ T30] audit: type=1400 audit(1759070288.595:440): avc: denied { map } for pid=7932 comm="syz.5.442" path="socket:[16410]" dev="sockfs" ino=16410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 218.455875][ T7945] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 218.463560][ T7945] netlink: 'syz.3.443': attribute type 4 has an invalid length. [ 218.648199][ T7953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.651670][ T30] audit: type=1400 audit(1759070289.515:441): avc: denied { create } for pid=7951 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 218.660674][ T7954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.698388][ T30] audit: type=1400 audit(1759070289.575:442): avc: denied { setopt } for pid=7951 comm="syz.0.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.727033][ T7970] ubi: mtd0 is already attached to ubi31 [ 220.342943][ T1207] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 220.352139][ T30] audit: type=1400 audit(1759070291.225:443): avc: denied { create } for pid=7975 comm="syz.0.451" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.374009][ T7976] fuse: Bad value for 'group_id' [ 220.378965][ T7976] fuse: Bad value for 'group_id' [ 220.423290][ T30] audit: type=1400 audit(1759070291.255:444): avc: denied { mounton } for pid=7975 comm="syz.0.451" path="/101/file0" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.588831][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 220.646127][ T1207] usb 3-1: Using ep0 maxpacket: 16 [ 221.401978][ T1207] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 221.410276][ T1207] usb 3-1: config 0 has no interface number 0 [ 221.418827][ T1207] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 221.430675][ T1207] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xE has an invalid bInterval 111, changing to 10 [ 221.441915][ T1207] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xE has invalid maxpacket 1302, setting to 1024 [ 221.455005][ T1207] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 221.471546][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 221.543621][ T1207] usb 3-1: Product: syz [ 221.547814][ T1207] usb 3-1: SerialNumber: syz [ 221.561232][ T1207] usb 3-1: config 0 descriptor?? [ 221.570496][ T7970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.580682][ T1207] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 221.678715][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'. [ 221.722813][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 221.867177][ T5903] usb 3-1: USB disconnect, device number 11 [ 222.070777][ T8001] capability: warning: `syz.1.459' uses 32-bit capabilities (legacy support in use) [ 222.626605][ T30] audit: type=1400 audit(1759070293.505:445): avc: denied { bind } for pid=8010 comm="syz.0.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.728603][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 222.806227][ T30] audit: type=1400 audit(1759070293.505:446): avc: denied { name_bind } for pid=8010 comm="syz.0.463" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 222.900114][ T8026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56848 sclass=netlink_route_socket pid=8026 comm=syz.0.464 [ 222.936877][ T30] audit: type=1400 audit(1759070293.505:447): avc: denied { node_bind } for pid=8010 comm="syz.0.463" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 224.376570][ T8055] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.471'. [ 225.163588][ T8060] ubi: mtd0 is already attached to ubi31 [ 225.405907][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 225.646004][ T30] audit: type=1400 audit(1759070296.515:448): avc: denied { accept } for pid=8042 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 225.941682][ T5903] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 226.151671][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 226.158568][ T5903] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 226.167800][ T5903] usb 3-1: config 0 has no interface number 0 [ 226.181466][ T5903] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 226.229952][ T5903] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xE has an invalid bInterval 111, changing to 10 [ 226.265520][ T5903] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0xE has invalid maxpacket 1302, setting to 1024 [ 226.280182][ T5903] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 226.289517][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 226.350298][ T8070] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 226.391742][ T30] audit: type=1400 audit(1759070297.225:449): avc: denied { ioctl } for pid=8069 comm="syz.0.475" path="socket:[15955]" dev="sockfs" ino=15955 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.481459][ T5903] usb 3-1: Product: syz [ 226.497262][ T8077] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'. [ 226.515565][ T8077] netlink: 23 bytes leftover after parsing attributes in process `syz.5.476'. [ 226.524540][ T5903] usb 3-1: SerialNumber: syz [ 226.549369][ T5903] usb 3-1: config 0 descriptor?? [ 226.590522][ T8060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.601347][ T5903] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 226.808120][ T5963] usb 3-1: USB disconnect, device number 12 [ 226.821487][ T5924] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 227.221571][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 227.231917][ T5924] usb 6-1: unable to get BOS descriptor or descriptor too short [ 227.242379][ T5924] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 227.269382][ T5924] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 227.621471][ T5924] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 227.631008][ T5924] usb 6-1: config 128 has no interface number 0 [ 227.791928][ T5924] usb 6-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0x74, changing to 0x4 [ 228.084196][ T30] audit: type=1400 audit(1759070298.945:450): avc: denied { write } for pid=8093 comm="syz.2.480" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.167361][ T30] audit: type=1400 audit(1759070298.995:451): avc: denied { open } for pid=8093 comm="syz.2.480" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.269662][ T30] audit: type=1400 audit(1759070299.105:452): avc: denied { read } for pid=8093 comm="syz.2.480" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 228.486869][ T8070] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 228.500539][ T8080] wg1: entered promiscuous mode [ 228.505757][ T8080] wg1: entered allmulticast mode [ 228.518541][ T8088] bridge0: port 1(syz_tun) entered blocking state [ 228.534847][ T8088] bridge0: port 1(syz_tun) entered disabled state [ 228.544374][ T8088] syz_tun: entered allmulticast mode [ 228.823886][ T8088] syz_tun: entered promiscuous mode [ 228.864539][ T8088] bridge0: port 1(syz_tun) entered blocking state [ 228.871428][ T8088] bridge0: port 1(syz_tun) entered forwarding state [ 228.882280][ T5924] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x4 has invalid maxpacket 9529, setting to 1024 [ 228.893850][ T5924] usb 6-1: config 128 interface 127 altsetting 14 bulk endpoint 0x4 has invalid maxpacket 1024 [ 228.945582][ T5924] usb 6-1: config 128 interface 127 has no altsetting 0 [ 228.979953][ T8089] bridge0: port 1(syz_tun) entered learning state [ 229.007107][ T30] audit: type=1400 audit(1759070299.885:453): avc: denied { unmount } for pid=5865 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 229.029779][ T5924] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 229.040539][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.048814][ T5924] usb 6-1: Product: syz [ 229.054896][ T5924] usb 6-1: Manufacturer: syz [ 229.146088][ T5924] usb 6-1: SerialNumber: syz [ 229.188429][ T8083] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 229.577495][ T30] audit: type=1400 audit(1759070300.455:454): avc: denied { write } for pid=8108 comm="syz.2.484" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 229.636703][ T5924] usb 6-1: USB disconnect, device number 12 [ 229.726182][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.988001][ T30] audit: type=1400 audit(1759070300.865:455): avc: denied { mounton } for pid=8120 comm="syz.1.486" path="/125/file0" dev="tmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 230.011829][ T8121] fuse: Unknown parameter '' [ 230.019762][ T8121] 9p: Unknown Cache mode or invalid value fk [ 230.180314][ T8119] sctp: [Deprecated]: syz.0.487 (pid 8119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.180314][ T8119] Use struct sctp_sack_info instead [ 230.201746][ T30] audit: type=1400 audit(1759070301.055:456): avc: denied { write } for pid=8118 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 231.542195][ T8138] dummy0: entered allmulticast mode [ 231.600315][ T8145] dummy0: left allmulticast mode [ 231.801431][ T30] audit: type=1400 audit(1759070302.675:457): avc: denied { append } for pid=8151 comm="syz.5.496" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 232.673398][ T8168] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 232.686864][ T8168] Error validating options; rc = [-22] [ 232.701250][ T30] audit: type=1400 audit(1759070303.195:458): avc: denied { getopt } for pid=8162 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 233.912778][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 233.983860][ T8180] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 234.180309][ T8188] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 234.225973][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 234.254139][ T10] usb 4-1: New USB device strings: Mfr=11, Product=2, SerialNumber=3 [ 234.278180][ T8187] bridge_slave_0: left allmulticast mode [ 234.291525][ T8187] bridge_slave_0: left promiscuous mode [ 234.297399][ T10] usb 4-1: Product: syz [ 234.301612][ T10] usb 4-1: Manufacturer: syz [ 234.306337][ T10] usb 4-1: SerialNumber: syz [ 234.313647][ T10] usb 4-1: config 0 descriptor?? [ 234.323859][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.505'. [ 234.381747][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.414009][ T8187] bridge_slave_1: left allmulticast mode [ 234.419812][ T8187] bridge_slave_1: left promiscuous mode [ 234.425868][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.444310][ T8187] bond0: (slave bond_slave_0): Releasing backup interface [ 234.466848][ T8187] bond0: (slave bond_slave_1): Releasing backup interface [ 234.500300][ T8187] team0: Port device team_slave_0 removed [ 234.589954][ T8187] team0: Port device team_slave_1 removed [ 234.629003][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.753347][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.786823][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.862311][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.884087][ T8187] bond0: (slave wlan1): Releasing backup interface [ 234.973574][ T10] peak_usb 4-1:0.0: PEAK-System PCAN-USB X6 v157 fw v95.171.0 (2 channels) [ 235.002752][ T10] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 235.009541][ T10] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 235.024983][ T10] peak_usb 4-1:0.0 can0: sending command failure: -8 [ 235.357790][ T8185] macvlan2: entered promiscuous mode [ 235.391508][ T8185] macvlan2: entered allmulticast mode [ 235.413103][ T8185] bond1: entered promiscuous mode [ 235.418482][ T8185] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 235.437334][ T8185] bond1: left promiscuous mode [ 235.551856][ T10] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -8 [ 235.891801][ T30] audit: type=1400 audit(1759070306.755:459): avc: denied { ioctl } for pid=8198 comm="syz.0.507" path="socket:[16765]" dev="sockfs" ino=16765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.918032][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.395885][ T5963] usb 4-1: USB disconnect, device number 19 [ 237.130977][ T8216] netlink: 'syz.5.511': attribute type 1 has an invalid length. [ 237.138757][ T8216] netlink: 'syz.5.511': attribute type 4 has an invalid length. [ 237.375840][ T8221] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 237.389375][ T8221] Error validating options; rc = [-22] [ 241.070937][ T8251] overlayfs: upper fs does not support tmpfile. [ 241.082238][ T5931] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 241.096936][ T8251] overlayfs: upper fs does not support tmpfile. [ 241.374937][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.386098][ T5931] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 241.395354][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.406737][ T5931] usb 6-1: config 0 descriptor?? [ 241.420005][ T8269] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 241.427735][ T8269] netlink: 'syz.2.524': attribute type 4 has an invalid length. [ 241.587005][ T30] audit: type=1400 audit(1759070312.465:460): avc: denied { create } for pid=8272 comm="syz.0.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 241.755714][ T30] audit: type=1400 audit(1759070312.625:461): avc: denied { create } for pid=8275 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.796655][ T30] audit: type=1400 audit(1759070312.625:462): avc: denied { setopt } for pid=8275 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.815975][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.834345][ T30] audit: type=1400 audit(1759070312.625:463): avc: denied { setattr } for pid=8275 comm="syz.1.528" name="PINGv6" dev="sockfs" ino=17019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.860874][ T5931] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 241.875341][ T5931] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 241.883874][ T5931] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 241.891184][ T5931] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 241.898895][ T30] audit: type=1400 audit(1759070312.625:464): avc: denied { bind } for pid=8275 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.918531][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.924804][ T5931] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 241.932578][ T5931] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 241.941196][ T5931] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 241.975980][ T30] audit: type=1400 audit(1759070312.625:465): avc: denied { name_bind } for pid=8275 comm="syz.1.528" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 242.004682][ T5931] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input0 [ 242.212324][ T30] audit: type=1400 audit(1759070312.625:466): avc: denied { node_bind } for pid=8275 comm="syz.1.528" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 242.234351][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.414644][ T8294] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:59392 [ 242.521473][ T30] audit: type=1400 audit(1759070312.855:467): avc: denied { ioctl } for pid=8280 comm="syz.3.531" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 242.726708][ T30] audit: type=1400 audit(1759070313.215:468): avc: denied { getopt } for pid=8289 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.813531][ T5591] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 242.825388][ T30] audit: type=1400 audit(1759070313.315:469): avc: denied { module_request } for pid=8280 comm="syz.3.531" kmod=6E65746465762D02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 243.013415][ T5591] usb 3-1: config 0 has no interfaces? [ 243.019308][ T5591] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.054261][ T5591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.120446][ T5591] usb 3-1: config 0 descriptor?? [ 243.344569][ T5591] usb 3-1: USB disconnect, device number 13 [ 244.022096][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 244.861582][ T5924] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 245.181478][ T5924] usb 3-1: device descriptor read/64, error -71 [ 245.199927][ T5931] usb 6-1: USB disconnect, device number 13 [ 245.431507][ T5924] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 246.314897][ T5924] usb 3-1: device descriptor read/64, error -71 [ 246.442137][ T5924] usb usb3-port1: attempt power cycle [ 246.695707][ T8366] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 246.821247][ T8363] macvlan2: entered promiscuous mode [ 246.826709][ T8363] macvlan2: entered allmulticast mode [ 246.834316][ T8363] bond2: entered promiscuous mode [ 246.840560][ T8363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 246.886617][ T8363] bond2: left promiscuous mode [ 246.933457][ T5924] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 246.991051][ T8365] 9pnet_fd: Insufficient options for proto=fd [ 247.387956][ T5858] Bluetooth: hci5: command 0x0406 tx timeout [ 247.461312][ T5924] usb 3-1: device descriptor read/8, error -71 [ 247.897039][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 247.897056][ T30] audit: type=1400 audit(1759070318.730:472): avc: denied { setopt } for pid=8376 comm="syz.5.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 248.182648][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 248.308625][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'. [ 248.601488][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 248.788805][ T5931] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 249.113204][ T5931] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 249.128397][ T5931] usb 4-1: config 0 has no interface number 0 [ 249.187223][ T5931] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 249.257579][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 249.314586][ T5931] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.340393][ T5931] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 249.351767][ T8402] bridge_slave_1: left allmulticast mode [ 249.357432][ T8402] bridge_slave_1: left promiscuous mode [ 249.456951][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.476881][ T5931] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 249.544935][ T8402] bridge_slave_0: left allmulticast mode [ 249.560905][ T8402] bridge_slave_0: left promiscuous mode [ 249.601403][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.612089][ T5931] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 249.624848][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.651127][ T5931] usb 4-1: Product: syz [ 249.655599][ T5931] usb 4-1: Manufacturer: syz [ 249.661451][ T5931] usb 4-1: SerialNumber: syz [ 249.708258][ T5931] usb 4-1: config 0 descriptor?? [ 249.757785][ T5931] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 249.808158][ T5931] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input10 [ 249.959959][ T5931] usb 4-1: USB disconnect, device number 20 [ 250.251548][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 250.421883][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 250.540130][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.019635][ T9] usb 3-1: config 5 has an invalid interface number: 101 but max is 0 [ 251.143775][ T9] usb 3-1: config 5 has an invalid descriptor of length 111, skipping remainder of the config [ 251.178345][ T9] usb 3-1: config 5 has no interface number 0 [ 251.196759][ T9] usb 3-1: too many endpoints for config 5 interface 101 altsetting 97: 170, using maximum allowed: 30 [ 251.224488][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.240936][ T9] usb 3-1: config 5 interface 101 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 251.256613][ T9] usb 3-1: config 5 interface 101 has no altsetting 0 [ 251.264358][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 251.276126][ T10] usb 6-1: can't read configurations, error -71 [ 251.312847][ T30] audit: type=1400 audit(1759070322.200:473): avc: denied { setopt } for pid=8420 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 251.332514][ T8421] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20000 [ 251.451260][ T9] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.fa [ 251.460975][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.469108][ T9] usb 3-1: Product: syz [ 251.473367][ T9] usb 3-1: Manufacturer: syz [ 251.478024][ T9] usb 3-1: SerialNumber: syz [ 252.158041][ T9] cypress_m8 3-1:5.101: DeLorme Earthmate USB converter detected [ 252.168377][ T9] earthmate ttyUSB0: required endpoint is missing [ 252.179717][ T9] usb 3-1: USB disconnect, device number 18 [ 252.197856][ T9] cypress_m8 3-1:5.101: device disconnected [ 252.852294][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.5.569'. [ 254.971567][ T1207] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 255.258662][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 255.269307][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 255.296180][ T8465] evm: overlay not supported [ 255.313181][ T1207] usb 6-1: device descriptor read/64, error -71 [ 255.534221][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.540799][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.567402][ T1207] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 255.701602][ T1207] usb 6-1: device descriptor read/64, error -71 [ 255.882395][ T1207] usb usb6-port1: attempt power cycle [ 255.941412][ T30] audit: type=1400 audit(1759070326.820:474): avc: denied { getopt } for pid=8460 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.225302][ T1207] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 256.254078][ T1207] usb 6-1: device descriptor read/8, error -71 [ 256.285869][ T30] audit: type=1400 audit(1759070327.170:475): avc: denied { ioctl } for pid=8477 comm="syz.3.579" path="socket:[18578]" dev="sockfs" ino=18578 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.311621][ T8478] tipc: Started in network mode [ 256.316503][ T8478] tipc: Node identity 9e15ce6047b8, cluster identity 4711 [ 256.332207][ T8478] tipc: Enabled bearer , priority 0 [ 256.370126][ T8479] syzkaller0: entered promiscuous mode [ 256.509053][ T8479] syzkaller0: entered allmulticast mode [ 256.537743][ T1207] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 256.764328][ T1207] usb 6-1: device descriptor read/8, error -71 [ 257.507587][ T5924] tipc: Node number set to 3652046432 [ 257.552806][ T8478] tipc: Resetting bearer [ 257.582051][ T1207] usb usb6-port1: unable to enumerate USB device [ 257.665157][ T8477] tipc: Resetting bearer [ 257.782647][ T8477] tipc: Disabling bearer [ 260.614353][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.589'. [ 261.552989][ T30] audit: type=1400 audit(1759070332.430:476): avc: denied { map } for pid=8518 comm="syz.3.588" path="socket:[17693]" dev="sockfs" ino=17693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.698578][ T8539] tipc: Can't bind to reserved service type 0 [ 261.772150][ T30] audit: type=1400 audit(1759070332.430:477): avc: denied { read } for pid=8518 comm="syz.3.588" path="socket:[17693]" dev="sockfs" ino=17693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 261.929123][ T8535] Falling back ldisc for ttyprintk. [ 261.941451][ T30] audit: type=1400 audit(1759070332.590:478): avc: denied { listen } for pid=8518 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.751529][ T1207] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 262.951692][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 262.963927][ T1207] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.986912][ T8552] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 263.030595][ T8552] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 263.047437][ T1207] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 263.205064][ T1207] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 263.711530][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 263.719772][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.888360][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 263.899200][ T8545] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.904122][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 264.862141][ T10] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 264.873518][ T1207] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.051624][ T10] usb 6-1: device descriptor read/64, error -71 [ 265.225878][ T8545] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 265.254153][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.274048][ T30] audit: type=1400 audit(1759070336.160:479): avc: denied { accept } for pid=8564 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.297581][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.306032][ T9] usb 3-1: Product: syz [ 265.311564][ T9] usb 3-1: Manufacturer: syz [ 265.332349][ T8545] bond2: entered promiscuous mode [ 265.340857][ T9] usb 3-1: SerialNumber: syz [ 265.346170][ T8545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.502324][ T10] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 265.722432][ T10] usb 6-1: device descriptor read/64, error -71 [ 265.873648][ T10] usb usb6-port1: attempt power cycle [ 266.739930][ T1207] usb 4-1: USB disconnect, device number 21 [ 266.754966][ T30] audit: type=1326 audit(1759070337.580:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 266.761315][ T8596] pim6reg: entered allmulticast mode [ 266.987654][ T30] audit: type=1326 audit(1759070337.580:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 267.096117][ T30] audit: type=1326 audit(1759070337.580:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 267.197419][ T9] usb 3-1: can't set config #1, error -71 [ 267.300285][ T9] usb 3-1: USB disconnect, device number 19 [ 267.311447][ T30] audit: type=1326 audit(1759070337.580:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 267.374606][ T8603] qnx6: unable to read the first superblock [ 267.492562][ T30] audit: type=1326 audit(1759070337.580:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1198eec9 code=0x7ffc0000 [ 267.515992][ T30] audit: type=1326 audit(1759070337.580:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf11990de7 code=0x7ffc0000 [ 267.546521][ T30] audit: type=1326 audit(1759070337.580:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdf11990d5c code=0x7ffc0000 [ 267.589421][ T8603] qnx6: unable to read the first superblock [ 268.066339][ T8603] qnx6: unable to read the first superblock [ 268.085950][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 268.126435][ T30] audit: type=1326 audit(1759070337.580:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdf11990c94 code=0x7ffc0000 [ 268.242821][ T30] audit: type=1326 audit(1759070337.580:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdf11990c94 code=0x7ffc0000 [ 268.454451][ T30] audit: type=1326 audit(1759070337.580:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8592 comm="syz.5.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf1198db2a code=0x7ffc0000 [ 268.680131][ T8600] syz.3.609: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.698894][ T5959] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 268.760391][ T8600] CPU: 1 UID: 0 PID: 8600 Comm: syz.3.609 Not tainted syzkaller #0 PREEMPT(full) [ 268.760437][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.760451][ T8600] Call Trace: [ 268.760458][ T8600] [ 268.760467][ T8600] dump_stack_lvl+0x16c/0x1f0 [ 268.760498][ T8600] warn_alloc+0x248/0x3a0 [ 268.760522][ T8600] ? __pfx_warn_alloc+0x10/0x10 [ 268.760553][ T8600] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 268.760579][ T8600] ? __vmalloc_node_noprof+0xad/0xf0 [ 268.760611][ T8600] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 268.760650][ T8600] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 268.760685][ T8600] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.760719][ T8600] ? ___kmalloc_large_node+0xed/0x160 [ 268.760753][ T8600] __kvmalloc_node_noprof+0x30a/0x620 [ 268.760774][ T8600] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 268.760804][ T8600] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 268.760835][ T8600] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 268.760859][ T8600] xp_create_and_assign_umem+0x1b5/0xe20 [ 268.760884][ T8600] ? dev_get_by_index+0x17c/0x380 [ 268.760919][ T8600] xsk_bind+0x4c6/0x1570 [ 268.760946][ T8600] ? __pfx_xsk_bind+0x10/0x10 [ 268.760974][ T8600] __sys_bind+0x1a7/0x260 [ 268.760996][ T8600] ? __pfx___sys_bind+0x10/0x10 [ 268.761028][ T8600] ? xfd_validate_state+0x61/0x180 [ 268.761058][ T8600] ? __sys_setsockopt+0x1c0/0x230 [ 268.761087][ T8600] __x64_sys_bind+0x72/0xb0 [ 268.761106][ T8600] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.761133][ T8600] do_syscall_64+0xcd/0x4e0 [ 268.761158][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.761178][ T8600] RIP: 0033:0x7f6c3738eec9 [ 268.761195][ T8600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.761214][ T8600] RSP: 002b:00007f6c381bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 268.761235][ T8600] RAX: ffffffffffffffda RBX: 00007f6c375e6090 RCX: 00007f6c3738eec9 [ 268.761249][ T8600] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 268.761262][ T8600] RBP: 00007f6c37411f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.761297][ T8600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.761310][ T8600] R13: 00007f6c375e6128 R14: 00007f6c375e6090 R15: 00007fffd36374f8 [ 268.761340][ T8600] [ 269.035656][ T8600] Mem-Info: [ 269.038994][ T8600] active_anon:14232 inactive_anon:1 isolated_anon:0 [ 269.038994][ T8600] active_file:15756 inactive_file:40700 isolated_file:0 [ 269.038994][ T8600] unevictable:3839 dirty:194 writeback:0 [ 269.038994][ T8600] slab_reclaimable:11397 slab_unreclaimable:104533 [ 269.038994][ T8600] mapped:35935 shmem:2402 pagetables:1450 [ 269.038994][ T8600] sec_pagetables:0 bounce:0 [ 269.038994][ T8600] kernel_misc_reclaimable:0 [ 269.038994][ T8600] free:1281068 free_pcp:18835 free_cma:0 [ 269.086462][ T8600] Node 0 active_anon:56928kB inactive_anon:4kB active_file:63024kB inactive_file:162596kB unevictable:13820kB isolated(anon):0kB isolated(file):0kB mapped:143740kB dirty:776kB writeback:0kB shmem:8072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12980kB pagetables:5636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.118981][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 269.121610][ T8600] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.126051][ T5959] usb 3-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 269.165323][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 269.175077][ T5959] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 269.184965][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.261596][ T8600] Node 0 DMA free:15296kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.331510][ T8600] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 269.337521][ T8600] Node 0 DMA32 free:1217696kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68516kB inactive_anon:4kB active_file:63024kB inactive_file:161268kB unevictable:13820kB writepending:776kB present:3129332kB managed:2539308kB mlocked:8188kB bounce:0kB free_pcp:45052kB local_pcp:16944kB free_cma:0kB [ 269.374575][ T5959] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 269.391424][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.391504][ T8600] lowmem_reserve[]: 0 0 1 1 1 [ 269.423206][ T8600] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 269.457320][ T5959] usb 3-1: Product: syz [ 269.459333][ T8600] lowmem_reserve[]: [ 269.462546][ T5959] usb 3-1: Manufacturer: syz [ 269.463776][ T8600] 0 [ 269.466497][ T5959] usb 3-1: SerialNumber: syz [ 269.473946][ T8600] 0 0 0 0 [ 269.493604][ T8600] Node 1 Normal free:3891268kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18304kB local_pcp:11104kB free_cma:0kB [ 269.527582][ T8600] lowmem_reserve[]: 0 0 0 0 0 [ 269.528151][ T5959] usb 3-1: config 0 descriptor?? [ 269.532488][ T8600] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15296kB [ 269.548810][ T5959] mcba_usb 3-1:0.0: Can't find endpoints [ 269.558421][ T8600] Node 0 DMA32: 4*4kB (UME) 33*8kB (E) 58*16kB (E) 34*32kB (UE) 97*64kB (UME) 108*128kB (UME) 49*256kB (UME) 12*512kB (UME) 9*1024kB (UME) 4*2048kB (UM) 283*4096kB (M) = 1217592kB [ 269.580644][ T8600] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 269.596731][ T8600] Node 1 Normal: 179*4kB (UE) 47*8kB (UME) 36*16kB (UME) 92*32kB (UME) 21*64kB (UME) 6*128kB (UME) 8*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3891268kB [ 269.620598][ T8600] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.630378][ T8600] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.639960][ T8600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.649890][ T8600] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.659301][ T8600] 58854 total pagecache pages [ 269.664489][ T8600] 1 pages in swap cache [ 269.668641][ T8600] Free swap = 124992kB [ 269.672824][ T8600] Total swap = 124996kB [ 269.676975][ T8600] 2097051 pages RAM [ 269.680764][ T8600] 0 pages HighMem/MovableOnly [ 269.685466][ T8600] 430262 pages reserved [ 269.689593][ T8600] 0 pages cma reserved [ 269.755542][ T8592] pim6reg: left allmulticast mode [ 269.823210][ T8618] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 270.030107][ T5959] usb 3-1: USB disconnect, device number 20 [ 270.935242][ T1207] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 270.950474][ T8635] netlink: 'syz.5.616': attribute type 1 has an invalid length. [ 271.057291][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 271.234249][ T1207] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.349377][ T1207] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 271.773320][ T1207] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 271.858294][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.887661][ T8629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 271.898280][ T1207] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.392725][ T1207] usb 4-1: USB disconnect, device number 22 [ 273.417750][ T8665] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 273.431252][ T8665] Error validating options; rc = [-22] [ 274.490794][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 274.490810][ T30] audit: type=1400 audit(1759070345.360:538): avc: denied { connect } for pid=8670 comm="syz.5.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 274.845559][ T8678] bridge1: entered promiscuous mode [ 274.973473][ T8683] netlink: 'syz.2.626': attribute type 1 has an invalid length. [ 276.104062][ T72] ------------[ cut here ]------------ [ 276.109838][ T72] wlan0: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:01 on 5 GHz band [ 276.124060][ T72] WARNING: CPU: 1 PID: 72 at net/mac80211/tx.c:745 ieee80211_tx_h_rate_ctrl+0x1265/0x1a90 [ 276.134008][ T72] Modules linked in: [ 276.138128][ T72] CPU: 1 UID: 0 PID: 72 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 276.147425][ T72] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.157491][ T72] Workqueue: events_unbound cfg80211_wiphy_work [ 276.163750][ T72] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x1265/0x1a90 [ 276.170263][ T72] Code: c1 ea 03 80 3c 02 00 0f 85 b4 07 00 00 49 8b 77 68 89 d9 48 89 ea 48 c7 c7 c0 4f 09 8d 48 81 c6 b8 09 00 00 e8 4c 29 68 f6 90 <0f> 0b 90 90 bb 01 00 00 00 e8 1d 82 a9 f6 48 8b 74 24 18 48 b8 00 [ 276.189887][ T72] RSP: 0018:ffffc9000214f608 EFLAGS: 00010282 [ 276.195961][ T72] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817a4388 [ 276.204026][ T72] RDX: ffff88801dfda440 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 276.212107][ T72] RBP: ffff88805ddc6dc4 R08: 0000000000000001 R09: 0000000000000000 [ 276.220086][ T72] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802b3ec000 [ 276.228081][ T72] R13: 0000000000000000 R14: ffff88804c3bba3d R15: ffffc9000214f868 [ 276.236250][ T72] FS: 0000000000000000(0000) GS:ffff8881247b1000(0000) knlGS:0000000000000000 [ 276.245205][ T72] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.251801][ T72] CR2: 00007fd123ed2d58 CR3: 0000000069956000 CR4: 00000000003526f0 [ 276.259791][ T72] Call Trace: [ 276.263082][ T72] [ 276.266036][ T72] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 276.272123][ T72] ? lock_acquire+0x179/0x350 [ 276.276813][ T72] ? find_held_lock+0x2b/0x80 [ 276.281505][ T72] invoke_tx_handlers_late+0x119a/0x27a0 [ 276.287153][ T72] ? invoke_tx_handlers_early+0x663/0x2720 [ 276.292973][ T72] ieee80211_tx+0x304/0x420 [ 276.297466][ T72] ? __pfx_ieee80211_tx+0x10/0x10 [ 276.302511][ T72] ? ieee80211_skb_resize+0x22a/0x630 [ 276.307869][ T72] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 276.313278][ T72] ieee80211_xmit+0x30f/0x3e0 [ 276.317945][ T72] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 276.323785][ T72] ieee80211_scan_state_send_probe+0x34c/0xad0 [ 276.329957][ T72] ieee80211_scan_work+0x772/0x2030 [ 276.335192][ T72] ? __queue_work+0x43b/0x1160 [ 276.339938][ T72] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 276.345589][ T72] cfg80211_wiphy_work+0x2c4/0x580 [ 276.350688][ T72] process_one_work+0x9cc/0x1b70 [ 276.355654][ T72] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 276.361816][ T72] ? __pfx_process_one_work+0x10/0x10 [ 276.367182][ T72] ? assign_work+0x1a0/0x250 [ 276.371791][ T72] worker_thread+0x6c8/0xf10 [ 276.376390][ T72] ? __kthread_parkme+0x19e/0x250 [ 276.381532][ T72] ? __pfx_worker_thread+0x10/0x10 [ 276.386626][ T72] kthread+0x3c2/0x780 [ 276.390676][ T72] ? __pfx_kthread+0x10/0x10 [ 276.395283][ T72] ? rcu_is_watching+0x12/0xc0 [ 276.400035][ T72] ? __pfx_kthread+0x10/0x10 [ 276.404647][ T72] ret_from_fork+0x56a/0x730 [ 276.409397][ T72] ? __pfx_kthread+0x10/0x10 [ 276.414001][ T72] ret_from_fork_asm+0x1a/0x30 [ 276.418773][ T72] [ 276.421798][ T72] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.429054][ T72] CPU: 1 UID: 0 PID: 72 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 276.438315][ T72] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.448350][ T72] Workqueue: events_unbound cfg80211_wiphy_work [ 276.454580][ T72] Call Trace: [ 276.457842][ T72] [ 276.460765][ T72] dump_stack_lvl+0x3d/0x1f0 [ 276.465346][ T72] vpanic+0x6e8/0x7a0 [ 276.469305][ T72] ? __pfx_vpanic+0x10/0x10 [ 276.473797][ T72] ? ieee80211_tx_h_rate_ctrl+0x1265/0x1a90 [ 276.479700][ T72] panic+0xca/0xd0 [ 276.483430][ T72] ? __pfx_panic+0x10/0x10 [ 276.487844][ T72] ? check_panic_on_warn+0x1f/0xb0 [ 276.492944][ T72] check_panic_on_warn+0xab/0xb0 [ 276.497947][ T72] __warn+0xf6/0x3c0 [ 276.502172][ T72] ? ieee80211_tx_h_rate_ctrl+0x1265/0x1a90 [ 276.508048][ T72] report_bug+0x3c3/0x580 [ 276.512374][ T72] ? ieee80211_tx_h_rate_ctrl+0x1265/0x1a90 [ 276.518249][ T72] handle_bug+0x184/0x210 [ 276.522564][ T72] exc_invalid_op+0x17/0x50 [ 276.527048][ T72] asm_exc_invalid_op+0x1a/0x20 [ 276.531876][ T72] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x1265/0x1a90 [ 276.538365][ T72] Code: c1 ea 03 80 3c 02 00 0f 85 b4 07 00 00 49 8b 77 68 89 d9 48 89 ea 48 c7 c7 c0 4f 09 8d 48 81 c6 b8 09 00 00 e8 4c 29 68 f6 90 <0f> 0b 90 90 bb 01 00 00 00 e8 1d 82 a9 f6 48 8b 74 24 18 48 b8 00 [ 276.557953][ T72] RSP: 0018:ffffc9000214f608 EFLAGS: 00010282 [ 276.564003][ T72] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff817a4388 [ 276.571954][ T72] RDX: ffff88801dfda440 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 276.579914][ T72] RBP: ffff88805ddc6dc4 R08: 0000000000000001 R09: 0000000000000000 [ 276.587871][ T72] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802b3ec000 [ 276.595832][ T72] R13: 0000000000000000 R14: ffff88804c3bba3d R15: ffffc9000214f868 [ 276.603805][ T72] ? __warn_printk+0x198/0x350 [ 276.608564][ T72] ? __warn_printk+0x1a5/0x350 [ 276.613320][ T72] ? ieee80211_tx_h_rate_ctrl+0x1264/0x1a90 [ 276.619211][ T72] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 276.625259][ T72] ? lock_acquire+0x179/0x350 [ 276.629912][ T72] ? find_held_lock+0x2b/0x80 [ 276.634575][ T72] invoke_tx_handlers_late+0x119a/0x27a0 [ 276.640200][ T72] ? invoke_tx_handlers_early+0x663/0x2720 [ 276.645999][ T72] ieee80211_tx+0x304/0x420 [ 276.650495][ T72] ? __pfx_ieee80211_tx+0x10/0x10 [ 276.655529][ T72] ? ieee80211_skb_resize+0x22a/0x630 [ 276.660887][ T72] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 276.666260][ T72] ieee80211_xmit+0x30f/0x3e0 [ 276.670926][ T72] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 276.676898][ T72] ieee80211_scan_state_send_probe+0x34c/0xad0 [ 276.683051][ T72] ieee80211_scan_work+0x772/0x2030 [ 276.688247][ T72] ? __queue_work+0x43b/0x1160 [ 276.693014][ T72] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 276.698636][ T72] cfg80211_wiphy_work+0x2c4/0x580 [ 276.703746][ T72] process_one_work+0x9cc/0x1b70 [ 276.708680][ T72] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 276.714821][ T72] ? __pfx_process_one_work+0x10/0x10 [ 276.720181][ T72] ? assign_work+0x1a0/0x250 [ 276.724755][ T72] worker_thread+0x6c8/0xf10 [ 276.729326][ T72] ? __kthread_parkme+0x19e/0x250 [ 276.734350][ T72] ? __pfx_worker_thread+0x10/0x10 [ 276.739459][ T72] kthread+0x3c2/0x780 [ 276.743503][ T72] ? __pfx_kthread+0x10/0x10 [ 276.748067][ T72] ? rcu_is_watching+0x12/0xc0 [ 276.752808][ T72] ? __pfx_kthread+0x10/0x10 [ 276.757370][ T72] ret_from_fork+0x56a/0x730 [ 276.761957][ T72] ? __pfx_kthread+0x10/0x10 [ 276.766520][ T72] ret_from_fork_asm+0x1a/0x30 [ 276.771275][ T72] [ 276.774497][ T72] Kernel Offset: disabled [ 276.778820][ T72] Rebooting in 86400 seconds..