last executing test programs: 1m56.949427435s ago: executing program 3 (id=1147): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000400)="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", 0x358}], 0x1, 0x0, 0xfffffffffffffdbb}}], 0x1, 0x20008000) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002500090122bd7008fcffffff020000000c003d800800cb00", @ANYRES32, @ANYBLOB="0800030033100000"], 0x28}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xffff1000, 0x0, r2}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f00000003c0)={0x10000e, 0x10000000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)=0xffffffffffffffda) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000300)=0xc, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r4, 0x540b, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000780)={'#! ', './file0', [{0x20, '/dev/ttyS3\x00'}, {0x20, '}-\')*-\''}, {0x20, '/dev/ttyS3\x00'}, {0x20, '/$\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x20, ' \xf7+\x1fd\x00'}, {0x20, '/dev/ptp0\x00'}]}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a26817", 0xcc, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1", 0x67, 0x5, 0x6}], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xe131a8496a147c20}, {0x0, 0xffff}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x4048010) 1m55.652247168s ago: executing program 3 (id=1155): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd}) landlock_restrict_self(r2, 0xe) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000040)="a0c4", 0xfffffec3}], 0x2) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x10f5, 0x200, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x7f, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xe, 0x7f, 0xc, {0x7, 0x25, 0x1, 0x4, 0x7, 0x7}}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) io_uring_setup(0x9c8, &(0x7f00000000c0)={0x0, 0x7e01, 0x2, 0x0, 0x32e, 0x0, r1}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000480)=0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb86dd6000000800303afffe8000000000000000000000000000aafc0100000000000000000000000000018700907800000000000000000000000000000000000000000101012025b07f3c58"], 0x0) 1m54.359251906s ago: executing program 3 (id=1162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r1, 0x2, &(0x7f00000011c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x0, 0x0, 0xe3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x453, r0, 0x0, 0x0, 0xfffffffffffffffe}]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) 1m53.94391844s ago: executing program 3 (id=1167): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) fsopen(&(0x7f0000000080)='mqueue\x00', 0x1) syz_open_dev$vbi(0x0, 0x3, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = syz_open_dev$media(0x0, 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 1m51.492762861s ago: executing program 3 (id=1176): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x90004) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 1m51.22239907s ago: executing program 3 (id=1177): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x400) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)={0x1, [0x0]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x1000000000009, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m36.153017304s ago: executing program 32 (id=1177): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x3, 0x400) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)={0x1, [0x0]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x1000000000009, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 9.475497575s ago: executing program 4 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd26, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3}}, 0x1c}}, 0x20000000) unshare(0x6a040000) unshare(0x5a060000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x140008d0}, 0x24000840) sendmsg$NFT_BATCH(r6, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x24048800) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]}) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x18, 0x1, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb0009050402090000000009058802"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 8.030725771s ago: executing program 4 (id=1636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x588, 0x7628, 0x7b, 0x2, 0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002580)={&(0x7f0000001300)={0x124c, 0x7, 0x5, 0x801, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x7}, [@typed={0x4, 0xc7}, @generic="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", @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@empty}, @generic="400f251d07d44350e2e11c700410044d1b14310fc687f50cfe71738d34c026717bad87dcd90dcafb0452118432570f49596dfc94e81e916dc6347a65993367f6bba6e5660b41d22eef54fabbbc68da2732e6221c23a00caf4af28c8084b34ff78806af52755aff75aa33174b5bd6b45a798f9f8f0867b9a6bbaa6321489c30f4b4d24fba0c4aeaa15aedc7ea2438576a7553c05ae36695a3585680384f1c26eb87163c505ebe87", @typed={0xc, 0x165, 0x0, 0x0, @u64=0x9}, @nested={0x15f, 0x2f, 0x0, 0x1, [@nested={0x4, 0x154}, @typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@remote}, @generic="3ec58d2c84a3707d923123d8854442ef1697e1f7d08c7de4aeab68a78224c6837e5f776c1efbcdabb1b145d1899a3a831e19154478208a750d72a48b9ec588a229b6c651d28829ce6b9da3be5dfa630408573c7dba6e66aa2768ee5beeacce2e3aad249468a25988ebd4ff6da5d4137d0514e17f9278e0a2e5e547a4ef09bd531b4d9e53d93dbf23a007b3d5243f2dff78b3599f423c60475a4643401d9e79873cb7a1c58f60", @generic="17698c2dc182b35e4ef3a99d4f1dcae1ca13da48d430c2cec7ae426974dee70340afdceb844c8317c8baf3608a4adf70513a8895dc2f3fe2167bbf64ae1106122758f8d5291b77ccf058bd990f81a0b01c3be64a0d4d37394a7586f28520bd499589d8131764cdcc509f5671e38deda34324e5f12ef8091cc79ba2e1397fc95989ab3acc9b036c3e5e52d5b7ec607c7feb5d9cfbf12c562097", @nested={0x4, 0x1c}]}, @typed={0x10, 0x166, 0x0, 0x0, @binary="8c3ec0d41935d3db99135ca1"}, @typed={0x8, 0x36, 0x0, 0x0, @pid=r1}]}, 0x124c}}, 0x40) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000280)={0x6, 0x0, r3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010100000000fcdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="04004600050034006e000000080026006c0900001c0051"], 0x4c}}, 0x4800) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fddbdf250200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990041000000600000000800a0007c030700080026009a03"], 0x40}}, 0x48000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x30, r7, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x55}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20008802) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020851000000300000018000000000000000000000000000001950000000000000018010000202078250000000000201c007b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b50afdffffffeffe850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4d}, 0x94) r12 = syz_open_dev$sg(&(0x7f0000000040), 0x7f, 0x123400) ioctl$SG_SCSI_RESET(r12, 0x2284, 0x0) 6.109732567s ago: executing program 4 (id=1642): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x20, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000000)={0x40, 0x16, 0x63, "4a184f1aa7f4c8d2b59fedd596bc7376f8368aaaf09b7d986bda1f705ec5396aaaed84384c3a3fa32a56d69051421f3bfcde6781de85f2b100e7872ffef2254caf94d981dc34cb1106579b05a301000000a4103e5c485800"/99}, 0x0, 0x0, 0x0, 0x0}) 6.007969683s ago: executing program 0 (id=1644): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000400), 0x4) syz_clone3(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newsa={0xf0, 0x10, 0x421, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2}, {@in=@broadcast, 0x0, 0x2b}, @in6=@empty, {0x0, 0x2, 0x0, 0x0, 0x6}, {0x0, 0x10000000000}, {0x0, 0xffffffff}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) syz_open_dev$video(&(0x7f00000002c0), 0x8, 0x4000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000111409e49f363c9169239f2108004b002800d8"], 0x18}}, 0x4000004) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mlockall(0x1) 5.957531591s ago: executing program 1 (id=1645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000050900020073797a3100000000050001000700000004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ac8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)={0x58, r10, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x10080, 0x0) ioctl$SNDCTL_MIDI_INFO(r11, 0xc074510c, &(0x7f00000003c0)={"56caf37f42d9701903e76d56a23ef86cba605e65e0cedb8edfa6463d554b", 0xcf9, 0x0, 0x566, [0x10000, 0x9, 0xff, 0xd0, 0x9, 0x2, 0x3, 0x4000000, 0x8, 0x7fff, 0x28000000, 0x3ff, 0x3, 0x9, 0xfbb, 0x8001, 0x8930]}) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x2a8, r10, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0xc080}, 0x800) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r12, 0x0, 0x0}, 0x10) r13 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r13, 0xc008561c, &(0x7f0000000000)={0x980902, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x3a}, &(0x7f0000000200)=0xc) 5.771652035s ago: executing program 5 (id=1648): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6714009565747f5c8c418285524dd80d795e69315f766c616e0000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000040)={0x18, r4, 0x1, 0x0, &(0x7f0000000100)=[{0x6, 0xfffffffffffffff9}]}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x1074, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff5, 0x10}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x1044, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x5}}, @TCA_ROUTE4_ACT={0x2b0, 0x6, [@m_skbmod={0x15c, 0x6, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0x7, 0xffffffffffffffff, 0x9, 0x4}, 0xc}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc33}]}, {0xd1, 0x6, "d06ad8daaf1e26d17b24eb15a7fd14115a903198abca25d7f2f028a5f999cef0a1463d44e7207ba271c3f8a2ab9ccf62ef6605d22be0dd85094d2e98af861a6aaaf39e43ecabbab5d6308d9fa583198c93b48122ec26eb09a18164657b409696671f86652371df1a402370be5bc2a5043bb797e15054765983b1b1165657f00ca9750f30eff52211a90267ad6a00dc7a714a2644d65a3eaa22727b5f1d53292c3fe9bc8da968e6965d54fd1070a05f976393c72f799380e1ddb1a8df2798ba5a950cd60f701a051d64fd60923d"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xa0, 0xa, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}]}, {0x65, 0x6, "51a908514b8fa6b9630293bfc93d3a167130e469ea3825e69c3a33e6f6b22da4b8d06d737d1b51fe42a564b1bac4bf98f976d85647dcd19c680cbeb9ebedc23601e3c7c5175254a74db45169d389cf433559159cf477fcdf27251eb82b7d80426a"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xb0, 0xa, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x7e, 0x6, "469e3f9fea9534936efd4c19c2e9c6fea5b22f1b3e8961df456061343b6cb9b7819838eb2f9daaaefc09804a4d7b2b5304416a5f203312b7204594527b38c942592960a9923fabc972bf4ede20f849aafc4f1db4143ed66de4a1b566ae9e98438bf8ce36949a94fee9d148799998d76fe5e98acf65bdb1394d08"}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_ACT={0x320, 0x6, [@m_ctinfo={0xd8, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}]}, {0xa2, 0x6, "986c39555e9f04083a3764a79addfb4e45cb23045bf63286070d391df925bd4e2234d882ace4f100a0e724979a4ce5631e86cbceecd24f3e82e222f88424433a99efbdc9a5d9e1cead1ada463f75eb618023fa7086f3eb90c4837544d4dfb5e079ac361512f23e8e6fbdc5a76ff73d995e72a5dbcc511a155f6765c31d8c8badb26072e53686e9111779cf3b39301b1da6278fce1a7995035538524dec3c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xd0, 0x0, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7f}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3e6a}]}, {0x8a, 0x6, "060f5dd8ae5154bbb4f300b71c0200f0ea080eb41fbe72a2e237189386dbd382aa854208ee40601e01e1cec4f201736fdcd5c96aafa2580b7bc25dd67812e1ccd2f9843b38dd71848ca35805d151e1bdccb1b4986691d68a70add68e16c46832f222ba76d646aafa026b5e2d16df0066640e5778d6dcbb919261a19c843dbbc2849ff30cc08f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x9c, 0x11, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf10}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x10000000, 0x7, 0x2}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x6, 0x401, 0x9}, 0x2}}]}, {0x20, 0x6, "85216dd3b32a29e985904bb327a52c6f972696fe5b9f27a6ffc70fc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_ife={0xd8, 0x1d, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="aca7b32d1143"}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_TYPE={0x6, 0x5, 0x8001}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x63, 0x6, "62e68db377188f6a212366a6c008b73cb2189403870ac54db4fea39dc5bb78714066a4b7930b35fa0b66df43249f5a9ef20a1809e20a148a4b0e3a02d52083605fc709f8cbc4fb80359cd6628d3cc9b3cf6b15381e379956e6c939b92cd44d"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x3d}, @TCA_ROUTE4_ACT={0xa58, 0x6, [@m_police={0x918, 0x16, 0x0, 0x0, {{0xb}, {0x858, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0xf, 0x5, 0x232d, 0x40ba, 0x3, 0x81, 0xff, 0x6, 0xffff, 0xffffe7b8, 0x5, 0x1, 0x8a, 0x10001, 0x4, 0x3ff, 0x218, 0x8, 0xff, 0xffffff0c, 0x10000, 0x0, 0x8, 0x10, 0x2d0, 0x2, 0x8001, 0x2, 0x2, 0x7fffffff, 0x18d7, 0x9, 0x7, 0xfb, 0x401, 0xfffff98a, 0x3, 0x2, 0x2, 0x5, 0x4, 0xfffffffc, 0x6, 0x3, 0x4523, 0x950, 0x200, 0x13, 0x1219d08, 0x5, 0x0, 0x3, 0x121f, 0x3, 0x6, 0x6, 0x4, 0x6, 0x80, 0x0, 0x8d, 0x5, 0x759, 0x4, 0x6738, 0x10, 0x9, 0x3, 0xd97c, 0xa, 0x0, 0x4, 0x6, 0x3ff, 0xcd, 0xaeb, 0x5, 0x1, 0x6, 0x1, 0x5, 0x670, 0x401, 0x4, 0x4, 0x1ff, 0x5, 0x6, 0x1, 0x2, 0xb054, 0x2, 0x7, 0x66db, 0x7fff, 0x7fff, 0x8, 0x9, 0xcb, 0x80000000, 0x40c268bb, 0x1, 0x3, 0x8, 0x6, 0x9, 0x2, 0x100, 0x1, 0x5, 0x0, 0x8, 0x1, 0x7, 0x2, 0x2, 0x5, 0x6, 0x3e7, 0x513, 0x31, 0x8001, 0x3, 0xe471, 0x6, 0x8, 0x7, 0xfffffff0, 0x5, 0x3, 0x4, 0x1, 0x354a, 0x7, 0xf288, 0x4, 0x5, 0x94, 0x7fff, 0x400, 0x0, 0x5, 0x6, 0x5, 0x3, 0x2, 0x0, 0x80000000, 0x1, 0x9, 0xdff, 0x1, 0xe, 0xfffffff9, 0x5, 0x3, 0x8, 0xe, 0xffff0ee3, 0x8, 0x953, 0x1, 0x6f01, 0xd, 0xffffffff, 0x146, 0xff, 0x2, 0x5, 0x7, 0x6, 0x7, 0x3, 0x6, 0x4, 0xee, 0x3, 0x5, 0x8001, 0x5, 0x8, 0x7fffffff, 0x2, 0xf, 0x92, 0x8, 0x7f, 0x2, 0x2, 0x4, 0x9, 0x4, 0x2, 0x8, 0x4, 0x8, 0xe3, 0xa2ff, 0x8000, 0x9, 0xfffffff8, 0x6, 0x2, 0x6, 0x7, 0x4, 0x5, 0x9, 0x1, 0x400, 0x80, 0xb, 0x400, 0xcd, 0x5, 0x101, 0x5, 0x9, 0x5, 0x3, 0x10001, 0x6, 0x4, 0x8, 0x9, 0x9, 0x8, 0x6, 0x187, 0x1, 0x8, 0x81, 0xac77, 0x6, 0x80000000, 0x9, 0x9, 0x9, 0x3, 0xad, 0x0, 0x1, 0x6, 0x5, 0x0, 0x10026fd, 0x3, 0xfffffffd, 0x100, 0xd, 0xb, 0x6, 0xfff, 0x1b3ac1f2, 0x2]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x314, 0x20000000, 0x9, 0xe, 0x7cde, {0x5, 0x0, 0x10, 0x88fa, 0x7fff, 0x7}, {0x5, 0x1, 0x8, 0x54fd, 0x2, 0xc4a2}, 0x1, 0x80000001, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0xc, 0x9, 0x4, 0x9, 0x0, 0x9, 0xda, 0x10000, 0x1, 0xe8b, 0xfffff72f, 0x3, 0xf, 0x0, 0x1, 0x2, 0xe396, 0x6611, 0xff, 0xe, 0x1, 0x4, 0x2, 0x8, 0x6, 0x8b, 0x6, 0x5, 0xb, 0x0, 0x9, 0x8, 0x8, 0x9, 0x3, 0x0, 0x400, 0x9a, 0x5, 0x6, 0x1, 0x1, 0x100, 0x6, 0xc6, 0x2, 0x4, 0x200, 0x2, 0x8, 0xd, 0x7, 0x10000000, 0x80, 0xea, 0x7, 0x2, 0x3, 0x68, 0x9, 0x4686, 0x7, 0x1, 0x1000, 0x6, 0x166a, 0x4d6, 0x2, 0xa, 0x5, 0xffff, 0x0, 0x0, 0x9, 0x6, 0xa35, 0x8, 0xa, 0x800, 0x97f, 0xff, 0x4, 0xa95, 0x80, 0xf, 0x0, 0xffffffff, 0x0, 0x55aa, 0xb, 0xa0, 0x7, 0x7, 0xac74, 0x3, 0x5784, 0x7, 0x9, 0x8, 0x2, 0x4280, 0x4, 0x0, 0x9, 0xd, 0x7, 0x0, 0x2, 0x9, 0x2c47e06e, 0xfffff7f9, 0x2, 0x5, 0xd60, 0xfffeffff, 0x4, 0x4, 0x10, 0x53, 0x81, 0x9, 0x8, 0xef, 0x0, 0x35, 0x1, 0x400, 0x69, 0x0, 0x5, 0x5, 0x2, 0xb4a, 0x101, 0xffffffff, 0x400, 0xa, 0x1, 0x401, 0x6, 0xf8000000, 0x80000001, 0x10, 0xa, 0xf0, 0x7, 0x8, 0x1, 0xb2ea, 0x8, 0x8, 0x8, 0xb7e, 0x2, 0x0, 0x3ff, 0x7, 0x8, 0xda4, 0x6, 0x0, 0x1c5, 0x6, 0x6, 0x4, 0x1, 0x5, 0xfff, 0x0, 0x5, 0x4, 0x6, 0xa85, 0x4, 0x80000000, 0x57e, 0x9, 0xfff, 0x37800000, 0xa679, 0x5cb6, 0x6, 0x8, 0x3, 0x6, 0x4, 0x5, 0x8, 0x8000, 0x6, 0xfffffff9, 0x0, 0x80, 0x5, 0x2a20, 0x60, 0x4, 0x9, 0x8000, 0x29f9, 0x4, 0x401, 0x3, 0x1, 0x1, 0x8, 0x1d, 0x8, 0xffffff99, 0x401, 0x3ff, 0x9, 0x1, 0x401, 0x80, 0x9, 0xff, 0x6, 0x9, 0x0, 0xd0f6, 0x1, 0x0, 0x6, 0x9, 0x564, 0x8, 0x1c47, 0x0, 0x6, 0x1, 0x5, 0x3, 0x47, 0x0, 0x80000, 0x6, 0x1, 0x6, 0x6, 0x2, 0x3, 0x8001, 0x1000, 0x1, 0x4d2, 0x1, 0x2, 0x8, 0x3, 0x73, 0x3, 0x1784000, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]]}, {0x95, 0x6, "891dfdfb3675d9766c0d0480c7e21127b5fb4c71c47f9e826efbd535e876633b09e473d90e13aa95ff1456b7497975d8db4874df454b812282d03e515b7c4148810674315f263713a53be6204ceb146b4b561508294bf9366c4bfd795730cfaf6209fc396f61ec8d397e2fc8df606bdbba921038f7aa58995070f9027e5c983a2d73313cae0f1d9d8ad2c249d707903102"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x13c, 0x19, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0xf3, 0x6, "93b7ebf93296e974fa335769cefa41779f5f100fcb7aff7d360e4ee7743dce54e32306761487ac72896de6ad207b30a889f9c99b6859455e474182a4cecfb3b140bbc391a5c0679c8955248e848e4077dc51622f6f1f2563c1d61cb3299a1ba7d2eec0beebd837ddb494bd4874995d31eb598c02fa31f31cfa5c9a906f7039e8044a7538be7c79bc65d620e2cf351861a14b7d02748fbe3eb923b4972748f9cfc193d7d9dce53c5d215ef0e0853cf230307a296e8d3aed9c91f14c2e1760f3bfa73e0c3a62a88f3c53df7e9140b2fbb9ae1244f660caf6012f2ed6996ab9e6b2bfd7132c25ad52dcee7f2e74b30ff7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1074}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0xa, 0x13, 0x4010, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x10, 0x80, 0x8}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000340)={@dev, 0x0}, &(0x7f0000000380)=0x14) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x3}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7fffffff}]}}]}, 0x40}}, 0xc840) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r15) socket$nl_generic(0x10, 0x3, 0x10) splice(r14, 0x0, r15, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000640)={&(0x7f0000000000), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf250d0000001400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="480001801433c54fa4ebb915852b860000000000f29387a43d3dbd94caaa00000000000800030002000000140002006c6f00000000d197000000000014000200626f6e645f736c6176655f30000000000800018008000100000000", @ANYRES32=0x0, @ANYBLOB="84000180140002006261746164765f736c6176655f31000008000300020000000800030002000000080003000300000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="14000200626f6e64300000000000000000000000080003000000000014000200766c616e30000000000000000000000014000200766c616e31000000000000000000000020000180140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r16, @ANYBLOB="14000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2800018014000200766c616e300000000000000000000000080003000100000008000300010000003c000180140002006d6163766c616e30000000000000000008000300020000001400020070696d3672656700000000000000000008000300020000001400018008000100", @ANYRES32=r17, @ANYBLOB="0800030002000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) 5.543994654s ago: executing program 1 (id=1649): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x4842c1, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) ioprio_set$pid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xfffffffe, 0x4, 0x1000, 0xfffffffd, 0x6, 0x4, 0xa, 0x0, 0x6, 0x40000005, 0xfe, 0x9, 0xffffffff, 0x6, 0x80010009, 0xfe9, 0x401, 0xa, 0x6, 0x8004, 0x9, 0x44, 0x4, 0x80, 0x0, 0x81, 0x7, 0x1]}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004010}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 5.13073898s ago: executing program 5 (id=1650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000d80)=[@enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18}, @wrmsr={0x65, 0x20, {0x854, 0xf}}, @wrmsr={0x65, 0x20, {0xc0011031}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xd9, 0x5, 0x8, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_code={0x12e, 0x5e, {0x1, "b9870100000f32430f221e263e670f01c548b801ff26a05c1ab7610f23d00f21f835200000080f23f8f3430f090f01d166b831018ee0460f070f00920f7a0000c4a1a173fe00"}}, @cpuid={0x64, 0x18, {0x36ca, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x77, 0x80, 0x4, 0xb}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_load_code={0x12e, 0x70, {0x1, "66400f3880a08f300000c462fbf76500b9b80a00000f3266baf80cb862614b8aef66bafc0cec2e66430f3a0d7e0f7d410f01c8f3adc7442400c0000000c74424020a000000ff1c240f79b700000000660f388081c8930000"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0x100000001, 0x1}}, @wr_crn={0x67, 0x20, {0x8, 0xfffffffffffffffb}}, @in_dx={0x69, 0x20, {0x5edb, 0x4}}, @nested_load_code={0x12e, 0x5d, {0x3, "48b8ca000000000000000f23c00f21f835000002000f23f82d043a4785470f01df450f2c8749f6000066470f3825e2c4a1f91010660fc7b2f16e937e2e450f01cb0f0947a5"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x52, 0xff, 0x5, 0xb6}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x7, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x77, 0x0, 0x7fff}}], 0x383}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x7, 0x1, 0x400, 0x3, 0x9a, 0x9531, 0xffffffffffffffff, 0xc, 0x9, 0xae, 0x6, 0x60, 0x9, 0x5, 0x3, 0x5], 0x25000}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xff], 'ip_vti0\x00', 'geneve1\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x2, 0x0, 0xc}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x20004000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r6, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000280)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0xa, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x3400000000000000, 0x0, 0xfffffffffffffffe, 0x1000000004, 0x800000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0xfbae, 0xffff, 0x7, 0xc0bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x13e, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r8 = eventfd2(0x4, 0x800) io_setup(0x6, &(0x7f0000001300)=0x0) io_submit(r9, 0x2, &(0x7f0000000180)=[0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x10, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r8}]) io_cancel(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x5}, 0x0) 4.439237174s ago: executing program 1 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) getrlimit(0xf, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x33}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="f9f9", 0x2}], 0x1}}], 0x1, 0x4400c800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) 3.660242516s ago: executing program 2 (id=1653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) getrlimit(0xf, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x33}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r4, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) 3.63798164s ago: executing program 5 (id=1654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.48812657s ago: executing program 0 (id=1655): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)='key_or_keyring:') sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new uefa\t\x00t vrus'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a31000000000800050e000000040900020073797a310000000005000d40be00000014001652828fb8d27ff131f042d500001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) setregid(r3, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000001b701000000000000850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94) 3.486598592s ago: executing program 5 (id=1656): inotify_init1(0x180000) setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001020010"], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0xa, 0x20000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) lseek(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000100000020000000000000000ac14142b000000000000000000000000e00000020000000000000000000000000000fffdff0e87ac7082d76973fe00"/72, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000009000000000000000000000000000000000008001000000000000000000000000000000000000000000000000000000000000000000000000100008000000000fcffffff0000000000000020000000000000000002000000cd00000000000000"], 0xf0}}, 0x4000) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0) 3.446803655s ago: executing program 2 (id=1657): ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000000, 0x4000010, r1, 0x46aec000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYRES8=r0, @ANYRES32=r6, @ANYBLOB="08003700020000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20004084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x5ecfb203) ioprio_set$pid(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000180)={'rti800\x00', [0x100, 0x3ff, 0x1, 0xfffffffe, 0x4, 0x1000, 0xfffffffd, 0x6, 0x4, 0xa, 0x0, 0x6, 0x40000005, 0xfe, 0x9, 0xffffffff, 0x6, 0x80010009, 0xfe9, 0x5, 0x80000a, 0x6, 0x8004, 0x9, 0xb9, 0x4, 0x80, 0x0, 0x81, 0x7, 0x1]}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.303426075s ago: executing program 1 (id=1658): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000005000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) 3.144205282s ago: executing program 1 (id=1659): r0 = syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03900000000000160000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x20000084) r3 = epoll_create(0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000180)={r10, 0x9, 0x20}, 0x89d38c06cadb1230) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r10, 0x8}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fafffffb00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet_tcp(0x2, 0x1, 0x0) r13 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r13, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r13, 0x0) recvmmsg(r13, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000200)=0x17) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r11, r14, 0x25, 0x0, @val=@tcx}, 0x1c) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x40000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x80000000}) 2.870945632s ago: executing program 4 (id=1660): r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r6, 0x0, 0x8c0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c2", 0x23) r8 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000c00), 0x0, 0x8040) sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, 0x0, 0x14) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000a80)=""/134, 0x86}], 0x2}, 0x40012001) prlimit64(r3, 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) 2.49925556s ago: executing program 2 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3aa, 0x2, 0x6}, 0x3a, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0x9, 0x9, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x9, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x28, 0xfffffffb, 0xa, 0x1, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0xe464, 0x80008072, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x1000, 0xfffe, 0x0, 0x8000, 0x4, 0x8008, 0x400, 0x80, 0x3, 0x5, 0x6, 0x8, 0x4, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0x81, 0x129432e4, 0xc488, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xffffffff, 0x3, 0x0, 0x6, 0x5, 0x8, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xf, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0xffff, 0x2, 0xfe000000, 0xffff, 0x2, 0x4, 0x0, 0x3, 0x3, 0x9, 0x1, 0x913, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x200000, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ed, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xf, 0x40005, 0x2, 0x6, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x7fffffff, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x7, 0x0, 0x8000b9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0x5, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000008, 0x5, 0x4, 0xc8, 0xfffffff9, 0xea, 0x10000, 0x0, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb3e, 0xd7, 0x1, 0xffff3441, 0xfff]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x106, 0x2}}, 0xfe5e) r4 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) close(r4) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) socket$inet_sctp(0x2, 0x1, 0x84) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.428334493s ago: executing program 0 (id=1662): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3163, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f0000001740)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0xff7f}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x7, &(0x7f0000000240)=0x2) 1.296881381s ago: executing program 0 (id=1663): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0xe000, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x4]}, {0x8001, 0x7, 0x6, 0xfffffffffffffffb}}, 0x8, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x10001}) ioctl$BLKFRAGET(r0, 0x1265, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000500)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8}, 0x0, 0x0, 0x97, 0x8, 0x8, 0x0, 0x3, 0x6b7d, 0x4}) 1.292830963s ago: executing program 2 (id=1664): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sync() (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0xa4) (async) r3 = gettid() (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0)="4147515c363f6e02b003aa6e0a89935c990cf4b48ae29b3d5c1e1a8014ae81fd78607e93", &(0x7f0000000140)=@udp6, 0x4}, 0x20) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r1, 0x0, 0x2) fchdir(r7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)) 1.215596238s ago: executing program 4 (id=1665): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f61640024000280080003400000009208000440000000ec080001400000000d080002"], 0xc0}, 0x1, 0x0, 0x0, 0x48890}, 0x20004012) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000500), &(0x7f0000000580)=0xc) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0x1, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x0, "a900"}) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xffe, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000000c0)=r8) 1.170078411s ago: executing program 5 (id=1666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010800001800000000000a00000008000240000000010900010073797a300000000028000000000a030000000000000000000a00000008000240000000000900010073797a30"], 0x78}}, 0x0) 1.161931704s ago: executing program 0 (id=1667): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfff7ff1f, 0x1}}, 0x20) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000540)=""/112, 0x70) r4 = accept4(r3, 0x0, 0x0, 0x800) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a866935849e6098ed884e7cb51726b360fbb37b", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/91, 0x5b}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000edffffa9fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e030000"], 0x0) 1.059294483s ago: executing program 5 (id=1668): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x2204803, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r3, @ANYBLOB="2c0ab065f56f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x8, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980), 0x0, 0x5, 0x0, 0x0, r7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x5c5f, 0xc000, 0xa, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 932.339982ms ago: executing program 2 (id=1669): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000080), 0x2204803, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r3, @ANYBLOB="2c0ab065f56f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x8, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980), 0x0, 0x5, 0x0, 0x0, r7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x5c5f, 0xc000, 0xa, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 836.514507ms ago: executing program 4 (id=1670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_RMID(0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000b2fe80000000000001"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000df38000001000000000fcdbdf1e00", @ANYRES32=0x0, @ANYBLOB="1018000007500500200012800b0001006272696467650000100002800a0014000180c20000020000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) socket(0x11, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000f5ffff0f0800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, 0x0, 0x4024000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfefffffe, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x109, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x8000, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2], [0xd68a, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000003, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0xb05f, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) write$proc_mixer(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) close(r2) 711.666505ms ago: executing program 2 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x218442e, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x50) r4 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x80000000}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 424.779µs ago: executing program 1 (id=1672): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630002000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24000040) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) close(0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xa, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0xffff000000000000) 0s ago: executing program 0 (id=1673): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r0, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mkdir(0x0, 0x21) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a05000000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400040000000000000500000008000b40000000000900010073797a300000000034000480300001800b00010074617267657400002000028008000300d614404208000240000000010c0001004e"], 0xd0}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x1, @raw_data="e2713a787c2fa96c68eecfb6effe5f1291bdc4f0c000fae6961f1606d1fedf218381a14c7a5a7c78073e1abe4ff13ac1f2419d6af2e372cf7a7b2b280fde213f7df01f0896d81346f6d0b8e46f0c22c22e7db8ba30a82747bab1a5e82f3e217caee4997a7886da11a75d7ae3de3ca9f7f45dbac849d457c9008504d0eea695085713776f2cdf66b6aeda9722c8678bb2a6dcea05a0639723a18d7f8b313b3873e304ab2b163618aaf2b1cf287579751a1034d52e8d7ff8148db72cc21375746466808148306ab0e3"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x320, {0xc}, {}, @quote={{0x3, 0x8}, 0x7e59}}, {0x0, 0x0, 0x0, 0x0, @tick=0x9, {}, {}, @quote}], 0x38) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d9740500000000000004000000010000000000000700", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0x4c08, 0x0) acct(&(0x7f00000001c0)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kernel console output (not intermixed with test programs): r of type 0x2, skipping [ 389.508481][ T5733] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 389.519708][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.530959][ T5733] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 389.541805][ T5711] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 389.551008][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.558971][ T5711] usb 1-1: config 1 has no interface number 1 [ 389.570762][ T5711] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 389.693885][T10345] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 389.727004][T10345] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.745536][T10345] vlan7: entered allmulticast mode [ 389.763476][ T5733] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 389.774785][T10345] bond7: entered allmulticast mode [ 390.211821][ T30] audit: type=1400 audit(1780233421.341:3075): avc: denied { ioctl } for pid=10351 comm="syz.0.1228" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.533267][ T5711] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 390.542350][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.550341][ T5711] usb 1-1: Product: syz [ 390.649612][ T5711] usb 1-1: can't set config #1, error -71 [ 390.660124][ T5711] usb 1-1: USB disconnect, device number 54 [ 391.137813][T10155] usb 4-1: device descriptor read/64, error -110 [ 391.149027][ T30] audit: type=1400 audit(1780233422.271:3076): avc: denied { getopt } for pid=10330 comm="syz.4.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 391.195598][ T5711] net_ratelimit: 8 callbacks suppressed [ 391.195610][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.196760][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.356897][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.468610][T10155] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 391.517151][ T5733] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 391.525226][ T5733] stv0680 5-1:4.0: Could not get descriptor 0200 [ 391.567336][ T5865] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 391.575121][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.594072][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.627456][ T5733] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 391.635764][ T5733] stv0680 5-1:4.0: last error: 9, command = 0x2 [ 391.665497][ T5733] usb 5-1: USB disconnect, device number 52 [ 391.797052][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 391.818841][ T5865] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 391.827842][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.837985][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.848017][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.871248][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.890374][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.902429][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.227298][T10378] netlink: 'syz.4.1234': attribute type 10 has an invalid length. [ 392.239606][ T30] audit: type=1400 audit(1780233423.331:3077): avc: denied { write } for pid=10376 comm="syz.4.1234" path="socket:[28165]" dev="sockfs" ino=28165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.256821][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 392.564475][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.575531][ T5865] usb 2-1: usb_control_msg returned -32 [ 392.593874][ T5865] usbtmc 2-1:16.0: can't read capabilities [ 392.819495][ T9348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.840186][ T9348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.849590][ T5711] usb 2-1: USB disconnect, device number 31 [ 392.858398][ T30] audit: type=1400 audit(1780233423.981:3078): avc: denied { write } for pid=10371 comm="syz.1.1232" name="usbtmc0" dev="devtmpfs" ino=3514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 392.881682][ T30] audit: type=1400 audit(1780233423.981:3079): avc: denied { create } for pid=10379 comm="syz.0.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 392.934479][ T30] audit: type=1400 audit(1780233424.051:3080): avc: denied { ioctl } for pid=10380 comm="syz.4.1235" path="socket:[27627]" dev="sockfs" ino=27627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.058665][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 393.262302][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 393.262317][ T30] audit: type=1400 audit(1780233424.391:3082): avc: denied { mount } for pid=10371 comm="syz.1.1232" name="/" dev="ramfs" ino=28675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 393.356739][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 394.377314][T10395] loop2: detected capacity change from 0 to 7 [ 394.410240][T10395] Dev loop2: unable to read RDB block 7 [ 394.415899][T10395] loop2: unable to read partition table [ 394.423469][T10395] loop2: partition table beyond EOD, truncated [ 394.429693][T10395] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 394.997891][ T30] audit: type=1400 audit(1780233426.101:3083): avc: denied { read } for pid=10400 comm="syz.4.1243" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.021970][ T30] audit: type=1400 audit(1780233426.101:3084): avc: denied { open } for pid=10400 comm="syz.4.1243" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.045935][ T30] audit: type=1400 audit(1780233426.101:3085): avc: denied { ioctl } for pid=10400 comm="syz.4.1243" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.090898][ T30] audit: type=1400 audit(1780233426.101:3086): avc: denied { set_context_mgr } for pid=10400 comm="syz.4.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 395.110845][ T30] audit: type=1400 audit(1780233426.161:3087): avc: denied { map } for pid=10400 comm="syz.4.1243" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 395.134727][ T30] audit: type=1400 audit(1780233426.161:3088): avc: denied { call } for pid=10400 comm="syz.4.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 395.167578][ T30] audit: type=1400 audit(1780233426.271:3089): avc: denied { read write } for pid=10404 comm="syz.4.1245" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 395.581313][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'. [ 395.928790][ T30] audit: type=1400 audit(1780233426.271:3090): avc: denied { open } for pid=10404 comm="syz.4.1245" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 395.952979][ T30] audit: type=1400 audit(1780233426.681:3091): avc: denied { create } for pid=10413 comm="syz.1.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.170056][T10426] program syz.4.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.486691][ C1] net_ratelimit: 9 callbacks suppressed [ 396.486704][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 396.594596][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 396.631071][T10433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1251'. [ 396.709865][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.723352][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.733851][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.734096][T10439] loop2: detected capacity change from 0 to 7 [ 396.766408][T10439] Dev loop2: unable to read RDB block 7 [ 396.768246][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.771973][T10439] loop2: unable to read partition table [ 396.788088][T10439] loop2: partition table beyond EOD, truncated [ 396.794830][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.802049][T10439] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 396.843635][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 396.934926][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.000461][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.012139][T10155] usb 4-1: device descriptor read/64, error -110 [ 397.018599][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.026716][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.035070][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.043568][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.110843][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.121357][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.267722][ T5865] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 397.275411][T10155] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 397.318462][T10155] usb 4-1: device descriptor read/8, error -32 [ 397.596774][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 397.597137][T10155] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 397.617893][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 397.623164][ T5865] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 397.623309][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.623361][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.623417][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.623469][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.623578][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 397.623629][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.741854][T10155] usb 4-1: device descriptor read/8, error -32 [ 397.934143][ T10] usb 4-1: USB disconnect, device number 38 [ 398.047495][ T5865] usb 2-1: usb_control_msg returned -32 [ 398.067158][ T5865] usbtmc 2-1:16.0: can't read capabilities [ 398.861578][ T4934] Bluetooth: hci5: command tx timeout [ 399.159926][ T10] raw-gadget.1 gadget.3: failed to queue resume event [ 399.257893][ T5865] usb 2-1: USB disconnect, device number 32 [ 399.287260][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 399.385326][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 399.443801][ T6570] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 399.788247][ T6570] usb 5-1: Using ep0 maxpacket: 32 [ 399.829069][ T6570] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.877669][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 399.877698][ T30] audit: type=1400 audit(1780233430.971:3111): avc: denied { ioctl } for pid=10495 comm="syz.0.1262" path="socket:[28967]" dev="sockfs" ino=28967 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.947491][ T6570] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.054978][ T6570] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 400.125166][ T6570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.180873][ T6570] usb 5-1: config 0 descriptor?? [ 400.270493][ T6570] hub 5-1:0.0: bad descriptor, ignoring hub [ 400.297669][ T10] raw-gadget.1 gadget.3: failed to queue reset event [ 400.326106][ T6570] hub 5-1:0.0: probe with driver hub failed with error -5 [ 400.416166][ T10] raw-gadget.1 gadget.3: failed to queue resume event [ 400.528047][ T10] usb 4-1: device descriptor read/64, error -32 [ 400.565391][ T6570] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 400.592702][ T30] audit: type=1400 audit(1780233431.711:3112): avc: denied { write } for pid=10462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.643420][ T10] raw-gadget.1 gadget.3: failed to queue suspend event [ 400.656003][ T10] raw-gadget.1 gadget.3: failed to queue reset event [ 400.756648][ T10] raw-gadget.1 gadget.3: failed to queue resume event [ 400.818820][ T30] audit: type=1400 audit(1780233431.941:3113): avc: denied { write } for pid=10508 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.873430][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 400.926801][ T4934] Bluetooth: hci5: command tx timeout [ 400.988398][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 401.036390][ T10] raw-gadget.1 gadget.3: failed to queue reset event [ 401.063159][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.070307][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.077416][T10434] bridge_slave_0: entered allmulticast mode [ 401.084661][T10434] bridge_slave_0: entered promiscuous mode [ 401.122802][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.129885][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.136991][T10434] bridge_slave_1: entered allmulticast mode [ 401.144164][T10434] bridge_slave_1: entered promiscuous mode [ 401.171457][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.183175][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.228162][ T10] raw-gadget.1 gadget.3: failed to queue resume event [ 401.337827][ T10] usb 4-1: device descriptor read/64, error -32 [ 401.371876][T10434] team0: Port device team_slave_0 added [ 401.379564][T10434] team0: Port device team_slave_1 added [ 401.408231][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.415162][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.456346][ T10] raw-gadget.1 gadget.3: failed to queue suspend event [ 401.465607][ T10] usb usb4-port1: attempt power cycle [ 401.471065][ T10] raw-gadget.1 gadget.3: failed to queue disconnect event [ 401.479291][T10155] raw-gadget.1 gadget.3: failed to queue disconnect event [ 401.500464][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.512996][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.519920][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.536477][ T30] audit: type=1400 audit(1780233432.641:3114): avc: denied { create } for pid=10523 comm="syz.1.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.545763][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.726849][ C1] net_ratelimit: 19 callbacks suppressed [ 401.726860][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.805124][ T5703] usb 5-1: USB disconnect, device number 53 [ 401.817377][T10529] overlay: ./file0 is not a directory [ 401.856911][ T30] audit: type=1400 audit(1780233432.911:3115): avc: denied { mounton } for pid=10523 comm="syz.1.1266" path="/251/file0" dev="tmpfs" ino=1365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.958350][T10527] wg1 speed is unknown, defaulting to 1000 [ 402.140869][T10434] hsr_slave_0: entered promiscuous mode [ 402.153296][T10434] hsr_slave_1: entered promiscuous mode [ 402.159724][T10434] debugfs: 'hsr0' already exists in 'hsr' [ 402.165443][T10434] Cannot create hsr debugfs directory [ 402.175743][T10527] wg1 speed is unknown, defaulting to 1000 [ 402.233420][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.256772][T10527] wg1 speed is unknown, defaulting to 1000 [ 402.264177][T10527] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 402.275211][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.310580][T10527] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 402.361294][T10527] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 402.432229][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.456245][ T30] audit: type=1400 audit(1780233433.581:3116): avc: denied { write } for pid=10543 comm="syz.4.1270" name="sockstat" dev="proc" ino=4026533117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 402.489999][ T30] audit: type=1400 audit(1780233433.581:3117): avc: denied { create } for pid=10543 comm="syz.4.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 402.524660][T10434] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.550331][T10527] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 402.597186][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.604389][T10542] ip6_vti0: Caught tx_queue_len zero misconfig [ 402.613882][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 402.762690][T10434] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.776792][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 402.797791][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.810666][T10434] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.823560][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.831994][T10527] wg1 speed is unknown, defaulting to 1000 [ 402.838409][T10434] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.846930][T10434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.866266][T10527] wg1 speed is unknown, defaulting to 1000 [ 402.873506][T10527] wg1 speed is unknown, defaulting to 1000 [ 402.881679][T10527] wg1 speed is unknown, defaulting to 1000 [ 403.082669][T10556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1272'. [ 403.103277][ T4934] Bluetooth: hci5: command tx timeout [ 403.358652][T10527] wg1 speed is unknown, defaulting to 1000 [ 403.376582][T10556] wg1 speed is unknown, defaulting to 1000 [ 403.398477][T10527] wg1 speed is unknown, defaulting to 1000 [ 403.484313][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.594548][ T5703] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 403.699021][ T30] audit: type=1400 audit(1780233434.801:3118): avc: denied { read write } for pid=10562 comm="syz.1.1275" dev="anon_inodefs" ino=29100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 403.722718][T10570] 9pnet_fd: Insufficient options for proto=fd [ 403.731945][T10571] 9p: Bad value for 'rfdno' [ 403.747791][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.766125][ T30] audit: type=1400 audit(1780233434.801:3119): avc: denied { open } for pid=10562 comm="syz.1.1275" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 403.788998][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.811384][ T3381] bridge_slave_1: left allmulticast mode [ 403.823049][ T3381] bridge_slave_1: left promiscuous mode [ 403.834041][ T3381] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.836709][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 403.868004][ T3381] bridge_slave_0: left allmulticast mode [ 403.884997][ T3381] bridge_slave_0: left promiscuous mode [ 403.933256][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.973276][ T3381] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.185887][ T3381] bond4 (unregistering): (slave geneve2): Releasing active interface [ 404.194726][ T3381] geneve2 (unregistering): left allmulticast mode [ 404.240872][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 404.259442][ T30] audit: type=1400 audit(1780233435.371:3120): avc: denied { write } for pid=10573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.349436][ T5703] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 404.373834][ T5703] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.390355][ T5703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.400818][ T5703] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.411451][ T5703] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.424404][ T5703] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 404.433395][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.583170][ T3381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.604707][ T3381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.614008][ T3381] bond0 (unregistering): (slave team0): Releasing backup interface [ 404.626574][ T3381] bond0 (unregistering): Released all slaves [ 404.688106][ T3381] bond1 (unregistering): Released all slaves [ 404.719626][ T3381] bond2 (unregistering): Released all slaves [ 404.756560][ T3381] bond3 (unregistering): Released all slaves [ 404.792429][ T3381] bond4 (unregistering): Released all slaves [ 404.821964][ T3381] bond5 (unregistering): Released all slaves [ 404.849599][ T3381] bond6 (unregistering): Released all slaves [ 404.868957][ T3381] bond7 (unregistering): Released all slaves [ 404.886204][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 404.917985][T10589] wg1 speed is unknown, defaulting to 1000 [ 404.987165][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.994361][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 404.994372][ T30] audit: type=1326 audit(1780233436.091:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10588 comm="syz.2.1279" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f222d59ce59 code=0x0 [ 405.058770][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.067596][ T5703] usb 1-1: usb_control_msg returned -32 [ 405.080054][ T5703] usbtmc 1-1:16.0: can't read capabilities [ 405.109372][T10434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.133225][T10434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.134557][ T4934] Bluetooth: hci5: command tx timeout [ 405.187956][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.195029][T10494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.228492][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.235581][T10494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.255432][ T5726] usb 1-1: USB disconnect, device number 55 [ 405.534696][ T30] audit: type=1400 audit(1780233436.651:3123): avc: denied { write } for pid=10597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.967516][T10613] netlink: 'syz.4.1281': attribute type 10 has an invalid length. [ 406.015872][ T30] audit: type=1400 audit(1780233437.111:3124): avc: denied { write } for pid=10614 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.062840][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 406.606774][ T30] audit: type=1400 audit(1780233437.721:3125): avc: denied { mount } for pid=10623 comm="syz.4.1283" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 406.806699][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.936922][ C1] net_ratelimit: 9 callbacks suppressed [ 406.936938][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 406.977739][ T30] audit: type=1400 audit(1780233438.071:3126): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 407.004644][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.012881][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.154862][T10657] /dev/nullb0: Can't lookup blockdev [ 407.163397][ T30] audit: type=1400 audit(1780233438.241:3127): avc: denied { remount } for pid=10649 comm="syz.2.1289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 407.324489][T10653] siw: device registration error -23 [ 407.554663][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.616144][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.653134][T10661] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1286'. [ 407.666797][ T5733] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 407.680441][T10663] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 407.714444][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.996812][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 408.157772][ T30] audit: type=1400 audit(1780233439.191:3128): avc: denied { create } for pid=10634 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.314237][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.336474][ T5733] usb 1-1: Using ep0 maxpacket: 32 [ 408.349968][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.372916][ T3381] hsr_slave_0: left promiscuous mode [ 408.385004][ T30] audit: type=1400 audit(1780233439.471:3129): avc: denied { write } for pid=10630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.409895][ T3381] hsr_slave_1: left promiscuous mode [ 408.415702][ T3381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.423523][ T3381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.508530][ T30] audit: type=1400 audit(1780233439.631:3130): avc: denied { write } for pid=10674 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.531595][T10676] netlink: 'syz.2.1292': attribute type 10 has an invalid length. [ 408.638780][ T3381] team0 (unregistering): Port device team_slave_1 removed [ 408.651426][ T3381] team0 (unregistering): Port device team_slave_0 removed [ 408.664480][ T5733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.682233][ T5733] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.720334][ T5733] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 408.743847][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.763397][ T5733] usb 1-1: config 0 descriptor?? [ 408.776404][ T5733] hub 1-1:0.0: bad descriptor, ignoring hub [ 408.799355][ T5733] hub 1-1:0.0: probe with driver hub failed with error -5 [ 408.815002][ T5733] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 408.832346][T10661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.843115][T10661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.853655][T10661] bond0 (unregistering): (slave team0): Releasing backup interface [ 408.862589][T10661] bond0 (unregistering): Released all slaves [ 408.884016][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 409.007215][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 409.170990][T10434] veth0_vlan: entered promiscuous mode [ 409.258223][T10434] veth1_vlan: entered promiscuous mode [ 409.338185][T10434] veth0_macvtap: entered promiscuous mode [ 409.360416][T10434] veth1_macvtap: entered promiscuous mode [ 409.388961][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.411049][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.430474][ T8447] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.440243][ T8447] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.454281][ T8447] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.481592][ T3381] IPVS: stop unused estimator thread 0... [ 409.492069][ T8447] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.995155][ T30] audit: type=1400 audit(1780233441.111:3131): avc: denied { write } for pid=10684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.125904][ T8448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.153850][ T8448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.253649][ T30] audit: type=1400 audit(1780233441.381:3132): avc: denied { write } for pid=10706 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.257806][ T6570] usb 1-1: USB disconnect, device number 56 [ 410.317687][T10710] netlink: 'syz.1.1298': attribute type 4 has an invalid length. [ 410.454930][ T7998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.483636][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 410.495791][ T7998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.584052][T10723] netlink: 'syz.1.1302': attribute type 10 has an invalid length. [ 410.677020][ T6570] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 410.980867][ T30] audit: type=1400 audit(1780233442.041:3133): avc: denied { append } for pid=10716 comm="syz.4.1300" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 411.028470][ T30] audit: type=1400 audit(1780233442.101:3134): avc: denied { read write } for pid=10716 comm="syz.4.1300" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.072071][ T30] audit: type=1400 audit(1780233442.101:3135): avc: denied { open } for pid=10716 comm="syz.4.1300" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.096701][ T30] audit: type=1400 audit(1780233442.101:3136): avc: denied { map } for pid=10716 comm="syz.4.1300" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 411.121887][ T30] audit: type=1400 audit(1780233442.181:3137): avc: denied { mounton } for pid=10434 comm="syz-executor" path="/root/syzkaller.aMQ57Y/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 411.197232][ T6570] usb 1-1: config index 0 descriptor too short (expected 141, got 72) [ 411.213247][ T30] audit: type=1400 audit(1780233442.181:3138): avc: denied { mount } for pid=10434 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 411.240970][ T6570] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 411.250922][ T6570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.259079][ T6570] usb 1-1: Product: syz [ 411.263261][ T6570] usb 1-1: Manufacturer: syz [ 411.269375][ T6570] usb 1-1: SerialNumber: syz [ 411.278852][ T6570] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 411.312618][ T30] audit: type=1400 audit(1780233442.191:3139): avc: denied { mount } for pid=10434 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 411.339939][ T5789] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 411.403639][T10736] SELinux: syz.1.1303 (10736) wrote to checkreqprot. This is no longer supported. [ 411.407190][ T30] audit: type=1400 audit(1780233442.191:3140): avc: denied { mounton } for pid=10434 comm="syz-executor" path="/root/syzkaller.aMQ57Y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 411.636169][ T57] Bluetooth: hci2: Frame reassembly failed (-84) [ 411.665500][T10747] Bluetooth: hci2: Frame reassembly failed (-90) [ 412.114129][ T5733] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 412.526775][ T6570] net_ratelimit: 11 callbacks suppressed [ 412.526798][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.616716][ T5789] usb 1-1: Service connection timeout for: 256 [ 412.680455][ T5733] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.791107][ T5733] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 412.918676][ T5733] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.980446][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.085007][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.114974][ T5733] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 413.226114][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.368380][ T5789] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 413.370619][ T5733] hub 5-1:1.0: bad descriptor, ignoring hub [ 413.422461][ T5789] ath9k_htc: Failed to initialize the device [ 413.440222][ T5733] hub 5-1:1.0: probe with driver hub failed with error -5 [ 413.446412][ T5789] usb 1-1: ath9k_htc: USB layer deinitialized [ 413.501516][ T5733] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 413.569524][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.648071][ T4934] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 413.657041][ T5633] Bluetooth: hci2: command 0x1003 tx timeout [ 413.807087][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.886864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.992636][ T5740] usb 5-1: USB disconnect, device number 54 [ 414.327908][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.356205][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.374071][T10803] netlink: 'syz.2.1312': attribute type 10 has an invalid length. [ 414.506593][ T5740] usb 1-1: USB disconnect, device number 57 [ 414.607160][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.246651][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 415.544730][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 415.544746][ T30] audit: type=1400 audit(1780233446.671:3155): avc: denied { getopt } for pid=10821 comm="syz.1.1317" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 415.581645][ T30] audit: type=1400 audit(1780233446.671:3156): avc: denied { read write } for pid=10821 comm="syz.1.1317" name="mouse0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 415.609702][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.624865][ T30] audit: type=1400 audit(1780233446.671:3157): avc: denied { open } for pid=10821 comm="syz.1.1317" path="/dev/input/mouse0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 415.662974][T10829] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 415.691614][ T30] audit: type=1400 audit(1780233446.671:3158): avc: denied { read } for pid=10821 comm="syz.1.1317" path="socket:[30729]" dev="sockfs" ino=30729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 415.769411][ T10] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 415.779884][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.794287][ T10] usb 5-1: Product: syz [ 415.798717][ T10] usb 5-1: Manufacturer: syz [ 415.803347][ T10] usb 5-1: SerialNumber: syz [ 415.844754][ T10] usb 5-1: config 0 descriptor?? [ 415.846715][ T57] Bluetooth: Error in BCSP hdr checksum [ 415.852993][ T10] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 055 [ 415.897174][ T30] audit: type=1326 audit(1780233447.021:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10836 comm="syz.2.1320" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f222d596bd7 code=0x0 [ 415.956656][ T5733] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 415.964736][ T30] audit: type=1400 audit(1780233447.081:3160): avc: denied { write } for pid=10810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.055264][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.068422][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.102022][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.137138][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.148422][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.158520][ T30] audit: type=1400 audit(1780233447.281:3161): avc: denied { write } for pid=10843 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.180632][ T5733] usb 1-1: Using ep0 maxpacket: 8 [ 416.207451][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.215261][ T5733] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 416.227200][ T5733] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 416.239940][ T5733] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 416.252336][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.261317][ T5733] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 416.468985][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.509446][ T5733] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.513453][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.683665][ T5733] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 416.697265][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.730145][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.758426][ T10] (null): failure setting delay to 10us [ 416.792486][ T10] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 416.859877][ T10] usb 5-1: USB disconnect, device number 55 [ 416.986497][ T5733] usb 1-1: usb_control_msg returned -32 [ 417.010744][ T5733] usbtmc 1-1:16.0: can't read capabilities [ 417.189346][ T10] usb 1-1: USB disconnect, device number 58 [ 417.235725][T10868] netlink: 'syz.5.1323': attribute type 10 has an invalid length. [ 417.254264][ T30] audit: type=1400 audit(1780233448.381:3162): avc: denied { write } for pid=10855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.312664][T10868] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.448052][T10868] bond0: (slave team0): Enslaving as an active interface with an up link [ 417.544943][ T30] audit: type=1400 audit(1780233448.671:3163): avc: denied { write } for pid=10878 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.568719][ T4934] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 417.585344][ T30] audit: type=1400 audit(1780233448.701:3164): avc: denied { setopt } for pid=10879 comm="syz.0.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.698962][T10885] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1328'. [ 417.728785][ T5726] net_ratelimit: 6 callbacks suppressed [ 417.728799][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.742434][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.056717][ T5726] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 418.070734][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 418.087724][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.120920][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.237028][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 418.242968][ T5726] usb 1-1: Using ep0 maxpacket: 16 [ 418.259684][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.279629][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 418.300487][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.320898][ T5726] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 418.336803][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 418.349097][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.366142][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.380703][ T5726] usb 1-1: Product: syz [ 418.387144][ T5726] usb 1-1: Manufacturer: syz [ 418.394849][ T10] usb 2-1: config 0 descriptor?? [ 418.401828][ T5726] usb 1-1: SerialNumber: syz [ 418.431375][ T5726] usb 1-1: config 0 descriptor?? [ 418.462550][ T5726] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 418.512781][ T5726] usb 1-1: Detected FT232R [ 418.663431][ T5726] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 418.779847][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.806669][ T6570] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 418.946666][ T6570] usb 5-1: device descriptor read/64, error -71 [ 418.980129][ T10] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 419.038227][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.078154][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.158243][ T5789] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 419.217483][ T6570] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 419.240592][ T10] usb 2-1: USB disconnect, device number 33 [ 419.257172][ T5726] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 419.267666][ T8448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.285072][ T8448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.349597][ T5789] usb 6-1: Using ep0 maxpacket: 32 [ 419.367526][ T6570] usb 5-1: device descriptor read/64, error -71 [ 419.387104][ T5789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.407701][ T5789] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.422394][ T5789] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 419.432023][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.444480][ T5789] usb 6-1: config 0 descriptor?? [ 419.484687][ T5789] hub 6-1:0.0: bad descriptor, ignoring hub [ 419.503848][ T5789] hub 6-1:0.0: probe with driver hub failed with error -5 [ 419.513833][ T6570] usb usb5-port1: attempt power cycle [ 419.525779][ T10] usb 1-1: USB disconnect, device number 59 [ 419.533071][ T5789] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 419.574945][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 419.598942][ T10] ftdi_sio 1-1:0.0: device disconnected [ 420.252089][T10935] raw_sendmsg: syz.2.1335 forgot to set AF_INET. Fix it! [ 420.261827][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.270230][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.316678][ T6570] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 420.388984][ T6570] usb 5-1: device descriptor read/8, error -71 [ 420.646650][ T6570] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 420.689226][ T6570] usb 5-1: device descriptor read/8, error -71 [ 420.796817][ T5865] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 420.891714][ T6570] usb usb5-port1: unable to enumerate USB device [ 421.506663][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 421.516711][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 421.516727][ T30] audit: type=1804 audit(1780233452.151:3179): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1338" name="/newroot/256/bus/bus" dev="overlay" ino=1386 res=1 errno=0 [ 421.683918][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.726955][ T5865] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 421.737291][ T5865] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.747164][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.770048][ T5865] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.780234][ T5865] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.795162][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.804739][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.035048][ T30] audit: type=1400 audit(1780233453.161:3180): avc: denied { connect } for pid=10964 comm="syz.4.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 422.065999][ T5740] usb 6-1: USB disconnect, device number 2 [ 422.077834][ T5865] usb 2-1: usb_control_msg returned -32 [ 422.085779][ T5865] usbtmc 2-1:16.0: can't read capabilities [ 422.140336][ T30] audit: type=1400 audit(1780233453.211:3181): avc: denied { read } for pid=10964 comm="syz.4.1340" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 422.178230][T10969] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 422.187031][T10969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.196670][ T30] audit: type=1400 audit(1780233453.211:3182): avc: denied { open } for pid=10964 comm="syz.4.1340" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 422.197179][T10972] netlink: 'syz.5.1342': attribute type 10 has an invalid length. [ 422.229074][T10969] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 422.242112][T10969] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 422.251451][T10969] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 422.251685][ T10] usb 2-1: USB disconnect, device number 34 [ 422.341386][T10969] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 422.444252][ T30] audit: type=1400 audit(1780233453.571:3183): avc: denied { connect } for pid=10976 comm="syz.0.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 422.499036][T10978] overlay: ./cgroup.net/devices.allow is not a directory [ 422.689072][T10982] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 422.780813][ T145] net_ratelimit: 4 callbacks suppressed [ 422.780830][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.015223][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.026123][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.034250][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.054019][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.333806][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.651514][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.659887][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.691603][ T30] audit: type=1400 audit(1780233454.821:3184): avc: denied { mounton } for pid=10988 comm="syz.0.1347" path="/260/file0" dev="tmpfs" ino=1410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 424.206749][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 424.206763][ T4934] Bluetooth: hci0: command 0x0406 tx timeout [ 424.286658][ T5633] Bluetooth: hci5: command 0x0405 tx timeout [ 424.286755][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 424.326175][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.337239][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 424.346105][ T30] audit: type=1400 audit(1780233455.471:3185): avc: denied { bind } for pid=11002 comm="syz.4.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 424.398138][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 424.529544][T10494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.667611][T11020] 8021q: VLANs not supported on ipvlan0 [ 424.765673][ T30] audit: type=1400 audit(1780233455.891:3186): avc: denied { write } for pid=11005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.931694][ T30] audit: type=1400 audit(1780233455.961:3187): avc: denied { mounton } for pid=10988 comm="syz.0.1347" path="/260/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 425.128140][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1355'. [ 425.463048][ T30] audit: type=1400 audit(1780233456.591:3188): avc: denied { write } for pid=11030 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.646936][ T804] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 425.796840][ T804] usb 6-1: Using ep0 maxpacket: 8 [ 425.814766][ T804] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 425.837715][ T804] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 425.851335][ T804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 425.862807][ T804] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.873368][ T804] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.888474][ T804] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 425.897830][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.027538][T11044] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 426.316512][ T804] usb 6-1: usb_control_msg returned -32 [ 426.376701][ T4934] Bluetooth: hci5: command 0x0405 tx timeout [ 426.416248][ T804] usbtmc 6-1:16.0: can't read capabilities [ 426.529699][ T10] usb 6-1: USB disconnect, device number 3 [ 426.963689][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 426.963706][ T30] audit: type=1400 audit(1780233458.091:3194): avc: denied { create } for pid=11058 comm="syz.4.1363" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.004446][ T30] audit: type=1400 audit(1780233458.131:3195): avc: denied { write } for pid=11058 comm="syz.4.1363" name="file0" dev="tmpfs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.053909][ T30] audit: type=1400 audit(1780233458.131:3196): avc: denied { open } for pid=11058 comm="syz.4.1363" path="/278/file0" dev="tmpfs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.089800][ T30] audit: type=1400 audit(1780233458.171:3197): avc: denied { mounton } for pid=11058 comm="syz.4.1363" path="/278/file0" dev="tmpfs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.117527][ T30] audit: type=1400 audit(1780233458.211:3198): avc: denied { ioctl } for pid=11058 comm="syz.4.1363" path="/278/file0" dev="tmpfs" ino=1506 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.214789][ T30] audit: type=1400 audit(1780233458.341:3199): avc: denied { unlink } for pid=5615 comm="syz-executor" name="file0" dev="tmpfs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 427.284266][ T30] audit: type=1400 audit(1780233458.391:3200): avc: denied { read } for pid=11069 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 427.338839][ T30] audit: type=1400 audit(1780233458.441:3201): avc: denied { map } for pid=11069 comm="syz.1.1370" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 427.391644][ T30] audit: type=1400 audit(1780233458.451:3202): avc: denied { ioctl } for pid=11069 comm="syz.1.1370" path="socket:[31920]" dev="sockfs" ino=31920 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 427.596876][T11088] wg1 speed is unknown, defaulting to 1000 [ 427.626843][ T30] audit: type=1400 audit(1780233458.761:3203): avc: denied { getopt } for pid=11087 comm="syz.0.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 427.840685][T11096] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 428.175126][ T12] net_ratelimit: 12 callbacks suppressed [ 428.175142][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.189884][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.202648][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.447490][ T4934] Bluetooth: hci5: command 0x0405 tx timeout [ 428.698698][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.750206][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.768174][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.776815][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.788977][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.247122][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.267975][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1382'. [ 429.438342][ T5740] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 429.688096][ T5740] usb 2-1: Using ep0 maxpacket: 8 [ 429.854073][ T5740] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 429.868706][ T5740] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 429.901212][ T5740] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 429.923446][ T5740] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.943055][ T5740] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.972269][ T5740] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 429.989923][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.079065][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.260133][ T5740] usb 2-1: usb_control_msg returned -32 [ 430.275823][T11147] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 430.624536][ T5740] usbtmc 2-1:16.0: can't read capabilities [ 430.655092][ T5740] usb 2-1: USB disconnect, device number 35 [ 431.065905][T11156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1391'. [ 431.452436][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1394'. [ 431.523001][ T24] IPVS: starting estimator thread 0... [ 431.584653][ T4934] Bluetooth: hci1: Invalid handle: 0x3600 > 0x0eff [ 431.656828][T11170] IPVS: using max 41 ests per chain, 98400 per kthread [ 432.187804][ T5740] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 432.233653][T11200] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1403'. [ 432.377054][T11206] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 432.673606][ T5740] usb 2-1: config index 0 descriptor too short (expected 141, got 72) [ 432.684009][ T5740] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 432.695205][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.711545][ T5740] usb 2-1: Product: syz [ 432.720980][ T5740] usb 2-1: Manufacturer: syz [ 432.729784][ T5740] usb 2-1: SerialNumber: syz [ 432.745622][ T5740] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 432.777887][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 432.836529][T11212] binder: BINDER_SET_CONTEXT_MGR already set [ 432.843652][T11212] binder: 11211:11212 ioctl 4018620d 200000000100 returned -16 [ 432.860673][T11212] binder: 11211:11212 ioctl 89e4 200000000240 returned -22 [ 432.925412][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 433.034934][T11223] netlink: 'syz.2.1408': attribute type 1 has an invalid length. [ 433.048778][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 433.048789][ T30] audit: type=1400 audit(1780233464.181:3213): avc: denied { write } for pid=11207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.064432][T11223] 8021q: adding VLAN 0 to HW filter on device bond8 [ 433.175407][T11223] vlan9: entered allmulticast mode [ 433.181703][ T30] audit: type=1400 audit(1780233464.301:3214): avc: denied { write } for pid=11230 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.215376][T11223] bond8: entered allmulticast mode [ 433.287365][T11233] loop5: detected capacity change from 0 to 7 [ 433.294665][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.303410][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.312163][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.320788][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.331582][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.339775][ T5733] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 433.340305][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.356329][T11236] 9pnet_fd: Insufficient options for proto=fd [ 433.367643][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.376863][T11233] ldm_validate_partition_table(): Disk read failed. [ 433.383526][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.395177][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.406155][T11233] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.452117][T11238] program syz.4.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.675737][T11233] Dev loop5: unable to read RDB block 0 [ 433.727549][ T24] net_ratelimit: 3338 callbacks suppressed [ 433.727574][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.744571][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.754355][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.756811][ T804] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 433.784974][T11233] loop5: unable to read partition table [ 433.795904][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.835883][T11233] loop5: partition table beyond EOD, truncated [ 433.844305][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.854439][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.882818][T11233] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 434.041204][ T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.081999][ T5733] usb 1-1: Using ep0 maxpacket: 8 [ 434.094508][ T804] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 434.120782][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.145520][ T804] usb 5-1: Product: syz [ 434.269014][ T804] usb 5-1: Manufacturer: syz [ 434.273850][ T804] usb 5-1: SerialNumber: syz [ 434.300101][ T804] usb 5-1: config 0 descriptor?? [ 434.380160][T11244] /dev/nullb0: Can't lookup blockdev [ 434.640160][ T804] cytherm 5-1:0.0: Cypress thermometer device now attached [ 434.644106][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.653773][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.694064][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.708477][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.848012][ T10] usb 2-1: Service connection timeout for: 256 [ 434.849385][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.017735][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 435.029131][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.041363][ T5733] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 435.049649][ T5733] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.060239][ T5733] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.070588][ T5733] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.080594][ T30] audit: type=1400 audit(1780233466.211:3215): avc: denied { append } for pid=11246 comm="syz.5.1413" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 435.082242][T11247] usb usb8: usbfs: process 11247 (syz.5.1413) did not claim interface 0 before use [ 435.103928][ T5733] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.103967][ T5733] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.135458][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.171657][ T10] ath9k_htc: Failed to initialize the device [ 435.173527][ T30] audit: type=1400 audit(1780233466.291:3216): avc: denied { create } for pid=11246 comm="syz.5.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 435.193663][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 435.324174][ T30] audit: type=1400 audit(1780233466.311:3217): avc: denied { connect } for pid=11246 comm="syz.5.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 435.327278][ T5740] usb 2-1: USB disconnect, device number 36 [ 435.346278][ T30] audit: type=1400 audit(1780233466.311:3218): avc: denied { bind } for pid=11246 comm="syz.5.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 435.369691][ T30] audit: type=1400 audit(1780233466.311:3219): avc: denied { read } for pid=11246 comm="syz.5.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 435.389592][ T30] audit: type=1400 audit(1780233466.311:3220): avc: denied { mount } for pid=11248 comm="syz.2.1414" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 435.426219][ T30] audit: type=1400 audit(1780233466.481:3221): avc: denied { write } for pid=11232 comm="syz.4.1410" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 435.429473][ T5733] usb 1-1: usb_control_msg returned -32 [ 435.478589][ T4934] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 435.489641][ T5733] usbtmc 1-1:16.0: can't read capabilities [ 435.494556][ T30] audit: type=1400 audit(1780233466.591:3222): avc: denied { write } for pid=11246 comm="syz.5.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 435.595897][T11256] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.1416'. [ 435.661243][ T24] usb 1-1: USB disconnect, device number 60 [ 435.663982][ T5740] usb 5-1: USB disconnect, device number 60 [ 435.685841][ T5740] cytherm 5-1:0.0: Cypress thermometer now disconnected [ 436.076739][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'. [ 436.720730][T11272] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 436.773031][T11272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.921458][T11276] vlan7: entered allmulticast mode [ 436.941570][T11276] bond7: entered allmulticast mode [ 436.994778][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1423'. [ 437.026762][ T804] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 437.198383][ T804] usb 1-1: Using ep0 maxpacket: 32 [ 437.224554][ T804] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 437.252603][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1427'. [ 437.264806][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.290172][ T804] usb 1-1: Product: syz [ 437.301731][ T804] usb 1-1: Manufacturer: syz [ 437.311527][ T804] usb 1-1: SerialNumber: syz [ 437.387866][ T804] usb 1-1: config 0 descriptor?? [ 437.411419][ T804] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 437.437753][ T804] dvb-usb: bulk message failed: -22 (4/0) [ 437.457790][ T804] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 437.495943][ T804] dvb-usb: bulk message failed: -22 (5/0) [ 437.514689][ T804] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 437.568830][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 437.603584][ T804] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 437.632195][ T804] usb 1-1: media controller created [ 437.701467][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.736777][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 437.843538][ T804] usb 1-1: selecting invalid altsetting 3 [ 437.853325][ T804] ttusb2: set interface to alts=3 failed [ 437.913431][ T804] DVB: Unable to find symbol tda10086_attach() [ 437.931875][ T804] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 437.945431][ T804] dvb-usb: bulk message failed: -22 (4/0) [ 437.951321][ T804] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 437.962855][ T804] dvb-usb: bulk message failed: -22 (5/0) [ 437.978452][ T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 437.980263][ T804] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 438.008091][ T10] usb 2-1: config 0 has no interface number 0 [ 438.033418][ T10] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 438.035018][ T804] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 438.088743][ T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 38384, setting to 64 [ 438.139326][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 438.165430][ T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 438.185627][ T10] usb 2-1: Product: syz [ 438.198049][ T10] usb 2-1: SerialNumber: syz [ 438.226093][ T10] usb 2-1: config 0 descriptor?? [ 438.245330][T11282] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 438.263125][ T10] cm109 2-1:0.8: invalid payload size 64, expected 4 [ 438.290631][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input35 [ 438.332459][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 438.332470][ T30] audit: type=1400 audit(1780233469.461:3228): avc: denied { read } for pid=4968 comm="acpid" name="event4" dev="devtmpfs" ino=3594 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 438.386739][ T6570] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 438.389392][ T30] audit: type=1400 audit(1780233469.461:3229): avc: denied { open } for pid=4968 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3594 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 438.429686][ T30] audit: type=1400 audit(1780233469.461:3230): avc: denied { ioctl } for pid=4968 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3594 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 438.619659][T11282] CUSE: unknown device info "€" [ 438.626655][ T6570] usb 6-1: Using ep0 maxpacket: 8 [ 438.636648][T11282] CUSE: unknown device info "" [ 438.641702][T11282] CUSE: unknown device info "" [ 438.650225][T11282] CUSE: unknown device info "" [ 438.656088][ T6570] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 438.685437][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 438.693915][T11282] CUSE: unknown device info "+" [ 438.700507][ T6570] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.710112][T11282] CUSE: unknown device info "‚" [ 438.717107][T11282] CUSE: unknown device info "" [ 438.722086][T11282] CUSE: zero length info key specified [ 438.743739][ T6570] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.772605][ T6570] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.805446][ T6570] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.884272][ T6570] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.888011][ T57] net_ratelimit: 11 callbacks suppressed [ 438.888024][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.926671][ C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71 [ 438.947953][ T6570] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.011425][ T804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.140237][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 439.144208][ T804] usb 2-1: USB disconnect, device number 37 [ 439.147178][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 439.310855][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.355181][ T6570] usb 6-1: usb_control_msg returned -32 [ 439.405401][ T6570] usbtmc 6-1:16.0: can't read capabilities [ 439.491981][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.536741][ T804] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 439.793830][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.816513][T11307] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1432'. [ 439.872723][ T6570] usb 6-1: USB disconnect, device number 4 [ 439.934763][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.225234][T11331] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 440.679132][ T5740] usb 1-1: USB disconnect, device number 61 [ 440.920600][ T5740] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 440.931824][ T30] audit: type=1400 audit(1780233472.001:3231): avc: denied { ioctl } for pid=11332 comm="syz.4.1438" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 440.946144][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.017327][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.102412][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.150249][T11337] /dev/nullb0: Can't open blockdev [ 441.253697][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.930349][ T6570] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 442.029951][ T30] audit: type=1400 audit(1780233472.591:3232): avc: denied { create } for pid=11339 comm="syz.5.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 442.170767][ T6570] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.180931][ T6570] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.205636][ T6570] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.245430][ T6570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.277357][T11354] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 442.418220][ T30] audit: type=1400 audit(1780233473.551:3233): avc: denied { open } for pid=11359 comm="syz.4.1448" path="/dev/ttyqd" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 442.483522][ T6570] usb 1-1: usb_control_msg returned -32 [ 442.498626][ T6570] usbtmc 1-1:16.0: can't read capabilities [ 442.522171][ T6570] usb 1-1: USB disconnect, device number 62 [ 442.577785][ T5733] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 442.608141][T11371] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 442.948850][ T30] audit: type=1400 audit(1780233474.071:3234): avc: denied { watch watch_reads } for pid=11372 comm="syz.0.1451" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 443.046611][ T5733] usb 2-1: Using ep0 maxpacket: 8 [ 443.059118][ T5733] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 443.069194][ T5733] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.089353][ T5733] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.110658][ T5733] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.120954][ T5733] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.138765][ T5733] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 443.170230][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.178596][ T30] audit: type=1400 audit(1780233474.301:3235): avc: denied { mount } for pid=11379 comm="syz.5.1454" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 443.414721][ T5733] usb 2-1: usb_control_msg returned -32 [ 443.420519][ T5733] usbtmc 2-1:16.0: can't read capabilities [ 443.577457][ T10] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 443.617903][ T5733] usb 2-1: USB disconnect, device number 38 [ 443.738391][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.750535][ T10] usb 1-1: config 0 has no interface number 0 [ 443.785872][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 443.821097][T11356] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1446'. [ 443.840945][ T10] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.905304][ T10] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.946850][ T804] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 443.969555][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 443.995730][ T10] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 444.040715][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.086039][ T10] usb 1-1: config 0 descriptor?? [ 444.116717][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 444.125376][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.136423][ T5740] net_ratelimit: 6 callbacks suppressed [ 444.136435][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.168397][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.196456][ T804] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 444.206067][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.221780][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.248092][ T804] usb 5-1: config 0 descriptor?? [ 444.260609][ T804] hub 5-1:0.0: USB hub found [ 444.460736][ T804] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 444.844261][ T8448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.156166][ T10] uclogic 0003:145F:0212.000B: pen parameters not found [ 445.170504][T11387] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1455'. [ 445.177400][ T10] uclogic 0003:145F:0212.000B: interface is invalid, ignoring [ 445.181829][ T804] hid-generic 0003:046D:C31C.000C: unknown main item tag 0x0 [ 445.196296][ T8448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.224832][ T10] usb 1-1: USB disconnect, device number 63 [ 445.235891][ T804] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 445.237085][ T5733] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 445.259686][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.310237][ T804] usb 5-1: USB disconnect, device number 61 [ 445.330059][T11408] fido_id[11408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C31C.000C/report_descriptor': No such device [ 445.388293][ T5733] usb 2-1: device descriptor read/64, error -71 [ 445.638618][ T5733] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 445.776722][ T5733] usb 2-1: device descriptor read/64, error -71 [ 445.876750][ T804] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 445.887142][ T5733] usb usb2-port1: attempt power cycle [ 446.046808][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 446.072684][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.097794][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.110103][ T804] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 446.119803][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.139410][ T804] usb 5-1: config 0 descriptor?? [ 446.147887][ T804] hub 5-1:0.0: USB hub found [ 446.236724][ T5733] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 446.289392][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.316951][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.325935][ T7998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.354731][ T804] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 446.427401][ T5733] usb 2-1: device descriptor read/8, error -71 [ 446.437285][ T804] usbhid 5-1:0.0: can't add hid device: -71 [ 446.454559][ T804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 446.532987][ T804] usb 5-1: USB disconnect, device number 62 [ 446.596828][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.605678][ T30] audit: type=1400 audit(1780233477.731:3236): avc: denied { write } for pid=11391 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 446.635751][ T30] audit: type=1400 audit(1780233477.761:3237): avc: denied { read } for pid=11391 comm="syz.4.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 446.756825][ T5733] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 446.777536][ T5733] usb 2-1: device descriptor read/8, error -71 [ 446.898622][ T5733] usb usb2-port1: unable to enumerate USB device [ 447.166798][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.238290][ T30] audit: type=1400 audit(1780233478.361:3238): avc: denied { bind } for pid=11438 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 447.282840][ T30] audit: type=1400 audit(1780233478.371:3239): avc: denied { node_bind } for pid=11438 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 447.318571][ T30] audit: type=1400 audit(1780233478.391:3240): avc: denied { connect } for pid=11438 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 447.394267][T11442] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1470'. [ 447.618738][T11449] netlink: 'syz.1.1471': attribute type 27 has an invalid length. [ 448.898519][T11461] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1476'. [ 449.416845][ T5733] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 449.493231][ T6570] net_ratelimit: 6 callbacks suppressed [ 449.493245][ T6570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.579949][ T5733] usb 5-1: Using ep0 maxpacket: 32 [ 450.073647][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.083813][ T5733] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 450.093026][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.104541][ T5733] usb 5-1: config 0 descriptor?? [ 450.113900][ T5733] hub 5-1:0.0: bad descriptor, ignoring hub [ 450.122899][ T5733] hub 5-1:0.0: probe with driver hub failed with error -5 [ 450.138639][ T5733] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 450.166033][ T30] audit: type=1400 audit(1780233481.291:3241): avc: denied { load_policy } for pid=11478 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 450.166187][T11483] SELinux: policydb version 514799767 does not match my version range 15-35 [ 450.196209][T11483] SELinux: failed to load policy [ 450.209279][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.238508][ T8448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.246975][ T8448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.376764][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 450.527966][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 450.530097][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.543023][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 450.551930][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.573210][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.584101][T11497] FAULT_INJECTION: forcing a failure. [ 450.584101][T11497] name failslab, interval 1, probability 0, space 0, times 0 [ 450.597342][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.607713][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.620755][T11497] CPU: 0 UID: 0 PID: 11497 Comm: syz.0.1488 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.620782][T11497] Tainted: [L]=SOFTLOCKUP [ 450.620789][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.620799][T11497] Call Trace: [ 450.620806][T11497] [ 450.620818][T11497] dump_stack_lvl+0x100/0x190 [ 450.620844][T11497] should_fail_ex.cold+0x5/0xa [ 450.620870][T11497] should_failslab+0xc2/0x120 [ 450.620891][T11497] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 450.620917][T11497] ? do_epoll_ctl+0x2434/0x36a0 [ 450.620949][T11497] do_epoll_ctl+0x2434/0x36a0 [ 450.620984][T11497] ? __pfx_do_epoll_ctl+0x10/0x10 [ 450.621008][T11497] ? find_held_lock+0x2b/0x80 [ 450.621024][T11497] ? __might_fault+0xc5/0x140 [ 450.621049][T11497] ? __might_fault+0xc5/0x140 [ 450.621082][T11497] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 450.621106][T11497] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 450.621134][T11497] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 450.621163][T11497] ? rcu_is_watching+0x12/0xc0 [ 450.621192][T11497] do_syscall_64+0x115/0x870 [ 450.621216][T11497] ? clear_bhb_loop+0x40/0x90 [ 450.621238][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.621255][T11497] RIP: 0033:0x7feb3a19ce59 [ 450.621270][T11497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.621287][T11497] RSP: 002b:00007feb3afa2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 450.621306][T11497] RAX: ffffffffffffffda RBX: 00007feb3a415fa0 RCX: 00007feb3a19ce59 [ 450.621316][T11497] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 450.621326][T11497] RBP: 00007feb3afa2090 R08: 0000000000000000 R09: 0000000000000000 [ 450.621337][T11497] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 450.621347][T11497] R13: 00007feb3a416038 R14: 00007feb3a415fa0 R15: 00007ffe303669d8 [ 450.621372][T11497] [ 450.817643][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.826721][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.042939][ T10] usb 6-1: usb_control_msg returned -32 [ 451.048877][ T10] usbtmc 6-1:16.0: can't read capabilities [ 451.162772][T11505] netlink: 'syz.0.1489': attribute type 4 has an invalid length. [ 451.261840][ T10] usb 6-1: USB disconnect, device number 5 [ 451.440337][ T30] audit: type=1400 audit(1780233482.571:3242): avc: denied { connect } for pid=11507 comm="syz.2.1491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 451.484785][T11482] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1483'. [ 451.849376][T11519] netlink: 'syz.4.1493': attribute type 1 has an invalid length. [ 451.867225][T11519] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.876824][ T30] audit: type=1400 audit(1780233483.011:3243): avc: denied { accept } for pid=11518 comm="syz.4.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 451.899458][ T30] audit: type=1400 audit(1780233483.031:3244): avc: denied { watch_reads } for pid=11518 comm="syz.4.1493" path="/302" dev="tmpfs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 451.922651][ T30] audit: type=1400 audit(1780233483.031:3245): avc: denied { rename } for pid=11518 comm="syz.4.1493" name="file0" dev="tmpfs" ino=1636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 451.926922][ T5733] usb 5-1: USB disconnect, device number 63 [ 452.590926][T11533] netlink: 'syz.2.1496': attribute type 10 has an invalid length. [ 453.086681][ T4934] Bluetooth: hci0: command 0x0406 tx timeout [ 453.097572][T11502] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 453.979049][T11502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 453.987798][T11502] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 453.993798][T11502] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 454.336679][ T5733] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 454.576794][T11556] vxfs: WRONG superblock magic 00000000 at 1 [ 454.583573][T11556] vxfs: WRONG superblock magic 00000000 at 8 [ 454.589613][T11556] vxfs: can't find superblock. [ 454.788855][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 454.812431][ T5733] usb 1-1: device descriptor read/all, error -71 [ 455.169539][ T4934] Bluetooth: hci1: command 0x0406 tx timeout [ 455.216075][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1507'. [ 455.241619][T11567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 455.387396][ T5733] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 455.408479][ T30] audit: type=1400 audit(1780233486.541:3246): avc: denied { name_bind } for pid=11576 comm="syz.4.1509" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 455.506817][ T30] audit: type=1400 audit(1780233486.551:3247): avc: denied { setopt } for pid=11574 comm="syz.5.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 455.593397][ T5733] usb 1-1: config 8 has an invalid interface number: 57 but max is 1 [ 455.692349][ T5733] usb 1-1: config 8 has an invalid interface number: 5 but max is 1 [ 455.705791][ T5733] usb 1-1: config 8 has no interface number 0 [ 455.725000][ T5733] usb 1-1: config 8 has no interface number 1 [ 455.731421][ T10] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 455.748315][ T5733] usb 1-1: config 8 interface 57 has no altsetting 0 [ 455.758202][ T5733] usb 1-1: config 8 interface 5 has no altsetting 0 [ 455.777171][ T5733] usb 1-1: New USB device found, idVendor=0856, idProduct=ac25, bcdDevice= 4.5c [ 455.786354][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.849473][ T5733] usb 1-1: Product: syz [ 455.853666][ T5733] usb 1-1: Manufacturer: syz [ 456.164537][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 456.172007][ T4934] Bluetooth: hci5: command 0x0405 tx timeout [ 456.249578][ T5733] usb 1-1: SerialNumber: syz [ 456.268025][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 456.288148][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 456.300893][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 456.312609][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 456.412699][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 37696, setting to 64 [ 456.423673][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 456.437763][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 456.446957][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 456.455028][ T10] usb 5-1: SerialNumber: syz [ 456.462200][T11581] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 456.469581][T11581] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 456.477290][T11581] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 456.527417][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 456.527644][ T5733] ftdi_sio 1-1:8.57: FTDI USB Serial Device converter detected [ 456.576635][ T5733] ftdi_sio ttyUSB0: unknown device type: 0x45c [ 456.598617][ T5733] ftdi_sio 1-1:8.5: FTDI USB Serial Device converter detected [ 456.620722][ T5733] ftdi_sio ttyUSB1: unknown device type: 0x45c [ 456.653766][ T5733] usb 1-1: USB disconnect, device number 65 [ 456.675999][ T5733] ftdi_sio 1-1:8.57: device disconnected [ 456.688131][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 456.700671][ T5733] ftdi_sio 1-1:8.5: device disconnected [ 456.702314][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 456.744801][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.782348][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.798737][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.821128][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.849256][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.870847][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.046798][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 457.099167][ T24] usb 6-1: usb_control_msg returned -32 [ 457.110163][ T24] usbtmc 6-1:16.0: can't read capabilities [ 457.210236][ T10] usb 2-1: config index 0 descriptor too short (expected 141, got 72) [ 457.228748][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 457.245048][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.248445][ T30] audit: type=1400 audit(1780233488.371:3248): avc: denied { read } for pid=11605 comm="syz.0.1517" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 457.259085][ T10] usb 2-1: Product: syz [ 457.281691][ T10] usb 2-1: Manufacturer: syz [ 457.286309][ T10] usb 2-1: SerialNumber: syz [ 457.293529][ T30] audit: type=1400 audit(1780233488.391:3249): avc: denied { open } for pid=11605 comm="syz.0.1517" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 457.346079][ T24] usb 6-1: USB disconnect, device number 6 [ 457.347957][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 457.375020][ T5733] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 457.382133][ T30] audit: type=1400 audit(1780233488.391:3250): avc: denied { ioctl } for pid=11605 comm="syz.0.1517" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 457.542622][T11589] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1513'. [ 458.620032][ T5733] usb 2-1: Service connection timeout for: 256 [ 458.883337][ T5733] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 459.235349][ T5733] ath9k_htc: Failed to initialize the device [ 459.594985][ T5711] usb 5-1: USB disconnect, device number 64 [ 459.835695][ T5733] usb 2-1: ath9k_htc: USB layer deinitialized [ 459.890766][ T30] audit: type=1400 audit(1780233491.021:3251): avc: denied { kexec_image_load } for pid=11632 comm="syz.4.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 459.951979][ T10] usb 2-1: USB disconnect, device number 43 [ 460.034286][ T30] audit: type=1400 audit(1780233491.161:3252): avc: denied { read write } for pid=11638 comm="syz.1.1527" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 460.511492][ T24] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 460.535943][ T30] audit: type=1400 audit(1780233491.161:3253): avc: denied { open } for pid=11638 comm="syz.1.1527" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 460.561927][ T24] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 460.965181][T11651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1528'. [ 461.172372][ T30] audit: type=1400 audit(1780233492.291:3254): avc: denied { create } for pid=11654 comm="syz.4.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 461.187538][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 461.294790][ T30] audit: type=1400 audit(1780233492.291:3255): avc: denied { write } for pid=11654 comm="syz.4.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 461.816746][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 462.396388][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1536'. [ 462.562303][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1535'. [ 462.575349][ T30] audit: type=1400 audit(1780233493.681:3256): avc: denied { ioctl } for pid=11671 comm="syz.4.1535" path="socket:[36354]" dev="sockfs" ino=36354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.846247][ T30] audit: type=1400 audit(1780233493.691:3257): avc: denied { bind } for pid=11671 comm="syz.4.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.872558][ T30] audit: type=1400 audit(1780233493.691:3258): avc: denied { setopt } for pid=11671 comm="syz.4.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.958323][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 463.026997][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1538'. [ 463.856671][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 463.864902][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.874917][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.884756][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.894740][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.910318][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.919465][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.099309][ T30] audit: type=1400 audit(1780233495.231:3259): avc: denied { write } for pid=11689 comm="syz.1.1542" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 464.146268][ T10] usb 6-1: usb_control_msg returned -32 [ 464.156001][ T10] usbtmc 6-1:16.0: can't read capabilities [ 464.590792][ T10] usb 6-1: USB disconnect, device number 7 [ 464.753506][T11661] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1532'. [ 464.885757][T11702] ip6gre1: entered promiscuous mode [ 464.906683][T11702] ip6gre1: entered allmulticast mode [ 464.912889][T11703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.944987][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 464.965313][T11707] netlink: set zone limit has 4 unknown bytes [ 465.100094][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.125803][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.176050][T11726] netlink: 'syz.5.1553': attribute type 1 has an invalid length. [ 465.382710][ T30] audit: type=1400 audit(1780233496.471:3260): avc: denied { name_bind } for pid=11711 comm="syz.1.1549" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 465.570450][T11726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.779457][T11728] vlan2: entered allmulticast mode [ 465.850824][T11735] comedi comedi3: rti800: I/O base address not correctly aligned [ 465.878583][T11728] bond1: entered allmulticast mode [ 465.908430][T11724] bond1: (slave geneve2): making interface the new active one [ 465.924048][T11724] geneve2: entered allmulticast mode [ 466.016830][ T30] audit: type=1400 audit(1780233497.051:3261): avc: denied { getopt } for pid=11738 comm="syz.4.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 466.040467][T11724] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 466.116157][T11735] wg1 speed is unknown, defaulting to 1000 [ 466.268244][ T6570] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 466.360858][ T30] audit: type=1400 audit(1780233497.491:3262): avc: denied { relabelfrom } for pid=11742 comm="syz.5.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 466.387018][ T30] audit: type=1400 audit(1780233497.491:3263): avc: denied { relabelto } for pid=11742 comm="syz.5.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 466.408182][T11750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1560'. [ 466.439466][ T6570] usb 5-1: unable to get BOS descriptor or descriptor too short [ 466.470884][ T6570] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 466.497270][ T6570] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 466.514178][ T6570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.522553][ T30] audit: type=1400 audit(1780233497.651:3264): avc: denied { setopt } for pid=11752 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 466.543508][ T6570] usb 5-1: Product: syz [ 466.547934][ T6570] usb 5-1: Manufacturer: syz [ 466.552623][ T6570] usb 5-1: SerialNumber: syz [ 466.552964][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'. [ 466.580576][T11749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=225 sclass=netlink_route_socket pid=11749 comm=syz.2.1560 [ 466.774610][ T6570] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 466.786961][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 466.946596][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 466.952929][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.963304][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.974714][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.984740][ T10] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.000211][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 467.007552][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 467.017043][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.026676][ T10] usb 1-1: config 0 descriptor?? [ 467.186785][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.198948][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.250978][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 467.273310][T11764] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 467.273310][T11764] The task syz.5.1563 (11764) triggered the difference, watch for misbehavior. [ 467.308142][ T30] audit: type=1804 audit(1780233498.441:3265): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1563" name="/newroot/43/bus/bus" dev="overlay" ino=246 res=1 errno=0 [ 467.362731][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 467.374715][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 467.388786][ T10] usb 1-1: USB disconnect, device number 66 [ 467.411804][ T6570] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 467.494981][T11773] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 468.598793][T11778] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 468.617448][ T30] audit: type=1400 audit(1780233499.741:3266): avc: denied { map } for pid=11777 comm="syz.2.1570" path="socket:[34384]" dev="sockfs" ino=34384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 468.809554][T11780] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 468.882478][T11782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1572'. [ 468.903718][T11780] bond9: entered promiscuous mode [ 468.919613][T11780] 8021q: adding VLAN 0 to HW filter on device bond9 [ 469.194245][T11782] bond9: entered allmulticast mode [ 469.226933][ T6570] usb 5-1: USB disconnect, device number 65 [ 469.323676][T11783] bond9: (slave bridge3): making interface the new active one [ 469.334559][T11783] bridge3: entered promiscuous mode [ 469.340685][T11783] bridge3: entered allmulticast mode [ 469.347540][T11783] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 469.380259][ T6130] udevd[6130]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.397510][T11788] netlink: 'syz.5.1569': attribute type 1 has an invalid length. [ 469.519941][T11788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.549104][T11798] vlan3: entered allmulticast mode [ 469.644764][T11798] bond2: entered allmulticast mode [ 471.431940][ T30] audit: type=1400 audit(1780233502.551:3267): avc: denied { ioctl } for pid=11821 comm="syz.5.1581" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 471.470220][T11822] SELinux: policydb version 514799767 does not match my version range 15-35 [ 471.658634][T11822] SELinux: failed to load policy [ 471.743738][ T30] audit: type=1326 audit(1780233502.641:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 471.892561][ T30] audit: type=1326 audit(1780233502.641:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 471.919545][ T30] audit: type=1326 audit(1780233502.651:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 471.940339][T11825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1582'. [ 471.946078][ T30] audit: type=1326 audit(1780233502.651:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 471.982516][ T30] audit: type=1326 audit(1780233502.661:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 472.024327][T11825] openvswitch: netlink: Flow key attr not present in new flow. [ 472.034694][ T30] audit: type=1326 audit(1780233502.661:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 472.152401][ T30] audit: type=1326 audit(1780233502.671:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 472.264041][ T30] audit: type=1326 audit(1780233502.671:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11821 comm="syz.5.1581" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 473.686625][ T804] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 473.884603][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 473.884623][ T30] audit: type=1400 audit(1780233505.011:3300): avc: denied { ioctl } for pid=11856 comm="syz.1.1590" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 475.159616][ T804] usb 6-1: Using ep0 maxpacket: 32 [ 475.661996][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.741508][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.831319][ T804] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 475.922612][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.167365][ T804] usb 6-1: config 0 descriptor?? [ 476.278674][ T804] hub 6-1:0.0: USB hub found [ 476.328075][ T30] audit: type=1400 audit(1780233507.451:3301): avc: denied { setattr } for pid=11881 comm="syz.4.1599" name="NETLINK" dev="sockfs" ino=34702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.419049][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1600'. [ 476.495222][ T804] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 476.531752][ T804] usbhid 6-1:0.0: can't add hid device: -71 [ 476.555407][ T804] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 476.618172][ T804] usb 6-1: USB disconnect, device number 8 [ 477.152888][ T30] audit: type=1400 audit(1780233507.911:3302): avc: denied { map } for pid=11899 comm="syz.2.1603" path="socket:[36722]" dev="sockfs" ino=36722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 477.280106][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 477.610160][ T804] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 477.778158][ T804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.802736][ T804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 477.833608][ T804] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.861259][ T804] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 477.876648][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.925210][ T804] hub 5-1:1.0: bad descriptor, ignoring hub [ 477.942868][ T804] hub 5-1:1.0: probe with driver hub failed with error -5 [ 477.970813][ T804] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 477.992626][T11925] netlink: 'syz.5.1611': attribute type 1 has an invalid length. [ 478.059071][T11925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.118985][T11927] vlan4: entered allmulticast mode [ 478.198026][T11927] bond3: entered allmulticast mode [ 478.436892][ T6570] usb 5-1: USB disconnect, device number 66 [ 479.093985][T11947] wg1 speed is unknown, defaulting to 1000 [ 479.225551][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 479.712698][ T30] audit: type=1326 audit(1780233510.841:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 482.608463][ T30] audit: type=1326 audit(1780233510.831:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 482.635726][ T30] audit: type=1326 audit(1780233510.881:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 482.663182][ T30] audit: type=1326 audit(1780233510.881:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 482.690139][ T30] audit: type=1326 audit(1780233510.881:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 482.717011][ T30] audit: type=1326 audit(1780233510.881:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 482.755886][ T30] audit: type=1326 audit(1780233510.881:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 482.811027][T11971] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 482.828378][ T30] audit: type=1326 audit(1780233510.881:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a5c79ce59 code=0x7ffc0000 [ 482.859441][ T30] audit: type=1326 audit(1780233510.901:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5c75d68e code=0x7ffc0000 [ 482.886747][ T30] audit: type=1326 audit(1780233510.911:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11943 comm="syz.5.1618" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5a5c75d68e code=0x7ffc0000 [ 482.917419][T11971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 482.969578][T11978] vlan5: entered allmulticast mode [ 482.975171][T11978] bond3: entered allmulticast mode [ 483.093612][T11982] wg1 speed is unknown, defaulting to 1000 [ 484.091013][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1635'. [ 484.118394][T12036] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1635'. [ 484.154805][T12037] netlink: 'syz.5.1634': attribute type 4 has an invalid length. [ 484.395745][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'. [ 484.784993][T12044] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1637'. [ 485.727324][T12058] vxfs: WRONG superblock magic 00000000 at 1 [ 485.734054][T12058] vxfs: WRONG superblock magic 00000000 at 8 [ 485.740118][T12058] vxfs: can't find superblock. [ 485.868931][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 485.868961][ T30] audit: type=1400 audit(1780233516.991:3320): avc: denied { read } for pid=12051 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 486.273161][T12065] ve: renamed from veth0_vlan (while UP) [ 486.361072][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 486.598583][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1648'. [ 486.654462][ T804] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 487.126429][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 487.662371][ T30] audit: type=1400 audit(1780233518.761:3321): avc: denied { bind } for pid=12090 comm="syz.5.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 487.703721][T12091] xt_l2tp: missing protocol rule (udp|l2tpip) [ 487.769194][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.808553][ T804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.841628][ T804] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 487.864778][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.144046][ T804] usb 5-1: config 0 descriptor?? [ 488.454146][ T804] hub 5-1:0.0: USB hub found [ 488.572423][ T804] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 488.829303][ T804] usbhid 5-1:0.0: can't add hid device: -71 [ 488.838785][T12107] netlink: 'syz.0.1655': attribute type 4 has an invalid length. [ 488.847241][ T804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 488.880032][ T30] audit: type=1400 audit(1780233520.011:3322): avc: denied { ioctl } for pid=12109 comm="syz.2.1657" path="socket:[37091]" dev="sockfs" ino=37091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 488.906393][ T804] usb 5-1: USB disconnect, device number 67 [ 488.975131][T12115] trusted_key: encrypted_key: master key parameter 'uefa' is invalid [ 489.226655][ T6570] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 489.368029][ T5711] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 489.377567][ T6570] usb 6-1: Using ep0 maxpacket: 8 [ 489.384095][ T30] audit: type=1400 audit(1780233520.511:3323): avc: denied { mount } for pid=12119 comm="syz.4.1660" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 489.386783][T12120] netlink: 'syz.4.1660': attribute type 29 has an invalid length. [ 489.407795][ T6570] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 489.426388][ T6570] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 489.438633][ T6570] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 489.448094][ T6570] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.456390][ T6570] usb 6-1: Product: syz [ 489.461574][ T6570] usb 6-1: Manufacturer: syz [ 489.466249][ T6570] usb 6-1: SerialNumber: syz [ 489.565748][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 489.696488][ T5711] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 489.854025][ T30] audit: type=1400 audit(1780233520.981:3324): avc: denied { mounton } for pid=12104 comm="syz.5.1656" path="/proc/208/task" dev="proc" ino=38074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 489.859681][ T5711] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 489.884001][T12106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.896845][T12122] netlink: 'syz.4.1660': attribute type 29 has an invalid length. [ 489.927511][T12106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.953955][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 489.966029][ T6570] usb 6-1: USB disconnect, device number 9 [ 490.597720][ T5711] usb 2-1: Product: syz [ 490.601953][ T5711] usb 2-1: Manufacturer: syz [ 490.620329][ T5711] usb 2-1: SerialNumber: syz [ 490.903866][ T5711] usb 2-1: config 0 descriptor?? [ 490.909601][T12118] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 490.934701][ T5711] hub 2-1:0.0: bad descriptor, ignoring hub [ 490.948623][ T5711] hub 2-1:0.0: probe with driver hub failed with error -5 [ 491.050755][T12140] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 491.060342][T12140] netlink: 'syz.4.1665': attribute type 2 has an invalid length. [ 491.070518][T12140] netlink: 'syz.4.1665': attribute type 1 has an invalid length. [ 491.089711][ T30] audit: type=1400 audit(1780233522.221:3325): avc: denied { getopt } for pid=12139 comm="syz.4.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 491.317539][ T10] usb 2-1: USB disconnect, device number 44 [ 491.345333][T12149] 9p: Could not find request transport: fd0x0000000000000006 [ 491.358329][T12151] 9p: Could not find request transport: fd0x0000000000000004 [ 491.491518][T12157] input: syz0 as /devices/virtual/input/input37 [ 492.269557][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 492.299276][T12165] hsr_slave_0: left promiscuous mode [ 492.314520][T12165] hsr_slave_1: left promiscuous mode [ 492.330066][T12168] ------------[ cut here ]------------ [ 492.336461][T12168] HSR: No self node [ 492.340290][T12168] WARNING: net/hsr/hsr_framereg.c:39 at hsr_addr_is_self+0x3e8/0x450, CPU#1: syz.1.1672/12168 [ 492.350569][T12168] Modules linked in: [ 492.354658][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.1.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.365604][T12168] Tainted: [L]=SOFTLOCKUP [ 492.369920][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.379963][T12168] RIP: 0010:hsr_addr_is_self+0x3e8/0x450 [ 492.385590][T12168] Code: 8d be 47 03 00 00 48 c7 c7 60 a3 27 8d c6 05 42 dc 54 05 01 e8 79 67 79 f6 e9 7e fc ff ff e8 ef df 9d f6 48 8d 3d 38 e9 7d 05 <67> 48 0f b9 3a 45 31 f6 e9 1f fe ff ff e8 96 c2 0b f7 e9 6f fd ff [ 492.405207][T12168] RSP: 0018:ffffc90002fc7088 EFLAGS: 00010283 [ 492.411284][T12168] RAX: 0000000000001154 RBX: 0000000000000000 RCX: ffffc90007939000 [ 492.419256][T12168] RDX: 0000000000080000 RSI: ffffffff8b6ab071 RDI: ffffffff90e899b0 [ 492.427213][T12168] RBP: ffff888026256a42 R08: 0000000000000005 R09: 0000000000000000 [ 492.435159][T12168] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 492.443112][T12168] R13: 0000000000000008 R14: 000000000000000e R15: ffff88807cf24e40 [ 492.451068][T12168] FS: 00007f24e8fb66c0(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 492.459986][T12168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.466567][T12168] CR2: 00007f24e8fb5ff8 CR3: 0000000079e1c000 CR4: 00000000003526f0 [ 492.474531][T12168] Call Trace: [ 492.477796][T12168] [ 492.480702][T12168] hsr_forward_skb+0x9a5/0x28b0 [ 492.485532][T12168] ? __pfx_hsr_forward_skb+0x10/0x10 [ 492.490809][T12168] hsr_dev_xmit+0x213/0x400 [ 492.495293][T12168] dev_hard_start_xmit+0x128/0x7a0 [ 492.500395][T12168] __dev_queue_xmit+0x1baa/0x4950 [ 492.505412][T12168] ? __pfx___dev_queue_xmit+0x10/0x10 [ 492.510771][T12168] ? arp_constructor+0x3ad/0xd60 [ 492.515687][T12168] ? arp_constructor+0x380/0xd60 [ 492.520614][T12168] ? __lock_acquire+0x4a5/0x2630 [ 492.525541][T12168] ? do_raw_spin_lock+0x128/0x260 [ 492.530568][T12168] ? __asan_memcpy+0x3c/0x60 [ 492.535144][T12168] ? eth_header+0x120/0x1f0 [ 492.539633][T12168] neigh_connected_output+0x3b7/0x5d0 [ 492.544985][T12168] ip_finish_output2+0x851/0x2400 [ 492.550011][T12168] ? __pfx_ip_finish_output2+0x10/0x10 [ 492.555446][T12168] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 492.561500][T12168] ? nf_nat_ipv4_out+0xb2/0x510 [ 492.566331][T12168] ? find_held_lock+0x2b/0x80 [ 492.570991][T12168] __ip_finish_output.part.0+0x444/0x6f0 [ 492.576624][T12168] ip_mc_output+0x466/0xd70 [ 492.581105][T12168] ? __pfx_ip_mc_output+0x10/0x10 [ 492.586111][T12168] ? __ip_make_skb+0x111e/0x1f90 [ 492.591043][T12168] ? __pfx_ip_finish_output+0x10/0x10 [ 492.596397][T12168] ? __pfx_ip_mc_output+0x10/0x10 [ 492.601411][T12168] ip_push_pending_frames+0x29e/0x300 [ 492.606814][T12168] raw_sendmsg+0x1509/0x3590 [ 492.611401][T12168] ? avc_has_perm_noaudit+0xe0/0x3b0 [ 492.616697][T12168] ? __pfx_raw_sendmsg+0x10/0x10 [ 492.621636][T12168] ? avc_has_perm+0x135/0x1e0 [ 492.626293][T12168] ? sock_has_perm+0x25a/0x2f0 [ 492.631061][T12168] ? __pfx_raw_sendmsg+0x10/0x10 [ 492.635991][T12168] inet_sendmsg+0x11c/0x140 [ 492.640482][T12168] ____sys_sendmsg+0x98d/0xb70 [ 492.645228][T12168] ? __pfx_inet_sendmsg+0x10/0x10 [ 492.650240][T12168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.655500][T12168] ? kasan_quarantine_put+0x104/0x240 [ 492.660865][T12168] ___sys_sendmsg+0x190/0x1e0 [ 492.665515][T12168] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.670703][T12168] ? tomoyo_path_number_perm+0x188/0x580 [ 492.676326][T12168] __sys_sendmsg+0x170/0x220 [ 492.680902][T12168] ? __pfx___sys_sendmsg+0x10/0x10 [ 492.685989][T12168] ? kcov_ioctl+0x16a/0x720 [ 492.690475][T12168] ? rcu_is_watching+0x12/0xc0 [ 492.695223][T12168] ? kcov_ioctl+0x16a/0x720 [ 492.699710][T12168] ? rcu_is_watching+0x12/0xc0 [ 492.704451][T12168] do_syscall_64+0x115/0x870 [ 492.709036][T12168] ? clear_bhb_loop+0x40/0x90 [ 492.713690][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.719566][T12168] RIP: 0033:0x7f24e819ce59 [ 492.723952][T12168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.743547][T12168] RSP: 002b:00007f24e8fb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.751943][T12168] RAX: ffffffffffffffda RBX: 00007f24e8416090 RCX: 00007f24e819ce59 [ 492.759898][T12168] RDX: ffff000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 492.767853][T12168] RBP: 00007f24e8232d6f R08: 0000000000000000 R09: 0000000000000000 [ 492.775794][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.783746][T12168] R13: 00007f24e8416128 R14: 00007f24e8416090 R15: 00007ffecd0258f8 [ 492.791707][T12168] [ 492.794704][T12168] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 492.801952][T12168] CPU: 1 UID: 0 PID: 12168 Comm: syz.1.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.812854][T12168] Tainted: [L]=SOFTLOCKUP [ 492.817147][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.827170][T12168] Call Trace: [ 492.830421][T12168] [ 492.833322][T12168] dump_stack_lvl+0x100/0x190 [ 492.837973][T12168] vpanic+0x552/0x970 [ 492.841922][T12168] ? __pfx_vpanic+0x10/0x10 [ 492.846396][T12168] panic+0xd1/0xe0 [ 492.850088][T12168] ? __pfx_panic+0x10/0x10 [ 492.854478][T12168] check_panic_on_warn.cold+0x19/0x34 [ 492.859820][T12168] ? hsr_addr_is_self+0x3e8/0x450 [ 492.864816][T12168] __warn.cold+0x191/0x328 [ 492.869214][T12168] __report_bug+0x296/0x3d0 [ 492.873688][T12168] ? hsr_addr_is_self+0x3e8/0x450 [ 492.878696][T12168] ? __pfx___report_bug+0x10/0x10 [ 492.883699][T12168] ? __lock_acquire+0xd73/0x2630 [ 492.888618][T12168] ? hsr_addr_is_self+0x3e1/0x450 [ 492.893622][T12168] report_bug_entry+0xe1/0x290 [ 492.898357][T12168] ? hsr_addr_is_self+0x3e8/0x450 [ 492.903358][T12168] handle_bug+0x1cd/0x2a0 [ 492.907682][T12168] exc_invalid_op+0x17/0x50 [ 492.912161][T12168] asm_exc_invalid_op+0x1a/0x20 [ 492.916981][T12168] RIP: 0010:hsr_addr_is_self+0x3e8/0x450 [ 492.922595][T12168] Code: 8d be 47 03 00 00 48 c7 c7 60 a3 27 8d c6 05 42 dc 54 05 01 e8 79 67 79 f6 e9 7e fc ff ff e8 ef df 9d f6 48 8d 3d 38 e9 7d 05 <67> 48 0f b9 3a 45 31 f6 e9 1f fe ff ff e8 96 c2 0b f7 e9 6f fd ff [ 492.942169][T12168] RSP: 0018:ffffc90002fc7088 EFLAGS: 00010283 [ 492.948204][T12168] RAX: 0000000000001154 RBX: 0000000000000000 RCX: ffffc90007939000 [ 492.956149][T12168] RDX: 0000000000080000 RSI: ffffffff8b6ab071 RDI: ffffffff90e899b0 [ 492.964088][T12168] RBP: ffff888026256a42 R08: 0000000000000005 R09: 0000000000000000 [ 492.972037][T12168] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 492.979986][T12168] R13: 0000000000000008 R14: 000000000000000e R15: ffff88807cf24e40 [ 492.987931][T12168] ? hsr_addr_is_self+0x3e1/0x450 [ 492.992937][T12168] ? hsr_addr_is_self+0x3e1/0x450 [ 492.997936][T12168] hsr_forward_skb+0x9a5/0x28b0 [ 493.002758][T12168] ? __pfx_hsr_forward_skb+0x10/0x10 [ 493.008016][T12168] hsr_dev_xmit+0x213/0x400 [ 493.012498][T12168] dev_hard_start_xmit+0x128/0x7a0 [ 493.017591][T12168] __dev_queue_xmit+0x1baa/0x4950 [ 493.022593][T12168] ? __pfx___dev_queue_xmit+0x10/0x10 [ 493.027934][T12168] ? arp_constructor+0x3ad/0xd60 [ 493.032845][T12168] ? arp_constructor+0x380/0xd60 [ 493.037768][T12168] ? __lock_acquire+0x4a5/0x2630 [ 493.042675][T12168] ? do_raw_spin_lock+0x128/0x260 [ 493.047678][T12168] ? __asan_memcpy+0x3c/0x60 [ 493.052242][T12168] ? eth_header+0x120/0x1f0 [ 493.056727][T12168] neigh_connected_output+0x3b7/0x5d0 [ 493.062078][T12168] ip_finish_output2+0x851/0x2400 [ 493.067076][T12168] ? __pfx_ip_finish_output2+0x10/0x10 [ 493.072508][T12168] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 493.078549][T12168] ? nf_nat_ipv4_out+0xb2/0x510 [ 493.083366][T12168] ? find_held_lock+0x2b/0x80 [ 493.088013][T12168] __ip_finish_output.part.0+0x444/0x6f0 [ 493.093631][T12168] ip_mc_output+0x466/0xd70 [ 493.098108][T12168] ? __pfx_ip_mc_output+0x10/0x10 [ 493.103104][T12168] ? __ip_make_skb+0x111e/0x1f90 [ 493.108015][T12168] ? __pfx_ip_finish_output+0x10/0x10 [ 493.113370][T12168] ? __pfx_ip_mc_output+0x10/0x10 [ 493.118367][T12168] ip_push_pending_frames+0x29e/0x300 [ 493.123713][T12168] raw_sendmsg+0x1509/0x3590 [ 493.128281][T12168] ? avc_has_perm_noaudit+0xe0/0x3b0 [ 493.133535][T12168] ? __pfx_raw_sendmsg+0x10/0x10 [ 493.138448][T12168] ? avc_has_perm+0x135/0x1e0 [ 493.143100][T12168] ? sock_has_perm+0x25a/0x2f0 [ 493.147844][T12168] ? __pfx_raw_sendmsg+0x10/0x10 [ 493.152756][T12168] inet_sendmsg+0x11c/0x140 [ 493.157233][T12168] ____sys_sendmsg+0x98d/0xb70 [ 493.161965][T12168] ? __pfx_inet_sendmsg+0x10/0x10 [ 493.166963][T12168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.172222][T12168] ? kasan_quarantine_put+0x104/0x240 [ 493.177581][T12168] ___sys_sendmsg+0x190/0x1e0 [ 493.182230][T12168] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.187398][T12168] ? tomoyo_path_number_perm+0x188/0x580 [ 493.193019][T12168] __sys_sendmsg+0x170/0x220 [ 493.197583][T12168] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.202667][T12168] ? kcov_ioctl+0x16a/0x720 [ 493.207140][T12168] ? rcu_is_watching+0x12/0xc0 [ 493.211883][T12168] ? kcov_ioctl+0x16a/0x720 [ 493.216355][T12168] ? rcu_is_watching+0x12/0xc0 [ 493.221093][T12168] do_syscall_64+0x115/0x870 [ 493.225655][T12168] ? clear_bhb_loop+0x40/0x90 [ 493.230303][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.236165][T12168] RIP: 0033:0x7f24e819ce59 [ 493.240548][T12168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.260127][T12168] RSP: 002b:00007f24e8fb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.268511][T12168] RAX: ffffffffffffffda RBX: 00007f24e8416090 RCX: 00007f24e819ce59 [ 493.276455][T12168] RDX: ffff000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 493.284393][T12168] RBP: 00007f24e8232d6f R08: 0000000000000000 R09: 0000000000000000 [ 493.292334][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.300273][T12168] R13: 00007f24e8416128 R14: 00007f24e8416090 R15: 00007ffecd0258f8 [ 493.308222][T12168] [ 493.311403][T12168] Kernel Offset: disabled [ 493.315698][T12168] Rebooting in 86400 seconds..