last executing test programs: 6m45.748450417s ago: executing program 1 (id=293): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {0xf, 0xa}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x8000000}, 0x80) 6m44.096146492s ago: executing program 1 (id=298): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x3, 0x4, 0xfffbfffd, 0x2, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x6, 0x203}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x3, 0x4, 0xfffbfffd, 0x2, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x6, 0x203}) (async) 6m43.198476248s ago: executing program 1 (id=301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000300, 0x2, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @etimer_thresh={0x8, 0xc, 0xa}]}, 0x10c}}, 0x0) 6m43.068250066s ago: executing program 1 (id=302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 6m42.612947829s ago: executing program 1 (id=305): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_open_dev$sndmidi(&(0x7f0000002300), 0x2, 0x101d01) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='auxv\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d3000000000fc000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m41.888619076s ago: executing program 1 (id=310): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000340)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$RTC_UIE_ON(r0, 0x7003) socket$inet6_tcp(0xa, 0x1, 0x0) 6m26.793718489s ago: executing program 32 (id=310): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x5}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000340)={0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$RTC_UIE_ON(r0, 0x7003) socket$inet6_tcp(0xa, 0x1, 0x0) 4m17.979049133s ago: executing program 4 (id=856): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x18140, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000100)={0x1}) 4m17.519967214s ago: executing program 4 (id=857): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100107010340b804020240000102030109021b000101fbb00c090400000100000100090501022000000000459bbfe1fefa28aed4265041c0dbfe4cf4ec9c78713c0a85bab972596c0f3a7faca65b3cdc770302272afc1980f4ba0d0000b1a7147b5529823dd0fb8c430f8525dcbe5307f243768d16866a9ac9d0084600657c8c38a093f4d2"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) syz_usb_ep_read(r0, 0x1, 0xa1, &(0x7f0000000000)=""/161) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffff2, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fstat(r4, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000a40)={[0xa, 0x6, 0xb, 0xd6bffffffffffe, 0x4, 0x8000040000000001, 0xb3, 0x2d8cdf7c, 0x4b1b, 0x4000000000000008, 0xfff, 0x2081, 0x7, 0x1ff, 0xe6, 0x2], 0x4, 0x40410}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f00000001c0)={[0x30000, 0x58000, 0xdddd0000, 0xeeef0000], 0x4e, 0x81}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x115b00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x24) 4m13.699702194s ago: executing program 4 (id=871): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x88, 0x8, '\x00', [@pad1, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @local}, @pad1, @jumbo={0xc2, 0x4, 0x139}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0x3d, 0x8, [0x5, 0x0, 0xffffffffffff0000]}}]}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x89b0, &(0x7f0000000280)={'bridge_slave_1\x00', @ifru_map={0x87, 0x532, 0x1ff, 0x2, 0x3, 0x7}}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 4m13.363606049s ago: executing program 4 (id=874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5) ioctl$KVM_RUN(r2, 0xae80, 0xf4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x4, 0x4, 0x2, 0x3, 0xf1, 0x0, 0x7fffffffffffb, 0x8000, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4384}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x103, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x3, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x3, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 4m11.626868237s ago: executing program 4 (id=879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x87) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x10) 4m10.445377692s ago: executing program 4 (id=881): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000858000002000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000640)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1402000002060100000000060000000000000000"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) 3m55.384881402s ago: executing program 33 (id=881): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000858000002000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000640)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8970, &(0x7f0000000680)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1402000002060100000000060000000000000000"], 0x14}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000580)=""/90) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, &(0x7f0000000480)) r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}}) 6.368120827s ago: executing program 0 (id=1781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600100001000130726bd7000000000000000000000000004f48d5e92396fb818981c62f595000000ffff0a010102ac1414bb0000000000030000000000004e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff0100000000000000000000000000010000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080000000316f74eeac053df08b8b0984dc48bf03b88bbaf79899289a451c00aa0800160004"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, r5, 0x1, 0x70bd2c, 0x400, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x8040) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, 0x0, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000050900010073797a3000000000140000001100010000000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20004080}, 0x600c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0x53, 0x8, 0x448, 0x2, 0x2, 0x2, 0x7, 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fedbdf254100000008000300", @ANYRES32=r10, @ANYBLOB="08e0c7c1d5df8eaa5cdc6c112e291df18af4a1318724e8149b0ab8bbfd19e973bb749134d7ec447ba256d7eb28f37c54913b53d50366c7747618098d0b561b2d9c98be69dd019f0eead393688a833260c77139171ab69fa01bd0db29c59a58158e9cab99827e868d851769535cdc1c37046a12031a76317fe48d44906579c6b66d13267238155a6036dc6b0f47bf846ae1c5854da7dd7945053cd03bf21716"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040004) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, r9, 0xf14, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x18}}, 0x20000080) ioctl$TCXONC(r1, 0x540a, 0x0) 6.292794407s ago: executing program 3 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 6.18086685s ago: executing program 5 (id=1784): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d3, 0x33}, @in=@multicast1, {0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) 6.156719543s ago: executing program 2 (id=1785): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync_file_range(r0, 0x4179, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="467f555c00903776b712a5f40468236ea727b53bdf2582fdecfab3f5ecf97b1465a00496d52570b0d652810ebb0b6ca598df5956f52dfacc272f2f9bdb7034e3af3d0bb242ede44454eb9dbf91b7ae25b89c34e584112c7354d6f28a6cc0adf147715b542f03f82be73042ad0946c52c333bc21e0b792206be8ca778902590574c329bd6659c86715f674ac6da", 0x8d}, {&(0x7f0000000440)="18282f2b6125efcde483bdbd3afd271cb1b263110abe3e26336f4e1cbcd32b4fbdad7a3fa1dc8fdd144908db985b5ea61da4373c0159fc", 0x37}, {&(0x7f0000000880)="a0cc2e4ee87134f47bfbd4bc68ff4ebc3ed14f6c32e24ab143013683b60c53e7349f583745f94770ef38264a2f34c9ab3164d21377d9c730bf53eafab43dd4c1cab4cd3c1b58f97722e0a3951f49d3dbb1ee91c86e2b3813ae2a06bae153ece0a314795a65800424ed4d05b1fb7ed42c2949c42d80fbcba557e7d8e78b7a2fb2ed6c9ae3917541b64dd7e0f55f96f6b8c7b7786d7e5d0bdb49feef25cd57d314d44afb29356c2f4d5d7d79023ad9fe7321ee40f256717d7cda9331e7fc7d95abc9cff09aebd6f71e107a627e5c836ffb8d45ff3b0d25911dc413a79d5621ca1e7d7f", 0xe2}], 0x3, &(0x7f0000000640)}}], 0x1, 0x53fe0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x610a}], 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x788c, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r4, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000340)={{0x0, 0xea60}, {r5, r6/1000+60000}}) r7 = dup3(0xffffffffffffffff, r3, 0x80000) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x12) 6.143706834s ago: executing program 6 (id=1786): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x2, 0x1, {}, {0x0}, 0x6, 0x928}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x400000000000000, 0x0, 0x413, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x6000, 0x0, 0x0, r7, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x804000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303530303030303030303032303030302e75323d6a7969643d69572762eb0393c75a4ef3a0a3f8c990f58a40e8fa75bdbd0bcd8ddd22f5494716e4fa98687a2f355245788a846cab181cb5bd291167fa5c33c2b70eaef2bd1dd7a759a234150937d516b3fef72d3d28764c8f56a058", @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',default_permissions,allow_other,blksize=0x0000000000000c00,max_read=0x000000000000000e,default_permissions,default_permissions,dont_hash,dont_hash,rootcontext=staff_u,smackfsdef=--\\/],dont_appraise,rootcontext=system_u,\x00']) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@private}}, &(0x7f0000000700)=0xe8) setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x4, r3}, {0x2, 0x0, r6}, {0x2, 0x0, r3}, {0x2, 0x2, r6}, {0x2, 0x1, r8}, {0x2, 0x0, r6}, {0x2, 0x2, r6}], {}, [{}]}, 0x6c, 0x2) chdir(&(0x7f0000000080)='./file1\x00') r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x1d7) setpgid(r9, 0x0) setpgid(0x0, r9) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 6.09310656s ago: executing program 3 (id=1787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba0800000021000000059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 5.934336557s ago: executing program 5 (id=1788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x56) prlimit64(0x0, 0xc, &(0x7f0000000240)={0x8, 0x400000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x7, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/14, 0xe}], 0x3}, 0xebc1}, {{&(0x7f0000000680)=@caif=@dbg, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/22, 0x16}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/227, 0xe3}, {&(0x7f00000007c0)=""/84, 0x54}], 0x4}, 0x9}, {{&(0x7f0000001a40)=@nfc_llcp, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/112, 0x70}, {&(0x7f0000002b40)=""/114, 0x72}, {&(0x7f0000002bc0)=""/108, 0x6c}, {&(0x7f0000002c40)=""/11, 0xb}], 0x5}, 0x2}, {{&(0x7f0000002d00)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/125, 0x7d}, {&(0x7f0000002e00)=""/211, 0xd3}], 0x2}, 0x1}, {{&(0x7f0000003000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003080)=""/92, 0x5c}, {&(0x7f0000003100)=""/208, 0xd0}, {&(0x7f0000003200)=""/156, 0x9c}, {&(0x7f00000032c0)=""/73, 0x49}, {&(0x7f0000003340)=""/136, 0x88}], 0x5, &(0x7f0000003480)=""/76, 0x4c}, 0x800}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xa}], 0x6, 0x20, &(0x7f0000003680)={r6, r7+60000000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000040)=""/225, &(0x7f0000000140)=0xe1) 5.930306271s ago: executing program 0 (id=1789): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblcr\x00', 0xd, 0x4, 0x5d}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) preadv(0xffffffffffffffff, &(0x7f0000002940)=[{&(0x7f0000002680)=""/236, 0xec}], 0x1, 0x2, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x41) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@fowner_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '#'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r5, &(0x7f0000003f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0xffffffffffffffa1, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 5.828487951s ago: executing program 3 (id=1790): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x94000, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup2(r0, r1) syz_usb_connect(0x3, 0x24, &(0x7f0000000c80)={{0x12, 0x1, 0x110, 0x50, 0x3c, 0xbd, 0x8, 0x95a, 0x3003, 0x32bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x8, 0x10, 0x9, "", [{{0x9, 0x4, 0xaf, 0x3, 0x0, 0xf6, 0x7, 0xb6, 0x40}}]}}]}}, 0x0) 4.707532118s ago: executing program 0 (id=1791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000e1ffffffffffffff00000a58000000090a010400000000006000000000000208000a40000000000900020073797a31000000000900010073797a3000000000080005400000002708000640ffffff0008000340"], 0x80}}, 0x0) 4.692337093s ago: executing program 6 (id=1792): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.644982441s ago: executing program 2 (id=1793): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r0, &(0x7f00000005c0)=""/4096, 0x1000) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x9c}}, 0x0) 4.622648032s ago: executing program 5 (id=1794): unshare(0x5a060800) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x9]}, 0x0, 0x0, 0x8) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) mknod$loop(0x0, 0x6000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) recvfrom(r0, &(0x7f0000000000), 0x0, 0x183, 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) pipe2$watch_queue(0x0, 0x80) unshare(0x8000000) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r3 = socket$inet(0x2, 0x80001, 0x80085) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 4.542733563s ago: executing program 0 (id=1795): syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) ftruncate(0xffffffffffffffff, 0x2007ffb) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000200)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400a06"], 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) cachestat(r1, &(0x7f0000000240)={0x8000000000000000, 0x7}, &(0x7f0000000180), 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 4.448845461s ago: executing program 2 (id=1796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000020000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32], 0x38}}, 0x0) 4.116758551s ago: executing program 6 (id=1797): add_key$keyring(&(0x7f0000000500), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x6) (async) connect$l2tp(r3, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async, rerun: 64) r5 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_create_resource$binfmt(0x0) (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) (async, rerun: 64) getdents64(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 4.022183687s ago: executing program 2 (id=1798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.993931778s ago: executing program 6 (id=1799): r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.9925228s ago: executing program 2 (id=1800): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x2, 0x1) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) 2.815534315s ago: executing program 6 (id=1801): r0 = syz_open_dev$video(&(0x7f0000000040), 0xffffffff, 0x2ac81) r1 = fsopen(&(0x7f0000000080)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x2, 0x1, {}, {0x0}, 0x6, 0x928}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfb010016e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e94d52bb50b43066c1de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x400000000000000, 0x0, 0x413, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x6000, 0x0, 0x0, r6, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x804000, &(0x7f0000000ac0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303530303030303030303032303030302e75323d6a7969643d69572762eb0393c75a4ef3a0a3f8c990f58a40e8fa75bdbd0bcd8ddd22f5494716e4fa98687a2f355245788a846cab181cb5bd291167fa5c33c2b70eaef2bd1dd7a759a234150937d516b3fef72d3d28764c8f56a058", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',default_permissions,allow_other,blksize=0x0000000000000c00,max_read=0x000000000000000e,default_permissions,default_permissions,dont_hash,dont_hash,rootcontext=staff_u,smackfsdef=--\\/],dont_appraise,rootcontext=system_u,\x00']) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@private}}, &(0x7f0000000700)=0xe8) setxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {}, [{0x2, 0x4, r3}, {0x2, 0x4, r3}, {0x2, 0x0, r5}, {0x2, 0x0, r3}, {0x2, 0x2, r5}, {0x2, 0x1, r7}, {0x2, 0x0, r5}, {0x2, 0x2, r5}], {}, [{}]}, 0x6c, 0x2) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2.647159089s ago: executing program 6 (id=1803): timer_create(0x3, &(0x7f0000000380)={0x0, 0x6, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x400000, 0x88) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x70bd29, 0x10001, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4c4680, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000080)={'veth1_to_batadv\x00', @multicast}) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x4, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r5 = open(&(0x7f0000000140)='./file0\x00', 0x309800, 0x112) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xfffe}) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 2.089318254s ago: executing program 5 (id=1804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x56) prlimit64(0x0, 0xc, &(0x7f0000000240)={0x8, 0x400000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x7, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000004c40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/14, 0xe}], 0x3}, 0xebc1}, {{&(0x7f0000000680)=@caif=@dbg, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)=""/22, 0x16}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/227, 0xe3}, {&(0x7f00000007c0)=""/84, 0x54}], 0x4}, 0x9}, {{&(0x7f0000001a40)=@nfc_llcp, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/112, 0x70}, {&(0x7f0000002b40)=""/114, 0x72}, {&(0x7f0000002bc0)=""/108, 0x6c}, {&(0x7f0000002c40)=""/11, 0xb}], 0x5}, 0x2}, {{&(0x7f0000002d00)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)=""/125, 0x7d}, {&(0x7f0000002e00)=""/211, 0xd3}], 0x2}, 0x1}, {{&(0x7f0000003000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003080)=""/92, 0x5c}, {&(0x7f0000003100)=""/208, 0xd0}, {&(0x7f0000003200)=""/156, 0x9c}, {&(0x7f00000032c0)=""/73, 0x49}, {&(0x7f0000003340)=""/136, 0x88}], 0x5, &(0x7f0000003480)=""/76, 0x4c}, 0x800}, {{&(0x7f0000000740)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}, 0xa}], 0x6, 0x20, &(0x7f0000003680)={r6, r7+60000000}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000040)=""/225, &(0x7f0000000140)=0xe1) 1.894122428s ago: executing program 2 (id=1805): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x100) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x20000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c2df2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0xf, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1.466641789s ago: executing program 3 (id=1806): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) ioperm(0x5, 0x6, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x3e}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000001800000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 541.821737ms ago: executing program 5 (id=1807): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 330.881814ms ago: executing program 0 (id=1808): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xdf, 0x9e, 0x88, 0x8, 0x1943, 0x2255, 0xd7fb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2, 0x20, 0x84, "", [{{0x9, 0x4, 0x85, 0xc, 0x0, 0x3, 0xb0, 0xea, 0x8}}]}}]}}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x61, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async, rerun: 64) close_range(r1, r2, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r4 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000400)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000040)=@sr0, r6, &(0x7f00000003c0)) 207.445799ms ago: executing program 5 (id=1809): socket$kcm(0x10, 0x2, 0x0) getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x4048011) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x33a, 0xf9, 0xff, 0x8, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0xc) 100.554721ms ago: executing program 0 (id=1810): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1811): socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x145142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb090", 0x7f}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x48043) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) kernel console output (not intermixed with test programs): 138, bcdDevice= 1.42 [ 397.627848][ T8716] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 397.647724][ T1217] gspca_nw80x: reg_w err -71 [ 397.663263][ T1217] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 397.681059][ T8716] usb 7-1: Manufacturer: syz [ 397.689611][ T8716] usb 7-1: config 0 descriptor?? [ 397.714061][ T1217] usb 1-1: USB disconnect, device number 38 [ 397.927570][T10201] syz.2.1221 (10201) used greatest stack depth: 18680 bytes left [ 397.948814][T10204] netlink: 'syz.3.1222': attribute type 13 has an invalid length. [ 397.986312][T10204] netlink: 'syz.3.1222': attribute type 17 has an invalid length. [ 398.020248][ T8716] rc_core: IR keymap rc-hauppauge not found [ 398.032298][ T8716] Registered IR keymap rc-empty [ 398.042315][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 398.054809][T10203] bridge0: port 1(syz_tun) entered disabled state [ 398.141109][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 398.182680][ T8716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 398.198066][ T8716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 398.326638][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 398.360667][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 398.390836][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 398.519860][T10217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 398.933807][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 398.975129][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 399.013701][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 399.062295][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 399.091441][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 399.131588][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 399.174779][ T8716] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 399.183705][ T30] audit: type=1400 audit(2000000315.405:601): avc: denied { sys_module } for pid=10221 comm="syz.2.1226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 399.243798][ T8716] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 399.279440][ T8716] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 399.351539][ T8716] usb 7-1: USB disconnect, device number 8 [ 399.436308][T10204] bridge0: port 1(syz_tun) entered blocking state [ 399.442912][T10204] bridge0: port 1(syz_tun) entered forwarding state [ 399.502823][T10204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.535989][T10204] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.596336][T10204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.749541][T10165] Set syz1 is full, maxelem 65536 reached [ 399.780005][T10204] veth1_vlan: left promiscuous mode [ 399.786491][T10204] veth0_vlan: left promiscuous mode [ 399.793338][T10204] veth0_vlan: entered promiscuous mode [ 399.802810][T10204] veth1_vlan: entered promiscuous mode [ 399.813698][T10204] veth1_macvtap: left promiscuous mode [ 399.820140][T10204] veth0_macvtap: left promiscuous mode [ 399.827472][T10204] veth0_macvtap: entered promiscuous mode [ 399.836713][T10204] veth1_macvtap: entered promiscuous mode [ 399.852352][T10204] 8021q: adding VLAN 0 to HW filter on device eth0 [ 399.864052][T10204] 8021q: adding VLAN 0 to HW filter on device eth1 [ 399.881205][T10204] 8021q: adding VLAN 0 to HW filter on device eth2 [ 399.891768][T10204] 8021q: adding VLAN 0 to HW filter on device eth3 [ 401.073749][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 401.096609][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 401.120761][ T6340] vxcan1 speed is unknown, defaulting to 1000 [ 401.584602][T10265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10265 comm=syz.0.1234 [ 401.628642][ T6340] vxcan1 speed is unknown, defaulting to 1000 [ 401.867816][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 401.942349][ T30] audit: type=1400 audit(2000000318.165:602): avc: denied { connect } for pid=10263 comm="syz.6.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 402.311765][T10272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 402.852614][T10270] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 402.982137][T10276] netlink: 'syz.0.1237': attribute type 1 has an invalid length. [ 403.006928][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.072121][T10284] NILFS (nullb0): couldn't find nilfs on the device [ 403.999146][ T30] audit: type=1400 audit(2000000320.215:603): avc: denied { write } for pid=10292 comm="syz.6.1241" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 404.026150][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 404.055876][ T30] audit: type=1400 audit(2000000320.265:604): avc: denied { ioctl } for pid=10292 comm="syz.6.1241" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x744c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 404.115120][T10295] bond2 (unregistering): Released all slaves [ 404.130753][ T30] audit: type=1400 audit(2000000320.335:605): avc: denied { append } for pid=10296 comm="syz.3.1242" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 404.396096][ T8716] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 404.447889][T10307] Bluetooth: hci4: Frame reassembly failed (-84) [ 404.526291][ T1014] Bluetooth: hci4: Frame reassembly failed (-84) [ 404.576579][ T30] audit: type=1326 audit(2000000320.795:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10299 comm="syz.5.1244" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x0 [ 404.690676][ T8716] usb 1-1: Using ep0 maxpacket: 16 [ 404.702147][ T8716] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.730315][ T8716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.751549][ T8716] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 404.771648][ T8716] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.807480][ T8716] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 404.818942][ T8716] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 404.836205][ T8716] usb 1-1: Manufacturer: syz [ 404.857109][ T8716] usb 1-1: config 0 descriptor?? [ 404.995379][T10314] syzkaller0: entered promiscuous mode [ 405.001042][T10314] syzkaller0: entered allmulticast mode [ 405.150308][ T8716] rc_core: IR keymap rc-hauppauge not found [ 405.158007][ T8716] Registered IR keymap rc-empty [ 405.163336][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 405.190897][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 405.211346][ T8716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 405.231013][ T8716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 405.249981][T10321] loop8: detected capacity change from 0 to 8 [ 405.265369][T10321] Dev loop8: unable to read RDB block 8 [ 405.271352][T10321] loop8: unable to read partition table [ 405.277038][T10321] loop8: partition table beyond EOD, truncated [ 405.283218][T10321] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 405.564582][T10323] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.942351][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 405.985826][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.020415][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.070674][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.088221][T10328] vxcan1 speed is unknown, defaulting to 1000 [ 406.107012][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.150567][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.190808][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.240625][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.270601][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.370574][ T8716] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 406.402065][ T8716] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 406.420810][ T8716] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 406.439251][ T8716] usb 1-1: USB disconnect, device number 39 [ 406.464789][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 406.481060][T10337] FAULT_INJECTION: forcing a failure. [ 406.481060][T10337] name failslab, interval 1, probability 0, space 0, times 0 [ 406.524047][T10337] CPU: 0 UID: 0 PID: 10337 Comm: syz.5.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.524076][T10337] Tainted: [L]=SOFTLOCKUP [ 406.524082][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.524092][T10337] Call Trace: [ 406.524098][T10337] [ 406.524104][T10337] dump_stack_lvl+0x100/0x190 [ 406.524130][T10337] should_fail_ex.cold+0x5/0xa [ 406.524156][T10337] ? tomoyo_encode2+0xfb/0x3c0 [ 406.524177][T10337] should_failslab+0xc2/0x120 [ 406.524197][T10337] __kmalloc_noprof+0xe0/0x850 [ 406.524222][T10337] ? d_absolute_path+0x136/0x1b0 [ 406.524248][T10337] tomoyo_encode2+0xfb/0x3c0 [ 406.524274][T10337] tomoyo_encode+0x29/0x50 [ 406.524296][T10337] tomoyo_realpath_from_path+0x18c/0x690 [ 406.524325][T10337] tomoyo_path_number_perm+0x23c/0x580 [ 406.524344][T10337] ? tomoyo_path_number_perm+0x22e/0x580 [ 406.524364][T10337] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 406.524410][T10337] ? find_held_lock+0x2b/0x80 [ 406.524426][T10337] ? __fget_files+0x215/0x3d0 [ 406.524446][T10337] ? hook_file_ioctl_common+0x149/0x410 [ 406.524470][T10337] ? __fget_files+0x215/0x3d0 [ 406.524495][T10337] ? __fget_files+0x21f/0x3d0 [ 406.524521][T10337] security_file_ioctl+0xd3/0x230 [ 406.524542][T10337] __x64_sys_ioctl+0xb7/0x210 [ 406.524562][T10337] do_syscall_64+0x10b/0xf80 [ 406.524582][T10337] ? clear_bhb_loop+0x40/0x90 [ 406.524604][T10337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.524621][T10337] RIP: 0033:0x7fba6e59cdd9 [ 406.524636][T10337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.524652][T10337] RSP: 002b:00007fba6f3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 406.524668][T10337] RAX: ffffffffffffffda RBX: 00007fba6e815fa0 RCX: 00007fba6e59cdd9 [ 406.524678][T10337] RDX: 0000200000000240 RSI: 00000000402c5639 RDI: 0000000000000003 [ 406.524688][T10337] RBP: 00007fba6f3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.524698][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.524707][T10337] R13: 00007fba6e816038 R14: 00007fba6e815fa0 R15: 00007ffc1b6f1ad8 [ 406.524730][T10337] [ 406.524752][T10337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.015379][T10329] bond0: left promiscuous mode [ 408.061042][T10329] bond0: left allmulticast mode [ 408.092686][T10329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.484573][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1261'. [ 408.515631][ T30] audit: type=1400 audit(2000000324.725:607): avc: denied { read } for pid=10369 comm="syz.0.1262" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 408.561122][ T30] audit: type=1400 audit(2000000324.725:608): avc: denied { open } for pid=10369 comm="syz.0.1262" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 408.638940][ T30] audit: type=1400 audit(2000000324.765:609): avc: denied { ioctl } for pid=10369 comm="syz.0.1262" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 408.686774][T10376] loop8: detected capacity change from 0 to 8 [ 408.695037][T10376] Dev loop8: unable to read RDB block 8 [ 408.701046][T10376] loop8: unable to read partition table [ 408.706745][T10376] loop8: partition table beyond EOD, truncated [ 408.713247][T10376] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 408.761773][ T30] audit: type=1400 audit(2000000324.805:610): avc: denied { map } for pid=10369 comm="syz.0.1262" path="socket:[31938]" dev="sockfs" ino=31938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 408.768340][T10378] netlink: 'syz.3.1263': attribute type 13 has an invalid length. [ 409.086423][T10378] netlink: 'syz.3.1263': attribute type 17 has an invalid length. [ 409.124146][T10372] bridge0: port 1(syz_tun) entered disabled state [ 411.265132][T10378] bridge0: port 1(syz_tun) entered blocking state [ 411.271703][T10378] bridge0: port 1(syz_tun) entered forwarding state [ 411.287552][T10378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.303197][T10378] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.687981][T10378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.828818][T10378] veth1_vlan: left promiscuous mode [ 411.839843][T10378] veth0_vlan: left promiscuous mode [ 411.857343][T10378] veth0_vlan: entered promiscuous mode [ 411.902951][T10378] veth1_vlan: entered promiscuous mode [ 411.910373][T10413] netlink: 'syz.5.1272': attribute type 10 has an invalid length. [ 411.915445][T10378] veth1_macvtap: left promiscuous mode [ 411.935555][T10378] veth0_macvtap: left promiscuous mode [ 411.956565][T10378] veth0_macvtap: entered promiscuous mode [ 411.988228][T10378] veth1_macvtap: entered promiscuous mode [ 412.112047][T10378] 8021q: adding VLAN 0 to HW filter on device eth0 [ 412.173465][T10378] 8021q: adding VLAN 0 to HW filter on device eth1 [ 412.227493][T10378] 8021q: adding VLAN 0 to HW filter on device eth2 [ 412.256195][T10378] 8021q: adding VLAN 0 to HW filter on device eth3 [ 412.292688][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 412.341008][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.387277][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.394438][T10413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.476883][T10413] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 412.496468][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 412.512303][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1274'. [ 412.540103][ T6342] vxcan1 speed is unknown, defaulting to 1000 [ 412.741264][T10428] dummy0: entered promiscuous mode [ 412.752339][T10428] macvlan2: entered promiscuous mode [ 412.801196][T10428] dummy0: left promiscuous mode [ 413.306818][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1281'. [ 413.391885][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1281'. [ 413.509760][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1282'. [ 413.682063][ T5743] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 413.797747][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1282'. [ 413.924076][ T5743] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 413.968770][ T5743] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.011444][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 414.040320][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 414.061623][ T5743] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 414.072878][ T5743] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 414.090194][ T5743] usb 1-1: Manufacturer: syz [ 414.097052][ T5743] usb 1-1: config 0 descriptor?? [ 414.105644][T10447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 414.120730][ T5743] igorplugusb 1-1:0.0: endpoint incorrect [ 414.247743][T10455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=10455 comm=syz.2.1285 [ 414.263077][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1285'. [ 414.340007][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.357225][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.379427][ T8708] usb 1-1: USB disconnect, device number 40 [ 414.615313][T10465] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1290'. [ 414.621543][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1291'. [ 414.963387][T10474] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 414.974086][ T30] audit: type=1326 audit(2000000331.195:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 415.049919][ T30] audit: type=1326 audit(2000000331.195:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 415.184408][ T30] audit: type=1326 audit(2000000331.225:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 415.238336][ T30] audit: type=1326 audit(2000000331.225:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 415.984833][ T30] audit: type=1326 audit(2000000331.225:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 416.026835][ T30] audit: type=1326 audit(2000000331.225:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 416.176865][ T30] audit: type=1326 audit(2000000331.225:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 416.231682][T10480] [U]  [ 417.047010][T10486] netlink: 'syz.0.1297': attribute type 29 has an invalid length. [ 417.056117][T10486] netlink: 'syz.0.1297': attribute type 29 has an invalid length. [ 417.065465][T10486] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1297'. [ 417.079263][ T30] audit: type=1326 audit(2000000331.225:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 417.186714][ T30] audit: type=1326 audit(2000000331.225:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 417.285612][ T30] audit: type=1326 audit(2000000331.225:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.2.1292" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df9d9cdd9 code=0x7ffc0000 [ 417.813697][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1298'. [ 417.872950][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1298'. [ 418.255779][T10502] siw: device registration error -23 [ 418.685319][T10502] smc: removing ib device syz2 [ 419.250439][T10506] binder: 10505:10506 ioctl c0306201 200000000a80 returned -22 [ 419.409057][T10502] smbdirect: ib_dev[syz2] removed [ 419.580302][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 420.085215][T10512] FAULT_INJECTION: forcing a failure. [ 420.085215][T10512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.130215][T10512] CPU: 0 UID: 0 PID: 10512 Comm: syz.0.1300 Tainted: G L syzkaller #0 PREEMPT(full) [ 420.130244][T10512] Tainted: [L]=SOFTLOCKUP [ 420.130250][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.130260][T10512] Call Trace: [ 420.130265][T10512] [ 420.130273][T10512] dump_stack_lvl+0x100/0x190 [ 420.130299][T10512] should_fail_ex.cold+0x5/0xa [ 420.130323][T10512] _copy_to_iter+0x1f3/0x1720 [ 420.130349][T10512] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 420.130371][T10512] ? __pfx__copy_to_iter+0x10/0x10 [ 420.130399][T10512] ? skb_consume_udp+0x15d/0x350 [ 420.130423][T10512] udp_recvmsg+0xa1e/0xf80 [ 420.130447][T10512] ? __pfx_udp_recvmsg+0x10/0x10 [ 420.130464][T10512] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 420.130484][T10512] ? is_bpf_text_address+0x94/0x1a0 [ 420.130508][T10512] ? import_ubuf+0x1b6/0x220 [ 420.130532][T10512] ? __pfx_udp_recvmsg+0x10/0x10 [ 420.130549][T10512] inet_recvmsg+0x277/0x4c0 [ 420.130571][T10512] ? __might_fault+0x90/0x140 [ 420.130598][T10512] ____sys_recvmsg+0x58b/0x640 [ 420.130617][T10512] ? __pfx_inet_recvmsg+0x10/0x10 [ 420.130641][T10512] ? __pfx_____sys_recvmsg+0x10/0x10 [ 420.130668][T10512] ? rcu_is_watching+0x12/0xc0 [ 420.130694][T10512] ? ___sys_recvmsg+0x177/0x1a0 [ 420.130711][T10512] ? kfree+0x1dd/0x6c0 [ 420.130736][T10512] ___sys_recvmsg+0x16a/0x1a0 [ 420.130759][T10512] ? __pfx____sys_recvmsg+0x10/0x10 [ 420.130779][T10512] ? __pfx___might_resched+0x10/0x10 [ 420.130797][T10512] do_recvmmsg+0x301/0x760 [ 420.130811][T10512] ? __pfx_do_recvmmsg+0x10/0x10 [ 420.130822][T10512] ? ksys_write+0x190/0x250 [ 420.130836][T10512] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 420.130849][T10512] ? kernel_write+0x5e3/0x6c0 [ 420.130863][T10512] ? __fget_files+0x21f/0x3d0 [ 420.130880][T10512] __x64_sys_recvmmsg+0x22a/0x280 [ 420.130897][T10512] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 420.130915][T10512] ? rcu_is_watching+0x12/0xc0 [ 420.130932][T10512] do_syscall_64+0x10b/0xf80 [ 420.130943][T10512] ? clear_bhb_loop+0x40/0x90 [ 420.130956][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.130966][T10512] RIP: 0033:0x7f8b92b9cdd9 [ 420.130976][T10512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.130989][T10512] RSP: 002b:00007f8b939a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 420.130999][T10512] RAX: ffffffffffffffda RBX: 00007f8b92e15fa0 RCX: 00007f8b92b9cdd9 [ 420.131005][T10512] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 420.131012][T10512] RBP: 00007f8b939a3090 R08: 0000000000000000 R09: 0000000000000000 [ 420.131017][T10512] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 420.131023][T10512] R13: 00007f8b92e16038 R14: 00007f8b92e15fa0 R15: 00007ffe756ca268 [ 420.131036][T10512] [ 420.537696][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 420.557345][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 253, changing to 7 [ 420.594923][ T9] usb 6-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 420.604648][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.612860][ T9] usb 6-1: Product: syz [ 420.617024][ T9] usb 6-1: Manufacturer: syz [ 420.621658][ T9] usb 6-1: SerialNumber: syz [ 421.255839][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 421.697841][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 421.788391][ T9] usb 6-1: USB disconnect, device number 13 [ 421.954099][T10550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10550 comm=syz.5.1313 [ 422.121440][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.276138][T10561] xt_hashlimit: size too large, truncated to 1048576 [ 423.455706][T10565] xt_hashlimit: size too large, truncated to 1048576 [ 424.200684][T10575] Bluetooth: hci4: Frame reassembly failed (-84) [ 424.396990][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 425.061120][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 425.061162][ T30] audit: type=1400 audit(2000000341.185:623): avc: denied { mount } for pid=10588 comm="syz.3.1326" name="/" dev="hugetlbfs" ino=32368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 425.251054][ T30] audit: type=1400 audit(2000000341.475:624): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 425.372363][T10600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10600 comm=syz.5.1329 [ 426.195481][T10603] xt_hashlimit: size too large, truncated to 1048576 [ 426.460274][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 426.465918][ T5616] Bluetooth: hci4: command 0x1003 tx timeout [ 427.115212][ T30] audit: type=1400 audit(2000000343.335:625): avc: denied { connect } for pid=10616 comm="syz.2.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 427.149525][T10619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1338'. [ 427.169804][ T30] audit: type=1400 audit(2000000343.335:626): avc: denied { unmount } for pid=10616 comm="syz.2.1335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 427.444275][T10631] FAULT_INJECTION: forcing a failure. [ 427.444275][T10631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.458731][ T30] audit: type=1326 audit(2000000343.675:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10620 comm="syz.0.1337" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b92b9cdd9 code=0x0 [ 427.464407][T10631] CPU: 0 UID: 0 PID: 10631 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.464434][T10631] Tainted: [L]=SOFTLOCKUP [ 427.464440][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.464448][T10631] Call Trace: [ 427.464453][T10631] [ 427.464459][T10631] dump_stack_lvl+0x100/0x190 [ 427.464483][T10631] should_fail_ex.cold+0x5/0xa [ 427.464505][T10631] _copy_to_user+0x32/0xd0 [ 427.464528][T10631] simple_read_from_buffer+0xcb/0x170 [ 427.464549][T10631] proc_fail_nth_read+0x1af/0x230 [ 427.464567][T10631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.464585][T10631] ? rw_verify_area+0xce/0x6d0 [ 427.464607][T10631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 427.464624][T10631] vfs_read+0x1e4/0xb30 [ 427.464642][T10631] ? __pfx_vfs_read+0x10/0x10 [ 427.464662][T10631] ? __fget_files+0x215/0x3d0 [ 427.464686][T10631] ? __fget_files+0x21f/0x3d0 [ 427.464710][T10631] ksys_read+0x12a/0x250 [ 427.464725][T10631] ? __pfx_ksys_read+0x10/0x10 [ 427.464743][T10631] ? rcu_is_watching+0x12/0xc0 [ 427.464769][T10631] do_syscall_64+0x10b/0xf80 [ 427.464785][T10631] ? clear_bhb_loop+0x40/0x90 [ 427.464804][T10631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.464818][T10631] RIP: 0033:0x7f17a395d60e [ 427.464831][T10631] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 427.464845][T10631] RSP: 002b:00007f17a483cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 427.464859][T10631] RAX: ffffffffffffffda RBX: 00007f17a483d6c0 RCX: 00007f17a395d60e [ 427.464869][T10631] RDX: 000000000000000f RSI: 00007f17a483d0a0 RDI: 0000000000000004 [ 427.464878][T10631] RBP: 00007f17a483d090 R08: 0000000000000000 R09: 0000000000000000 [ 427.464886][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.464895][T10631] R13: 00007f17a3c16038 R14: 00007f17a3c15fa0 R15: 00007fff3e961a48 [ 427.464916][T10631] [ 427.551829][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.575242][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.041714][T10641] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1344'. [ 428.127576][T10642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10642 comm=syz.3.1343 [ 428.211694][ T8708] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 428.363969][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.822594][T10650] overlay: Unknown parameter 'smackfshat' [ 428.839467][ T284] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 429.369341][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.543980][T10662] xt_hashlimit: size too large, truncated to 1048576 [ 429.618371][ T8708] usb 3-1: device descriptor read/64, error -71 [ 429.719263][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1350'. [ 429.880251][ T8708] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 430.065639][ T8708] usb 3-1: device descriptor read/64, error -71 [ 430.210420][ T8708] usb usb3-port1: attempt power cycle [ 430.742319][ T30] audit: type=1400 audit(2000000346.775:628): avc: denied { firmware_load } for pid=10673 comm="syz.6.1352" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 430.871240][ T8708] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 431.113161][ T8708] usb 3-1: device descriptor read/8, error -71 [ 431.645358][T10689] Cannot find del_set index 1 as target [ 434.176558][T10701] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.226807][T10700] tipc: Enabling of bearer rejected, failed to enable media [ 434.243418][T10701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.250683][T10701] IPv6: NLM_F_CREATE should be set when creating new route [ 434.260687][T10704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1361'. [ 434.463867][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.541972][T10710] xt_hashlimit: size too large, truncated to 1048576 [ 434.803650][T10714] xt_TPROXY: Can be used only with -p tcp or -p udp [ 434.990881][T10721] fuse: Bad value for 'fd' [ 435.001463][T10721] fuse: Bad value for 'fd' [ 435.007401][T10721] fuse: Bad value for 'fd' [ 435.031907][T10721] fuse: Bad value for 'fd' [ 435.090720][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1366'. [ 435.203220][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 435.305342][T10734] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 435.344303][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'. [ 435.355392][T10734] bond1 (unregistering): Released all slaves [ 436.621432][ T8708] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 436.779020][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1373'. [ 436.860219][ T8708] usb 3-1: Using ep0 maxpacket: 16 [ 436.959737][T10752] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.997184][ T8708] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.031767][ T8708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 437.063552][ T8708] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 437.275103][ T5616] Bluetooth: hci4: command 0x1003 tx timeout [ 437.283100][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 437.321703][ T8708] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.700038][T10766] netlink: 'syz.0.1378': attribute type 13 has an invalid length. [ 437.708702][ T6342] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 437.717174][T10766] netlink: 'syz.0.1378': attribute type 17 has an invalid length. [ 437.850920][ T6342] usb 4-1: device descriptor read/64, error -71 [ 437.930622][ T8708] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 437.940836][ T8708] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 437.950604][ T8708] usb 3-1: Manufacturer: syz [ 437.961153][ T8708] usb 3-1: config 0 descriptor?? [ 438.057481][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.064803][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.100827][ T6342] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 438.134631][T10765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.146116][T10765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.242714][ T6342] usb 4-1: device descriptor read/64, error -71 [ 438.274473][ T6343] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 438.295080][T10766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.315260][T10766] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.326973][T10766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.351054][ T8708] rc_core: IR keymap rc-hauppauge not found [ 438.361166][ T6342] usb usb4-port1: attempt power cycle [ 438.368673][ T8708] Registered IR keymap rc-empty [ 438.371380][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.374637][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.380746][T10766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.384024][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.402070][T10766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.411116][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.427854][T10777] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1380'. [ 438.430983][ T6343] usb 6-1: Using ep0 maxpacket: 16 [ 438.445720][T10766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.451569][ T8708] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 438.454550][ T6343] usb 6-1: config 0 has no interfaces? [ 438.476036][T10766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.482279][ T8708] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 438.488198][ T6343] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 438.513662][ T6343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.526224][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.529533][T10766] veth1_vlan: left promiscuous mode [ 438.542441][ T6343] usb 6-1: config 0 descriptor?? [ 438.554733][T10766] veth0_vlan: left promiscuous mode [ 438.560767][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.571458][T10766] veth0_vlan: entered promiscuous mode [ 438.585307][T10766] veth1_vlan: entered promiscuous mode [ 438.593891][T10766] veth1_macvtap: left promiscuous mode [ 438.599820][T10766] veth0_macvtap: left promiscuous mode [ 438.606639][T10766] veth0_macvtap: entered promiscuous mode [ 438.611989][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.614440][T10766] veth1_macvtap: entered promiscuous mode [ 438.634343][T10766] 8021q: adding VLAN 0 to HW filter on device eth0 [ 438.637042][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.643017][T10766] 8021q: adding VLAN 0 to HW filter on device eth1 [ 438.656959][T10766] 8021q: adding VLAN 0 to HW filter on device eth2 [ 438.665297][T10766] 8021q: adding VLAN 0 to HW filter on device eth3 [ 438.674791][T10766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.680477][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.700489][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.711617][ T6342] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 438.722194][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.741960][ T6342] usb 4-1: device descriptor read/8, error -71 [ 438.817354][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.840709][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 438.983560][T10783] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19 [ 439.018300][ T6342] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 439.083830][ T6342] usb 4-1: device descriptor read/8, error -71 [ 439.189497][T10787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.242151][ T6342] usb usb4-port1: unable to enumerate USB device [ 439.267863][T10787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.745757][ T8708] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 439.930345][ T8708] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 439.960329][ T8708] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 440.623516][ T8708] usb 3-1: USB disconnect, device number 35 [ 440.810883][T10740] udevd[10740]: setting mode of /dev/bus/usb/003/035 to 020664 failed: No such file or directory [ 440.873607][T10740] udevd[10740]: setting owner of /dev/bus/usb/003/035 to uid=0, gid=0 failed: No such file or directory [ 440.911082][T10799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1385'. [ 441.188390][T10800] xt_TPROXY: Can be used only with -p tcp or -p udp [ 441.246868][ T8708] usb 6-1: USB disconnect, device number 14 [ 441.435295][ T1014] wlan1: Trigger new scan to find an IBSS to join [ 441.588318][ T6341] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 442.390818][ T6341] usb 4-1: device descriptor read/64, error -71 [ 442.630306][ T6341] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 442.830212][ T6341] usb 4-1: device descriptor read/64, error -71 [ 443.332891][ T6341] usb usb4-port1: attempt power cycle [ 443.811515][ T6341] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 443.841339][ T6341] usb 4-1: device descriptor read/8, error -71 [ 444.281183][T10833] 9p: Bad value for 'rfdno' [ 444.292014][ T6341] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 444.353983][ T6341] usb 4-1: device descriptor read/8, error -71 [ 444.470944][ T6341] usb usb4-port1: unable to enumerate USB device [ 445.240494][ T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 445.431108][ T6126] wlan1: Trigger new scan to find an IBSS to join [ 445.593281][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.638221][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 445.680488][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 445.694371][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 445.764072][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 445.817527][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 445.903532][T10860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10860 comm=syz.3.1404 [ 446.665598][ T6126] wlan1: Creating new IBSS network, BSSID 6a:2e:94:93:19:61 [ 446.678132][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 446.687016][ T9] usb 3-1: Product: syz [ 446.691577][ T9] usb 3-1: Manufacturer: syz [ 446.696558][ T9] usb 3-1: SerialNumber: syz [ 446.710518][ T9] usb 3-1: config 0 descriptor?? [ 447.128696][T10844] loop8: detected capacity change from 0 to 8 [ 447.136114][T10844] Dev loop8: unable to read RDB block 8 [ 447.142380][T10844] loop8: unable to read partition table [ 447.148134][T10844] loop8: partition table beyond EOD, truncated [ 447.154858][T10844] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 447.383236][ T9] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 447.408841][ T9] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 447.564040][T10867] netlink: 'syz.5.1407': attribute type 10 has an invalid length. [ 447.604393][T10867] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.819609][T10871] Set syz1 is full, maxelem 65536 reached [ 447.848586][T10863] binder: 10862:10863 ioctl 4018620d 0 returned -22 [ 448.030771][T10867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.068004][T10867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.424567][T10898] xt_hashlimit: size too large, truncated to 1048576 [ 449.478663][ T5713] usb 3-1: USB disconnect, device number 36 [ 449.682777][T10908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.810217][T10910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10910 comm=syz.5.1417 [ 450.145291][ T30] audit: type=1400 audit(2000000000.460:629): avc: denied { create } for pid=10906 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 450.178029][T10911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10911 comm=syz.2.1419 [ 450.682469][ T30] audit: type=1400 audit(2000000000.490:630): avc: denied { write } for pid=10906 comm="syz.2.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 450.736067][T10913] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 451.094713][ T30] audit: type=1400 audit(2000000001.410:631): avc: denied { bind } for pid=10887 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 452.133574][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 452.174235][T10939] syzkaller0: entered promiscuous mode [ 452.191397][T10939] syzkaller0: entered allmulticast mode [ 452.215569][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1427'. [ 452.248911][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1427'. [ 452.270707][ T30] audit: type=1400 audit(2000000002.580:632): avc: denied { connect } for pid=10941 comm="syz.5.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 452.271452][T10942] trusted_key: encrypted_key: insufficient parameters specified [ 452.316556][T10942] trusted_key: encrypted_key: insufficient parameters specified [ 452.343499][ T30] audit: type=1400 audit(2000000002.590:633): avc: denied { getopt } for pid=10941 comm="syz.5.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 452.570219][ T8708] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 452.570627][ T6341] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 452.650814][ T6342] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 452.733081][ T6341] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 452.744051][ T6341] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 452.756798][ T8708] usb 3-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 452.756809][ T6341] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 452.777779][ T8708] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 452.779260][ T6341] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 452.789467][ T8708] usb 3-1: Product: syz [ 452.795919][ T6341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.807910][ T6341] usb 6-1: Product: syz [ 452.810315][ T8708] usb 3-1: Manufacturer: syz [ 452.812719][ T6341] usb 6-1: Manufacturer: syz [ 452.826343][ T6342] usb 7-1: config 127 has an invalid interface number: 84 but max is 0 [ 452.830185][ T8708] usb 3-1: SerialNumber: syz [ 452.835291][ T6342] usb 7-1: config 127 has no interface number 0 [ 452.846818][ T6341] usb 6-1: SerialNumber: syz [ 452.852140][ T8708] usb 3-1: config 0 descriptor?? [ 452.853704][ T6342] usb 7-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 452.867530][ T6342] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.875981][ T6342] usb 7-1: Product: syz [ 452.881368][ T6341] usb 6-1: config 0 descriptor?? [ 452.887714][T10942] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 452.895274][T10942] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 452.903924][ T6341] usb 6-1: ucan: probing device on interface #0 [ 452.914234][ T6342] usb 7-1: Manufacturer: syz [ 452.918861][ T6342] usb 7-1: SerialNumber: syz [ 453.096443][ T9] usb 3-1: USB disconnect, device number 37 [ 453.131779][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1430'. [ 453.201719][ T6341] usb 6-1: ucan: could not read protocol version, ret=0 [ 453.222213][ T6341] usb 6-1: ucan: probe failed; try to update the device firmware [ 453.334810][T10952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10952 comm=syz.0.1431 [ 453.737279][ T6342] gspca_main: spca501-2.14.0 probing 040a:0002 [ 453.751136][ T6342] gspca_spca501: reg write: error -71 [ 453.757011][ T6342] spca501 7-1:127.84: Reg write failed for 0x00,0xaa,0x00 [ 453.764740][ T6342] spca501 7-1:127.84: probe with driver spca501 failed with error -22 [ 453.780747][ T6342] usb 7-1: USB disconnect, device number 9 [ 453.781769][ T8708] usb 6-1: USB disconnect, device number 15 [ 453.973419][T10955] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 453.999144][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 454.008913][T10955] bond2 (unregistering): Released all slaves [ 454.140293][ T5616] Bluetooth: hci4: command 0x1003 tx timeout [ 454.143199][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 454.262065][T10960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10960 comm=syz.3.1433 [ 454.362077][ T6342] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 454.671512][ T6342] usb 1-1: Using ep0 maxpacket: 16 [ 454.737137][ T6342] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.845451][ T6342] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 454.926856][ T6342] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.032263][T10963] xt_hashlimit: size too large, truncated to 1048576 [ 455.047843][ T6342] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 455.088397][ T6342] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 455.091710][ T30] audit: type=1400 audit(2000000005.410:634): avc: denied { create } for pid=10967 comm="syz.2.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 455.117553][ T30] audit: type=1400 audit(2000000005.440:635): avc: denied { connect } for pid=10967 comm="syz.2.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 455.406536][ T6342] usb 1-1: Manufacturer: syz [ 455.429571][ T6342] usb 1-1: config 0 descriptor?? [ 456.413706][ T6342] rc_core: IR keymap rc-hauppauge not found [ 456.420671][ T6342] Registered IR keymap rc-empty [ 456.426665][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.451393][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.484618][ T6342] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 456.510693][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 456.510775][ T6342] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 456.571911][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.617005][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.642679][T10996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.653134][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.702970][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.742774][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 456.752346][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.791731][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.836597][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 456.839582][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.922706][T10997] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 456.929676][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.939840][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.948627][ T9] usb 3-1: Product: syz [ 456.961868][ T9] usb 3-1: Manufacturer: syz [ 456.965463][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 456.966480][ T9] usb 3-1: SerialNumber: syz [ 456.983938][ T9] usb 3-1: config 0 descriptor?? [ 457.002247][ T6342] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 457.007570][ T9] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 457.063373][ T6342] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 457.072121][ T6342] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 457.092706][ T6342] usb 1-1: USB disconnect, device number 41 [ 457.158160][T11002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.179381][T11002] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 457.211461][T10985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.220027][T10985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.566943][ T30] audit: type=1400 audit(2000000000.960:636): avc: denied { ioctl } for pid=11001 comm="syz.3.1446" path="socket:[34243]" dev="sockfs" ino=34243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 458.197977][ T9] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 458.211014][ T9] visor 3-1:0.0: probe with driver visor failed with error -71 [ 458.232404][ T9] usb 3-1: USB disconnect, device number 38 [ 458.308586][T11013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11013 comm=syz.3.1448 [ 458.460280][ T5616] Bluetooth: hci4: command 0x1003 tx timeout [ 458.473047][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 462.021017][T11033] netlink: 'syz.0.1453': attribute type 10 has an invalid length. [ 462.030352][T11033] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.037822][T11033] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.243475][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 462.288454][T11037] xt_hashlimit: size too large, truncated to 1048576 [ 462.769217][T11033] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.776322][T11033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.783647][T11033] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.790762][T11033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.798629][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 462.819067][T11033] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 462.819596][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 462.855930][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1457'. [ 462.872405][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.982508][ T9] usb 4-1: config 0 descriptor?? [ 463.006872][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 463.913468][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 463.949402][T11050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11050 comm=syz.0.1458 [ 464.381015][ T9] gspca_nw80x: reg_w err -71 [ 464.395541][ T9] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 464.422252][ T9] usb 4-1: USB disconnect, device number 37 [ 464.719510][T11066] FAULT_INJECTION: forcing a failure. [ 464.719510][T11066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.874869][T11066] CPU: 0 UID: 0 PID: 11066 Comm: syz.6.1462 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.874896][T11066] Tainted: [L]=SOFTLOCKUP [ 464.874901][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 464.874910][T11066] Call Trace: [ 464.874916][T11066] [ 464.874922][T11066] dump_stack_lvl+0x100/0x190 [ 464.874949][T11066] should_fail_ex.cold+0x5/0xa [ 464.874973][T11066] _copy_from_user+0x2e/0xd0 [ 464.874996][T11066] copy_msghdr_from_user+0x9f/0x4f0 [ 464.875013][T11066] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 464.875039][T11066] ___sys_sendmsg+0x106/0x1e0 [ 464.875056][T11066] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.875094][T11066] __sys_sendmsg+0x170/0x220 [ 464.875114][T11066] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.875142][T11066] ? rcu_is_watching+0x12/0xc0 [ 464.875166][T11066] do_syscall_64+0x10b/0xf80 [ 464.875182][T11066] ? clear_bhb_loop+0x40/0x90 [ 464.875205][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.875218][T11066] RIP: 0033:0x7ff223d9cdd9 [ 464.875229][T11066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.875242][T11066] RSP: 002b:00007ff224cb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.875256][T11066] RAX: ffffffffffffffda RBX: 00007ff224015fa0 RCX: 00007ff223d9cdd9 [ 464.875265][T11066] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 464.875273][T11066] RBP: 00007ff224cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 464.875281][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.875288][T11066] R13: 00007ff224016038 R14: 00007ff224015fa0 R15: 00007ffe3cc7abb8 [ 464.875307][T11066] [ 465.668716][T11076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11076 comm=syz.6.1465 [ 465.982835][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 467.586132][T11094] netlink: 'syz.6.1469': attribute type 13 has an invalid length. [ 467.619241][T11094] netlink: 'syz.6.1469': attribute type 17 has an invalid length. [ 467.677712][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.684995][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.800284][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 467.950965][ T6342] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 468.638273][ T6342] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.826094][T11093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.870700][T11093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.973327][ T6342] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.988003][ T6342] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.002293][ T6342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.010923][ T6342] usb 6-1: Product: syz [ 469.015155][ T6342] usb 6-1: Manufacturer: syz [ 469.019773][ T6342] usb 6-1: SerialNumber: syz [ 469.035522][ T6342] cdc_mbim 6-1:1.0: skipping garbage [ 469.046571][ T6342] usb 6-1: selecting invalid altsetting 1 [ 469.464027][T11106] syz.2.1472 (11106): drop_caches: 2 [ 469.514942][ T6342] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 469.522215][ T6342] cdc_mbim 6-1:1.0: bind() failure [ 469.772874][ T6126] Bluetooth: hci4: Frame reassembly failed (-84) [ 470.324663][T11094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.333878][T11094] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.355845][T11094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.432765][T11094] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.439852][T11094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.466745][T11094] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.473904][T11094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.622633][T11131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11131 comm=syz.2.1479 [ 470.856416][T11094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.935366][T11094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.195499][T11094] veth1_vlan: left promiscuous mode [ 471.209492][T11094] veth0_vlan: left promiscuous mode [ 471.222754][T11094] veth0_vlan: entered promiscuous mode [ 471.285524][T11094] veth1_vlan: entered promiscuous mode [ 471.325199][T11094] veth1_macvtap: left promiscuous mode [ 471.423398][T11094] veth0_macvtap: left promiscuous mode [ 471.478698][T11094] veth0_macvtap: entered promiscuous mode [ 471.534651][T11094] veth1_macvtap: entered promiscuous mode [ 471.614832][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.686141][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.753986][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.828285][ T5611] Bluetooth: hci4: command 0x1003 tx timeout [ 471.836236][ T5610] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 471.956263][T11094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.276364][T11094] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 474.113215][ T30] audit: type=1400 audit(2000000016.720:637): avc: denied { write } for pid=11141 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 474.338608][ T9] usb 6-1: USB disconnect, device number 16 [ 474.525271][T11153] netlink: 'syz.0.1487': attribute type 4 has an invalid length. [ 474.562544][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 474.585898][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 475.213803][ T5611] block nbd0: Receive control failed (result -32) [ 475.226781][ T5610] block nbd0: Receive control failed (result -32) [ 476.679219][T11179] NILFS (nullb0): couldn't find nilfs on the device [ 477.216682][T11185] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1494' sets config #2 [ 477.429561][T11107] Set syz1 is full, maxelem 65536 reached [ 477.707448][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1500'. [ 477.733328][T11197] macvtap0: Device is already in use. [ 477.781608][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1501'. [ 477.797038][ T6342] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 477.828854][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1501'. [ 478.471024][ T6342] usb 1-1: Using ep0 maxpacket: 16 [ 478.477977][ T6342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.489677][ T6342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.512141][ T6342] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.547683][ T6342] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.575527][ T6342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.283693][ T6342] usb 1-1: config 0 descriptor?? [ 479.335720][T11214] comedi: valid board names for 8255 driver are: [ 479.357814][T11214] 8255 [ 479.365446][T11214] comedi: valid board names for vmk80xx driver are: [ 479.385215][T11214] vmk80xx [ 479.392191][T11214] comedi: valid board names for usbduxsigma driver are: [ 479.419982][T11214] usbduxsigma [ 479.450835][T11214] comedi: valid board names for usbduxfast driver are: [ 479.883182][ T6342] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 480.034174][ T6126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 480.045507][T11214] usbduxfast [ 480.057360][ T6342] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 480.081394][T11214] comedi: valid board names for usbdux driver are: [ 480.145369][T11214] usbdux [ 480.202120][T11214] comedi: valid board names for ni6501 driver are: [ 480.233918][ T6342] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 480.275530][T11214] ni6501 [ 480.616681][ T6342] microsoft 0003:045E:07DA.0007: no inputs found [ 480.649230][T11214] comedi: valid board names for dt9812 driver are: [ 480.669389][ T6342] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 480.725727][T11214] dt9812 [ 480.774858][T11227] netlink: 'syz.6.1508': attribute type 13 has an invalid length. [ 480.787861][T11214] comedi: valid board names for ni_labpc_cs driver are: [ 480.805446][ T6342] usb 1-1: USB disconnect, device number 42 [ 480.859397][T11229] xt_hashlimit: size too large, truncated to 1048576 [ 480.922334][T11214] ni_labpc_cs [ 480.929168][T11227] netlink: 'syz.6.1508': attribute type 17 has an invalid length. [ 480.969363][T11214] comedi: valid board names for ni_daq_700 driver are: [ 480.996421][T11223] fido_id[11223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 481.056876][T11224] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.064212][T11224] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.079283][T11214] ni_daq_700 [ 481.095827][T11214] comedi: valid board names for labpc_pci driver are: [ 481.125537][T11214] labpc_pci [ 481.131999][T11214] comedi: valid board names for adl_pci9118 driver are: [ 481.139818][T11214] pci9118dg [ 481.148929][T11214] pci9118hg [ 481.153766][T11214] pci9118hr [ 481.157054][T11214] comedi: valid board names for 8255_pci driver are: [ 481.165172][T11214] 8255_pci [ 481.168344][T11214] comedi: valid board names for s526 driver are: [ 481.174764][T11214] s526 [ 481.177877][T11214] comedi: valid board names for multiq3 driver are: [ 481.185327][T11214] multiq3 [ 481.189128][T11214] comedi: valid board names for pcmuio driver are: [ 481.195810][T11214] pcmuio48 [ 481.199074][T11214] pcmuio96 [ 481.202411][T11214] comedi: valid board names for pcmmio driver are: [ 481.208957][T11214] pcmmio [ 481.223874][T11214] comedi: valid board names for pcmda12 driver are: [ 481.230597][T11214] pcmda12 [ 481.234839][T11214] comedi: valid board names for pcmad driver are: [ 481.245679][T11214] pcmad12 [ 481.258957][T11214] pcmad16 [ 481.262391][T11214] comedi: valid board names for ni_labpc driver are: [ 481.280554][T11214] lab-pc-1200 [ 481.288365][T11214] lab-pc-1200ai [ 481.301180][T11214] lab-pc+ [ 481.304483][T11224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.312435][T11214] comedi: valid board names for atmio16 driver are: [ 481.328168][T11214] atmio16 [ 481.331883][T11224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.339465][T11214] atmio16d [ 481.343780][T11214] comedi: valid board names for ni_at_ao driver are: [ 481.363835][T11214] at-ao-6 [ 481.371082][T11214] at-ao-10 [ 481.379280][T11214] comedi: valid board names for ni_at_a2150 driver are: [ 481.397225][T11214] ni_at_a2150 [ 481.402235][T11214] comedi: valid board names for adq12b driver are: [ 481.409424][T11214] adq12b [ 481.414201][T11214] comedi: valid board names for mpc624 driver are: [ 481.421690][ T6126] wlan1: Trigger new scan to find an IBSS to join [ 481.435048][T11214] mpc624 [ 481.451896][T11214] comedi: valid board names for c6xdigio driver are: [ 481.466997][T11214] c6xdigio [ 481.483930][T11214] comedi: valid board names for aio_iiro_16 driver are: [ 481.509424][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1514'. [ 481.518581][T11214] aio_iiro_16 [ 481.518594][T11214] comedi: valid board names for aio_aio12_8 driver are: [ 481.518603][T11214] aio_aio12_8 [ 481.518609][T11214] aio_ai12_8 [ 481.518615][T11214] aio_ao12_4 [ 481.518622][T11214] comedi: valid board names for fl512 driver are: [ 481.518630][T11214] fl512 [ 481.518636][T11214] comedi: valid board names for dmm32at driver are: [ 481.518643][T11214] dmm32at [ 481.518649][T11214] comedi: valid board names for dt282x driver are: [ 481.518657][T11214] dt2821 [ 481.518662][T11214] dt2821-f [ 481.518669][T11214] dt2821-g [ 481.518674][T11214] dt2823 [ 481.518680][T11214] dt2824-pgh [ 481.518686][T11214] dt2824-pgl [ 481.518692][T11214] dt2825 [ 481.518698][T11214] dt2827 [ 481.518704][T11214] dt2828 [ 481.518710][T11214] dt2829 [ 481.518716][T11214] dt21-ez [ 481.518722][T11214] dt23-ez [ 481.518728][T11214] dt24-ez [ 481.518733][T11214] dt24-ez-pgl [ 481.518739][T11214] comedi: valid board names for dt2817 driver are: [ 481.518747][T11214] dt2817 [ 481.518753][T11214] comedi: valid board names for dt2815 driver are: [ 481.518761][T11214] dt2815 [ 481.518766][T11214] comedi: valid board names for dt2814 driver are: [ 481.518774][T11214] dt2814 [ 481.518780][T11214] comedi: valid board names for dt2811 driver are: [ 481.518788][T11214] dt2811-pgh [ 481.518794][T11214] dt2811-pgl [ 481.518800][T11214] comedi: valid board names for dt2801 driver are: [ 481.518808][T11214] dt2801 [ 481.518814][T11214] comedi: valid board names for das6402 driver are: [ 481.518821][T11214] das6402-12 [ 481.518827][T11214] das6402-16 [ 481.518833][T11214] comedi: valid board names for das1800 driver are: [ 481.518841][T11214] das-1701st [ 481.518847][T11214] das-1701st-da [ 481.518853][T11214] das-1702st [ 481.518859][T11214] das-1702st-da [ 481.518865][T11214] das-1702hr [ 481.518872][T11214] das-1702hr-da [ 481.518878][T11214] das-1701ao [ 481.518883][T11214] das-1702ao [ 481.518890][T11214] das-1801st [ 481.518895][T11214] das-1801st-da [ 481.518901][T11214] das-1802st [ 481.518906][T11214] das-1802st-da [ 481.518912][T11214] das-1802hr [ 481.518918][T11214] das-1802hr-da [ 481.518924][T11214] das-1801hc [ 481.518931][T11214] das-1802hc [ 481.518937][T11214] das-1801ao [ 481.518943][T11214] das-1802ao [ 481.518949][T11214] comedi: valid board names for das800 driver are: [ 481.518957][T11214] das-800 [ 481.518974][T11214] cio-das800 [ 481.518980][T11214] das-801 [ 481.518986][T11214] cio-das801 [ 481.518993][T11214] das-802 [ 481.518999][T11214] cio-das802 [ 481.519005][T11214] cio-das802/16 [ 481.519012][T11214] comedi: valid board names for isa-das08 driver are: [ 481.519020][T11214] isa-das08 [ 481.519026][T11214] das08-pgm [ 481.519032][T11214] das08-pgh [ 481.519039][T11214] das08-pgl [ 481.519046][T11214] das08-aoh [ 481.519052][T11214] das08-aol [ 481.519059][T11214] das08-aom [ 481.519065][T11214] das08/jr-ao [ 481.519072][T11214] das08jr-16-ao [ 481.519079][T11214] pc104-das08 [ 481.519086][T11214] das08jr/16 [ 481.519092][T11214] comedi: valid board names for das16m1 driver are: [ 481.519100][T11214] das16m1 [ 481.519107][T11214] comedi: valid board names for dac02 driver are: [ 481.519115][T11214] dac02 [ 481.519121][T11214] comedi: valid board names for rti802 driver are: [ 481.519129][T11214] rti802 [ 481.519135][T11214] comedi: valid board names for rti800 driver are: [ 481.519143][T11214] rti800 [ 481.519150][T11214] rti815 [ 481.519156][T11214] comedi: valid board names for pcm3724 driver are: [ 481.519164][T11214] pcm3724 [ 481.519171][T11214] comedi: valid board names for pcl818 driver are: [ 481.519179][T11214] pcl818l [ 481.519185][T11214] pcl818h [ 481.519192][T11214] pcl818hd [ 481.884304][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'. [ 481.897599][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'. [ 481.925004][T11214] pcl818hg [ 481.932582][T11214] pcl818 [ 481.939539][T11214] pcl718 [ 481.948422][T11214] pcm3718 [ 481.955118][T11214] comedi: valid board names for pcl816 driver are: [ 481.968507][T11214] pcl816 [ 481.978717][T11214] pcl814b [ 481.992495][T11227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.004918][T11227] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.012908][T11214] comedi: valid board names for pcl812 driver are: [ 482.025045][T11214] pcl812 [ 482.026992][T11227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.037159][T11214] pcl812pg [ 482.041407][T11214] acl8112pg [ 482.044769][T11214] acl8112dg [ 482.048158][T11214] acl8112hg [ 482.051603][T11214] a821pgl [ 482.054775][T11214] a821pglnda [ 482.058414][T11214] a821pgh [ 482.065387][T11214] a822pgl [ 482.069289][T11214] a822pgh [ 482.072578][T11214] a823pgl [ 482.075830][T11214] a823pgh [ 482.079114][T11214] pcl813 [ 482.082490][T11214] pcl813b [ 482.085903][T11214] acl8113 [ 482.092152][T11214] iso813 [ 482.092535][T11227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.095181][T11214] acl8216 [ 482.109437][T11214] a826pg [ 482.114368][T11214] comedi: valid board names for pcl730 driver are: [ 482.121450][T11214] pcl730 [ 482.122979][T11227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.124546][T11214] iso730 [ 482.135340][T11214] acl7130 [ 482.146136][T11227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.161588][T11227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.163570][T11214] pcm3730 [ 482.180806][T11214] pcl725 [ 482.184005][T11214] p8r8dio [ 482.187362][T11214] acl7225b [ 482.192048][T11227] veth1_vlan: left promiscuous mode [ 482.197312][T11214] p16r16dio [ 482.198122][T11227] veth0_vlan: left promiscuous mode [ 482.207028][T11214] pcl733 [ 482.207680][T11227] veth0_vlan: entered promiscuous mode [ 482.219676][T11214] pcl734 [ 482.230234][T11214] opmm-1616-xt [ 482.231623][T11227] veth1_vlan: entered promiscuous mode [ 482.243956][T11214] pearl-mm-p [ 482.246792][T11227] veth1_macvtap: left promiscuous mode [ 482.255903][T11214] ir104-pbf [ 482.256614][T11227] veth0_macvtap: left promiscuous mode [ 482.268826][T11214] comedi: valid board names for pcl726 driver are: [ 482.269593][T11227] veth0_macvtap: entered promiscuous mode [ 482.289511][T11214] pcl726 [ 482.290149][T11227] veth1_macvtap: entered promiscuous mode [ 482.302981][T11214] pcl727 [ 482.310283][T11214] pcl728 [ 482.312595][T11227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.324944][T11214] acl6126 [ 482.327175][T11227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.339357][T11227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.348020][T11227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.357206][T11214] acl6128 [ 482.364995][T11214] comedi: valid board names for pcl724 driver are: [ 482.398842][T11214] pcl724 [ 482.403121][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.410189][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.435784][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.440166][T11214] pcl722 [ 482.442915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.466127][T11214] pcl731 [ 482.471424][T11214] acl7122 [ 482.476747][T11214] acl7124 [ 482.483991][T11214] pet48dio [ 482.489663][T11214] pcmio48 [ 482.493014][T11214] onyx-mm-dio [ 482.496482][T11214] comedi: valid board names for pcl711 driver are: [ 482.504897][T11214] pcl711 [ 482.509465][T11214] pcl711b [ 482.512669][T11214] acl8112hg [ 482.517559][T11214] acl8112dg [ 482.521007][T11214] comedi: valid board names for amplc_pc263 driver are: [ 482.528036][T11214] pc263 [ 482.531070][T11214] comedi: valid board names for amplc_pc236 driver are: [ 482.871261][T11214] pc36at [ 482.878914][T11214] comedi: valid board names for amplc_dio200 driver are: [ 482.892067][T11214] pc212e [ 482.902545][T11214] pc214e [ 482.978485][T11261] NILFS (nullb0): couldn't find nilfs on the device [ 483.569001][T11214] pc215e [ 483.574853][T11214] pc218e [ 483.666043][T11214] pc272e [ 483.670971][T11214] comedi: valid board names for comedi_parport driver are: [ 483.711836][T11214] comedi_parport [ 483.728015][T11214] comedi: valid board names for comedi_test driver are: [ 483.756441][T11214] comedi_test [ 483.812389][T11214] comedi: valid board names for comedi_bond driver are: [ 483.822173][T11267] Cannot find del_set index 1 as target [ 483.865642][T11214] comedi_bond [ 485.486231][ T30] audit: type=1400 audit(2000000028.880:638): avc: denied { ioctl } for pid=11295 comm="syz.5.1530" path="socket:[35873]" dev="sockfs" ino=35873 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.734702][ T6346] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 485.900093][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 485.908205][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 485.920328][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1529'. [ 485.942751][ T5713] libceph: connect (1)[c::]:6789 error -101 [ 485.962237][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 485.973794][ T5713] libceph: mon0 (1)[c::]:6789 connect error [ 486.017279][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.017623][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.038539][ T6346] usb 1-1: unable to get BOS descriptor or descriptor too short [ 486.039274][ T6346] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 486.039305][ T6346] usb 1-1: can't read configurations, error -71 [ 486.095224][T11309] Bluetooth: hci4: Frame reassembly failed (-84) [ 486.235600][ T6342] libceph: connect (1)[c::]:6789 error -101 [ 486.235694][ T6342] libceph: mon0 (1)[c::]:6789 connect error [ 486.380291][ T12] wlan1: Trigger new scan to find an IBSS to join [ 486.485164][T11302] ceph: No mds server is up or the cluster is laggy [ 486.935600][ T30] audit: type=1400 audit(2000000030.320:639): avc: denied { mount } for pid=11318 comm="syz.6.1535" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 487.320959][ T6346] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 487.533413][ T6346] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.746656][ T284] wlan1: Creating new IBSS network, BSSID 0e:58:31:ec:7d:b8 [ 487.756443][ T6346] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 487.795485][ T6346] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 487.838931][ T6346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.062266][ T6346] usb 1-1: config 0 descriptor?? [ 489.606215][ T6346] Bluetooth: Can't get state to change to load ram patch err [ 489.615171][ T6346] Bluetooth: Loading patch file failed [ 489.621678][ T6346] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 489.646965][ T6346] usb 1-1: USB disconnect, device number 44 [ 489.958949][T11348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.217617][T11352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.286668][T11353] FAULT_INJECTION: forcing a failure. [ 490.286668][T11353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.300713][T11353] CPU: 1 UID: 0 PID: 11353 Comm: syz.5.1544 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.300736][T11353] Tainted: [L]=SOFTLOCKUP [ 490.300739][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.300745][T11353] Call Trace: [ 490.300749][T11353] [ 490.300753][T11353] dump_stack_lvl+0x100/0x190 [ 490.300770][T11353] should_fail_ex.cold+0x5/0xa [ 490.300785][T11353] _copy_from_user+0x2e/0xd0 [ 490.300800][T11353] copy_msghdr_from_user+0x9f/0x4f0 [ 490.300813][T11353] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 490.300832][T11353] ___sys_sendmsg+0x106/0x1e0 [ 490.300845][T11353] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.300873][T11353] __sys_sendmsg+0x170/0x220 [ 490.300889][T11353] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.300910][T11353] ? rcu_is_watching+0x12/0xc0 [ 490.300928][T11353] do_syscall_64+0x10b/0xf80 [ 490.300939][T11353] ? clear_bhb_loop+0x40/0x90 [ 490.300957][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.300968][T11353] RIP: 0033:0x7fba6e59cdd9 [ 490.300978][T11353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.300988][T11353] RSP: 002b:00007fba6f3a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.300999][T11353] RAX: ffffffffffffffda RBX: 00007fba6e816180 RCX: 00007fba6e59cdd9 [ 490.301006][T11353] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 490.301012][T11353] RBP: 00007fba6f3a4090 R08: 0000000000000000 R09: 0000000000000000 [ 490.301017][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.301023][T11353] R13: 00007fba6e816218 R14: 00007fba6e816180 R15: 00007ffc1b6f1ad8 [ 490.301036][T11353] [ 490.313869][ T30] audit: type=1326 audit(2000000000.360:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 490.554080][T11355] Bluetooth: hci4: Frame reassembly failed (-84) [ 490.577395][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 490.735304][ T30] audit: type=1326 audit(2000000000.360:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 490.811278][ T30] audit: type=1326 audit(2000000000.360:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 490.837858][ T8711] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 490.870383][ T30] audit: type=1326 audit(2000000000.360:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 490.920181][ T30] audit: type=1326 audit(2000000000.360:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 490.970303][ T30] audit: type=1326 audit(2000000000.360:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 491.010177][ T8711] usb 4-1: Using ep0 maxpacket: 32 [ 491.016841][ T8711] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 491.026218][ T8711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.040176][ T30] audit: type=1326 audit(2000000000.360:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 491.069982][ T8711] usb 4-1: config 0 descriptor?? [ 491.089328][ T30] audit: type=1326 audit(2000000000.360:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 491.123935][ T30] audit: type=1326 audit(2000000000.360:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 491.142009][ T8711] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 491.157132][ T30] audit: type=1326 audit(2000000000.360:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 491.198747][ T30] audit: type=1326 audit(2000000000.360:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.5.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6e59cdd9 code=0x7ffc0000 [ 492.424675][ T8711] gspca_nw80x: reg_w err -71 [ 492.438656][ T8711] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 492.472761][ T8711] usb 4-1: USB disconnect, device number 38 [ 492.621091][ T5610] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 493.340435][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 494.441580][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 494.664726][ T9] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 494.683919][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.820299][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 495.038365][T11421] netlink: 'syz.5.1564': attribute type 1 has an invalid length. [ 495.211077][ T6343] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 495.363699][ T9] gspca_nw80x: reg_w err -110 [ 495.370806][ T9] nw80x 7-1:3.0: probe with driver nw80x failed with error -110 [ 495.419366][T11421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.421250][ T6343] usb 1-1: device descriptor read/64, error -71 [ 495.431996][T11427] vlan2: entered allmulticast mode [ 495.437348][T11427] bond1: entered allmulticast mode [ 495.470569][T11428] bond1: (slave geneve2): making interface the new active one [ 495.478919][T11428] geneve2: entered allmulticast mode [ 495.487196][T11428] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 495.701148][ T6343] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 495.798387][T11440] 9p: Bad value for 'rfdno' [ 495.920706][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.210198][ T6343] usb 1-1: device descriptor read/64, error -71 [ 496.331047][ T6343] usb usb1-port1: attempt power cycle [ 497.123305][ T8708] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 497.181543][ T6343] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 497.292761][ T8708] usb 6-1: device descriptor read/64, error -71 [ 497.396410][ T6343] usb 1-1: device descriptor read/8, error -71 [ 497.425728][ T6342] usb 7-1: USB disconnect, device number 10 [ 497.640236][ T8708] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 497.640931][ T6343] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 497.742687][ T6343] usb 1-1: device descriptor read/8, error -71 [ 497.907887][ T6343] usb usb1-port1: unable to enumerate USB device [ 498.868844][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 499.332209][ T8708] usb 6-1: device descriptor read/64, error -71 [ 499.467184][ T8708] usb usb6-port1: attempt power cycle [ 499.958499][T11476] xt_hashlimit: size too large, truncated to 1048576 [ 499.970311][ T8708] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 500.040087][T11482] netlink: 'syz.0.1580': attribute type 4 has an invalid length. [ 500.160301][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 500.180201][ T8708] usb 6-1: device not accepting address 19, error -71 [ 500.650210][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 500.658984][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 500.668057][ T9] usb 4-1: config 0 has no interface number 0 [ 500.678154][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 500.689160][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 500.700698][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.708804][ T9] usb 4-1: Product: syz [ 500.713607][ T9] usb 4-1: Manufacturer: syz [ 500.720736][ T9] usb 4-1: SerialNumber: syz [ 500.734845][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1584'. [ 500.744069][ T9] usb 4-1: config 0 descriptor?? [ 500.783376][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 500.783392][ T30] audit: type=1400 audit(2000000010.840:652): avc: denied { map } for pid=11493 comm="syz.2.1584" path="socket:[35718]" dev="sockfs" ino=35718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 500.833874][ T30] audit: type=1400 audit(2000000010.870:653): avc: denied { read } for pid=11493 comm="syz.2.1584" path="socket:[35718]" dev="sockfs" ino=35718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 500.960177][ T6343] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 501.132189][ T6343] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.144832][ T6343] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.159538][ T6343] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 501.169623][ T6343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.320209][ T5744] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 501.396287][ T6343] usb 1-1: usb_control_msg returned -32 [ 501.402426][ T6343] usbtmc 1-1:16.0: can't read capabilities [ 501.480274][ T5744] usb 3-1: Using ep0 maxpacket: 8 [ 501.492664][ T5744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.502847][ T5744] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 501.514785][ T5744] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 501.524432][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.534650][ T5744] usb 3-1: Product: syz [ 501.538869][ T5744] usb 3-1: Manufacturer: syz [ 501.543804][ T5744] usb 3-1: SerialNumber: syz [ 501.552769][ T5744] usb 3-1: config 0 descriptor?? [ 501.801903][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 501.945939][ T5744] usb 3-1: USB disconnect, device number 39 [ 501.959224][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 502.189541][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 502.212314][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 502.222550][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 502.233228][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 502.267912][ T9] usb 4-1: USB disconnect, device number 39 [ 502.436436][ T6343] usb 1-1: USB disconnect, device number 49 [ 503.308094][T11517] xt_hashlimit: size too large, truncated to 1048576 [ 503.461760][T11519] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1591'. [ 504.407130][T11524] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11524 comm=syz.6.1592 [ 504.619981][T11532] xt_hashlimit: size too large, truncated to 1048576 [ 506.120676][T11551] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 506.560857][ T9] IPVS: starting estimator thread 0... [ 506.602466][ T9] IPVS: starting estimator thread 0... [ 506.663259][T11554] IPVS: using max 77 ests per chain, 184800 per kthread [ 506.701019][T11557] IPVS: using max 42 ests per chain, 100800 per kthread [ 507.500838][ T6342] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 507.710842][ T6342] usb 1-1: Using ep0 maxpacket: 32 [ 507.847263][ T6342] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 507.931797][ T6342] usb 1-1: config 0 has no interface number 0 [ 507.938154][ T6342] usb 1-1: config 0 interface 184 has no altsetting 0 [ 507.976215][ T6342] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 508.072727][T11578] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11578 comm=syz.2.1604 [ 508.150036][ T6342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.175002][ T6342] usb 1-1: Product: syz [ 508.196997][ T6342] usb 1-1: Manufacturer: syz [ 508.218141][ T6342] usb 1-1: SerialNumber: syz [ 508.264615][ T6342] usb 1-1: config 0 descriptor?? [ 508.321460][T11584] netlink: 'syz.2.1606': attribute type 10 has an invalid length. [ 508.348733][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.356096][T11584] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.788169][T11590] xt_hashlimit: size too large, truncated to 1048576 [ 509.922510][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 510.057528][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 510.372194][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 510.411320][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 510.414703][T11611] netlink: 'syz.2.1613': attribute type 4 has an invalid length. [ 510.432471][T11611] netlink: 4168 bytes leftover after parsing attributes in process `syz.2.1613'. [ 510.458940][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 510.494101][ T6342] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 510.550213][ T30] audit: type=1326 audit(2000000020.600:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 510.561096][ T6342] usb 1-1: USB disconnect, device number 50 [ 510.790591][ T30] audit: type=1326 audit(2000000020.600:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 510.967279][ T30] audit: type=1326 audit(2000000020.630:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 511.069205][T11620] SET target dimension over the limit! [ 511.332739][ T30] audit: type=1326 audit(2000000020.630:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 511.456969][ T30] audit: type=1326 audit(2000000020.630:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 511.507400][T11622] netlink: 'syz.6.1617': attribute type 10 has an invalid length. [ 511.531350][T11622] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.533330][ T30] audit: type=1326 audit(2000000020.630:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 511.538631][T11622] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.618438][T11622] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.625637][T11622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.634036][T11622] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.641196][T11622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.660029][T11622] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 511.669487][ T30] audit: type=1326 audit(2000000020.630:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 511.873058][ T30] audit: type=1326 audit(2000000020.630:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 511.959644][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 512.155333][ T30] audit: type=1326 audit(2000000020.630:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 512.206582][ T30] audit: type=1326 audit(2000000020.640:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.3.1612" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a399cdd9 code=0x7ffc0000 [ 512.245493][T11642] xt_hashlimit: size too large, truncated to 1048576 [ 512.441961][T11647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11647 comm=syz.0.1623 [ 512.861142][ T5744] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 513.062878][ T5744] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 513.211113][ T5744] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 513.622052][T11656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.783493][ T5744] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.824851][ T5744] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 513.834023][ T5744] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 513.842433][ T5744] usb 7-1: Product: syz [ 513.846608][ T5744] usb 7-1: Manufacturer: syz [ 513.851510][ T5744] usb 7-1: SerialNumber: syz [ 514.663009][ T5744] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 515.385434][T11673] netlink: 'syz.0.1631': attribute type 10 has an invalid length. [ 515.403819][T11673] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.411160][T11673] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.432414][ T8711] usb 7-1: USB disconnect, device number 11 [ 515.464717][ T8711] usblp0: removed [ 515.560034][T11679] syzkaller0: entered promiscuous mode [ 515.567852][T11679] syzkaller0: entered allmulticast mode [ 515.721084][ T6343] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 515.890776][ T6343] usb 6-1: Using ep0 maxpacket: 8 [ 515.915846][ T6343] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.949570][ T6343] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 516.013264][ T6343] usb 6-1: config 0 interface 0 has no altsetting 0 [ 516.044129][ T6343] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 516.149509][ T6343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.333231][ T6343] usb 6-1: config 0 descriptor?? [ 517.064159][ T8708] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 517.205860][ T6343] kye 0003:0458:0138.0008: unknown main item tag 0x1 [ 517.221585][ T6343] kye 0003:0458:0138.0008: unknown main item tag 0x0 [ 517.233070][ T8708] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 517.253084][ T6343] kye 0003:0458:0138.0008: unknown global tag 0xc [ 517.263917][ T6343] kye 0003:0458:0138.0008: item 0 1 1 12 parsing failed [ 517.279309][ T8708] usb 1-1: config 0 has no interface number 0 [ 517.279777][ T6343] kye 0003:0458:0138.0008: parse failed [ 517.305680][ T6343] kye 0003:0458:0138.0008: probe with driver kye failed with error -22 [ 517.329650][ T8708] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 517.982884][ T6343] usb 6-1: USB disconnect, device number 21 [ 518.239737][ T8708] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 30991, setting to 64 [ 518.252900][ T8708] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 518.262255][ T8708] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 518.273317][ T8708] usb 1-1: Product: syz [ 518.277532][ T8708] usb 1-1: SerialNumber: syz [ 518.285130][ T8708] usb 1-1: config 0 descriptor?? [ 518.290969][T11690] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 518.315042][ T8708] cm109 1-1:0.8: invalid payload size 64, expected 4 [ 518.323698][ T8708] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input21 [ 518.417242][T11703] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1640'. [ 518.427229][T11703] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1640'. [ 518.437577][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 518.456814][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 518.590221][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 520.266367][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 520.266615][ T6342] usb 1-1: USB disconnect, device number 51 [ 520.273346][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 520.324697][T11718] netlink: 'syz.5.1643': attribute type 10 has an invalid length. [ 520.372088][ T6342] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 520.483218][T11723] random: crng reseeded on system resumption [ 521.411194][T11733] netlink: 'syz.5.1646': attribute type 1 has an invalid length. [ 521.419190][T11733] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1646'. [ 522.451222][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 522.451241][ T30] audit: type=1400 audit(2000000032.459:666): avc: denied { ioctl } for pid=11730 comm="syz.5.1646" path="socket:[37335]" dev="sockfs" ino=37335 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 522.550736][ T6342] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 522.737891][ T6342] usb 1-1: device descriptor read/64, error -71 [ 522.773508][T11742] xt_hashlimit: size too large, truncated to 1048576 [ 522.781398][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 522.831726][ T30] audit: type=1400 audit(2000000033.889:667): avc: denied { getopt } for pid=11741 comm="syz.5.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 522.980780][ T6342] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 523.110215][ T6342] usb 1-1: device descriptor read/64, error -71 [ 523.248235][ T6342] usb usb1-port1: attempt power cycle [ 524.655055][T11756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1652'. [ 524.668205][T11756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1652'. [ 524.682309][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 524.697918][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 524.894195][T11769] netlink: 'syz.2.1656': attribute type 10 has an invalid length. [ 526.067176][ T284] Bluetooth: hci4: Frame reassembly failed (-90) [ 526.074604][ T284] Bluetooth: hci4: Frame reassembly failed (-84) [ 526.088003][T11776] Bluetooth: hci4: Frame reassembly failed (-84) [ 526.792313][T11783] fuse: Bad value for 'fd' [ 527.013650][T11791] syzkaller0: entered promiscuous mode [ 527.033062][T11791] syzkaller0: entered allmulticast mode [ 527.381412][T11797] veth1_macvtap: left promiscuous mode [ 528.060670][ T5611] Bluetooth: hci4: command 0x1003 tx timeout [ 528.068413][ T5610] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 528.218905][T11804] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1667'. [ 528.327816][T11805] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1667'. [ 528.393371][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1667'. [ 528.422056][T11807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 528.433728][T11807] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1668'. [ 528.443866][T11807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1668'. [ 528.525746][T11814] netlink: 'syz.5.1670': attribute type 10 has an invalid length. [ 528.543223][ T30] audit: type=1400 audit(2000000039.539:668): avc: denied { bind } for pid=11806 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.565228][ T30] audit: type=1400 audit(2000000039.599:669): avc: denied { setopt } for pid=11806 comm="syz.0.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 528.582267][T11811] Set syz1 is full, maxelem 65536 reached [ 528.593923][T11818] netlink: 'syz.3.1671': attribute type 13 has an invalid length. [ 528.602594][T11818] netlink: 'syz.3.1671': attribute type 17 has an invalid length. [ 528.730859][T11813] bridge0: port 1(syz_tun) entered disabled state [ 529.016969][T11826] netlink: 'syz.6.1673': attribute type 13 has an invalid length. [ 529.045847][T11826] netlink: 'syz.6.1673': attribute type 17 has an invalid length. [ 529.626316][T11818] bridge0: port 1(syz_tun) entered blocking state [ 529.632894][T11818] bridge0: port 1(syz_tun) entered forwarding state [ 529.884369][T11818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.925451][T11818] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.149550][T11818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.262753][T11818] veth1_vlan: left promiscuous mode [ 530.268439][T11818] veth0_vlan: left promiscuous mode [ 530.277031][T11818] veth0_vlan: entered promiscuous mode [ 530.363278][T11818] veth1_vlan: entered promiscuous mode [ 530.384048][T11818] veth1_macvtap: left promiscuous mode [ 530.397774][T11818] veth0_macvtap: left promiscuous mode [ 530.407603][T11818] veth0_macvtap: entered promiscuous mode [ 530.419351][T11818] veth1_macvtap: entered promiscuous mode [ 530.450457][T11818] 8021q: adding VLAN 0 to HW filter on device eth0 [ 530.465866][T11818] 8021q: adding VLAN 0 to HW filter on device eth1 [ 530.490354][T11818] 8021q: adding VLAN 0 to HW filter on device eth2 [ 530.506053][T11818] 8021q: adding VLAN 0 to HW filter on device eth3 [ 530.660055][T11824] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.667261][T11824] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.776930][T11824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.794949][T11824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.317923][T11826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.327917][T11826] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.344476][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.378855][T11826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.389826][T11826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.404248][T11826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.415195][T11826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.429206][T11861] __nla_validate_parse: 1 callbacks suppressed [ 531.429215][T11861] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1682'. [ 531.447044][T11826] veth1_vlan: left promiscuous mode [ 531.453367][T11826] veth0_vlan: left promiscuous mode [ 531.459290][T11826] veth0_vlan: entered promiscuous mode [ 531.466758][T11826] veth1_vlan: entered promiscuous mode [ 531.474833][T11826] veth1_macvtap: left promiscuous mode [ 531.482129][T11862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1682'. [ 531.482697][T11826] veth0_macvtap: left promiscuous mode [ 531.498295][T11826] veth0_macvtap: entered promiscuous mode [ 531.505119][T11826] veth1_macvtap: entered promiscuous mode [ 531.513871][T11826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.521885][T11826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.529399][T11826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.537726][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 531.547918][T11826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.562245][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1682'. [ 532.142951][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.150160][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.324627][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.331801][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.420750][ T9076] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 532.746774][ T9076] usb 6-1: Using ep0 maxpacket: 32 [ 533.806602][ T9076] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 533.941129][ T9076] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.146302][ T9076] usb 6-1: config 0 descriptor?? [ 534.169496][ T9076] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 534.458028][T11889] Bluetooth: hci4: Frame reassembly failed (-84) [ 534.502102][ T8707] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 534.587181][ T284] Bluetooth: hci4: Frame reassembly failed (-84) [ 534.730300][ T8707] usb 7-1: Using ep0 maxpacket: 32 [ 534.738527][ T8707] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 534.748140][ T8707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.766637][T11894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1692'. [ 534.770942][ T8707] usb 7-1: config 0 descriptor?? [ 534.787878][ T8707] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 535.192917][ T9076] gspca_nw80x: reg_r err -71 [ 535.197614][ T9076] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 535.225758][ T9076] usb 6-1: USB disconnect, device number 22 [ 535.395526][ T8707] gspca_nw80x: reg_w err -71 [ 535.408029][ T8707] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 535.432448][ T8707] usb 7-1: USB disconnect, device number 12 [ 536.469722][T11918] netlink: 'syz.5.1699': attribute type 13 has an invalid length. [ 536.533050][T11918] netlink: 'syz.5.1699': attribute type 17 has an invalid length. [ 536.610539][ T5611] Bluetooth: hci4: command 0x1003 tx timeout [ 536.621708][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 536.640240][ T5610] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 536.940854][ T10] usb 3-1: device descriptor read/64, error -71 [ 537.176278][T11934] NILFS (nullb0): couldn't find nilfs on the device [ 537.563204][T11914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.581913][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 537.607959][T11937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1703'. [ 537.730253][ T10] usb 3-1: device descriptor read/64, error -71 [ 537.852902][ T10] usb usb3-port1: attempt power cycle [ 537.863921][T11918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.872688][T11918] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.892362][T11918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.914074][T11918] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.921172][T11918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.937338][T11918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.951001][T11918] veth1_vlan: left promiscuous mode [ 537.956733][T11918] veth0_vlan: left promiscuous mode [ 537.963806][T11918] veth0_vlan: entered promiscuous mode [ 537.971837][T11918] veth1_vlan: entered promiscuous mode [ 537.980036][T11918] veth1_macvtap: left promiscuous mode [ 537.987093][T11918] veth0_macvtap: left promiscuous mode [ 537.993817][T11918] veth0_macvtap: entered promiscuous mode [ 538.000920][T11918] veth1_macvtap: entered promiscuous mode [ 538.009661][T11918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.017538][T11918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.025200][T11918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.032956][T11918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.043761][T11918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.053332][T11918] vlan2: left allmulticast mode [ 538.058166][T11918] bond1: left allmulticast mode [ 538.064362][T11918] geneve2: left allmulticast mode [ 538.093873][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.101000][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.163879][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 538.207914][T11945] xt_hashlimit: size too large, truncated to 1048576 [ 538.343971][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 538.396236][ T10] usb 3-1: device descriptor read/8, error -71 [ 538.442323][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 538.447606][ T30] audit: type=1400 audit(2000000049.489:670): avc: denied { listen } for pid=11951 comm="syz.6.1708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 538.489879][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 538.499129][ T9] usb 4-1: config 0 has no interface number 0 [ 538.506622][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 538.517132][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 538.527921][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.552848][ T9] usb 4-1: Product: syz [ 538.563536][ T9] usb 4-1: Manufacturer: syz [ 538.576598][ T9] usb 4-1: SerialNumber: syz [ 538.592752][ T9] usb 4-1: config 0 descriptor?? [ 538.792589][T11961] team0: Device ipvlan1 failed to register rx_handler [ 538.921613][T11965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11965 comm=syz.0.1712 [ 539.275949][ T8707] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 539.630548][ T8707] usb 6-1: unable to get BOS descriptor or descriptor too short [ 539.654794][ T8707] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 539.778689][T11969] xt_CT: No such helper "pptp" [ 539.799850][ T8707] usb 6-1: string descriptor 0 read error: -22 [ 539.806173][ T8707] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 539.820549][ T8707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.856543][ T8707] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 539.986965][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 539.999549][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 540.449086][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 540.535111][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 540.638850][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 540.802000][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 540.993872][ T9] usb 4-1: USB disconnect, device number 40 [ 541.073400][T11984] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 541.831600][T11993] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input22 [ 542.964648][T11997] FAULT_INJECTION: forcing a failure. [ 542.964648][T11997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.006288][T11997] CPU: 1 UID: 0 PID: 11997 Comm: syz.6.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.006317][T11997] Tainted: [L]=SOFTLOCKUP [ 543.006323][T11997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.006333][T11997] Call Trace: [ 543.006338][T11997] [ 543.006345][T11997] dump_stack_lvl+0x100/0x190 [ 543.006369][T11997] should_fail_ex.cold+0x5/0xa [ 543.006388][T11997] strncpy_from_user+0x3b/0x2d0 [ 543.006407][T11997] do_getname+0x78/0x390 [ 543.006424][T11997] __x64_sys_execveat+0xc5/0x130 [ 543.006437][T11997] do_syscall_64+0x10b/0xf80 [ 543.006454][T11997] ? clear_bhb_loop+0x40/0x90 [ 543.006475][T11997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.006496][T11997] RIP: 0033:0x7ff223d9cdd9 [ 543.006511][T11997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.006526][T11997] RSP: 002b:00007ff224cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 543.006538][T11997] RAX: ffffffffffffffda RBX: 00007ff224015fa0 RCX: 00007ff223d9cdd9 [ 543.006544][T11997] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 543.006550][T11997] RBP: 00007ff224cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 543.006556][T11997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.006562][T11997] R13: 00007ff224016038 R14: 00007ff224015fa0 R15: 00007ffe3cc7abb8 [ 543.006576][T11997] [ 543.315037][T11999] xt_hashlimit: size too large, truncated to 1048576 [ 543.369784][T12001] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 543.389767][ T8707] usb 6-1: USB disconnect, device number 23 [ 543.401266][T12001] bridge0: port 1(syz_tun) entered disabled state [ 543.427152][T12001] bridge0: port 1(syz_tun) entered blocking state [ 543.433657][T12001] bridge0: port 1(syz_tun) entered forwarding state [ 543.507635][T12001] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 543.955309][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 543.974837][T12015] vxfs: WRONG superblock magic 00000000 at 1 [ 544.011595][T12015] vxfs: WRONG superblock magic 00000000 at 8 [ 544.055232][T12015] vxfs: can't find superblock. [ 544.133677][T12021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12021 comm=syz.6.1725 [ 544.882310][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1732'. [ 545.692077][ T6342] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 545.901301][ T6342] usb 1-1: Using ep0 maxpacket: 32 [ 545.967924][ T6342] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 545.986418][ T6342] usb 1-1: config 0 has no interface number 0 [ 545.998650][ T6342] usb 1-1: config 0 interface 184 has no altsetting 0 [ 546.025677][ T6342] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 546.045729][ T6342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.075945][ T6342] usb 1-1: Product: syz [ 546.098928][ T6342] usb 1-1: Manufacturer: syz [ 546.118368][ T6342] usb 1-1: SerialNumber: syz [ 546.151834][ T6342] usb 1-1: config 0 descriptor?? [ 546.381749][T12055] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1737' sets config #2 [ 547.404976][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 547.480729][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 547.704849][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 547.821081][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 547.926609][ T6342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 548.313740][ T6342] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 548.499385][ T6342] usb 1-1: USB disconnect, device number 55 [ 548.742073][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1745'. [ 549.741055][T12097] could not open pipe file descriptor [ 549.874132][ T30] audit: type=1400 audit(2000000060.929:671): avc: denied { mount } for pid=12100 comm="syz.3.1752" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 549.955547][T12105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12105 comm=syz.0.1750 [ 549.960186][ T30] audit: type=1400 audit(2000000060.969:672): avc: denied { mounton } for pid=12100 comm="syz.3.1752" path="/368/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 551.788543][T12127] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1757'. [ 552.072594][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1760'. [ 552.533415][T12138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12138 comm=syz.0.1761 [ 552.594949][ T30] audit: type=1400 audit(2000000064.649:673): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 554.479019][T12172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1771'. [ 554.510476][ T9] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 554.690729][ T9] usb 3-1: device descriptor read/64, error -71 [ 555.220692][ T9] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 555.370179][ T9] usb 3-1: device descriptor read/64, error -71 [ 555.487456][ T30] audit: type=1400 audit(2000000067.539:674): avc: denied { shutdown } for pid=12185 comm="syz.3.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 555.511087][ T9] usb usb3-port1: attempt power cycle [ 555.817490][T12194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12194 comm=syz.6.1775 [ 556.287865][ T9] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 556.618255][T12198] fuse: Invalid rootmode [ 556.756307][ T9] usb 3-1: device descriptor read/8, error -71 [ 556.851491][T12203] NILFS (nullb0): couldn't find nilfs on the device [ 557.351440][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.502168][ T9] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 557.510273][ T30] audit: type=1400 audit(2000000069.519:675): avc: denied { remount } for pid=12196 comm="syz.3.1776" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 558.007431][ T9] usb 3-1: device descriptor read/8, error -71 [ 558.142828][ T9] usb usb3-port1: unable to enumerate USB device [ 558.312053][T12222] netlink: 'syz.0.1781': attribute type 30 has an invalid length. [ 558.403519][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 558.433131][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 558.999801][T12249] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 559.411459][T12244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12244 comm=syz.5.1788 [ 559.851254][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1791'. [ 559.951166][ T5835] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 560.130930][ T5835] usb 4-1: Using ep0 maxpacket: 8 [ 560.307623][ T5835] usb 4-1: config 3 has an invalid interface number: 175 but max is 0 [ 560.336017][ T5835] usb 4-1: config 3 has no interface number 0 [ 560.358638][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'. [ 560.371519][ T5835] usb 4-1: config 3 interface 175 has no altsetting 0 [ 560.390924][ T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 560.392537][ T5835] usb 4-1: New USB device found, idVendor=095a, idProduct=3003, bcdDevice=32.bd [ 560.414303][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.442945][ T5835] usb 4-1: Product: syz [ 560.458250][ T5835] usb 4-1: Manufacturer: syz [ 560.466072][ T5835] usb 4-1: SerialNumber: syz [ 560.573087][ T9] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 560.613162][ T9] usb 1-1: config 0 has no interface number 0 [ 560.645293][ T9] usb 1-1: config 0 interface 41 has no altsetting 0 [ 561.015083][ T9] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 561.221944][ T5835] kaweth 4-1:3.175: couldn't find required endpoints [ 561.388724][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.421993][ T5835] usb 4-1: USB disconnect, device number 41 [ 561.451950][ T9] usb 1-1: Product: syz [ 561.476598][ T9] usb 1-1: Manufacturer: syz [ 561.492923][ T9] usb 1-1: SerialNumber: syz [ 561.528346][ T9] usb 1-1: config 0 descriptor?? [ 561.734562][T12291] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 561.766219][T12291] SELinux: security_context_str_to_sid (/dev/usbmon#) failed with errno=-22 [ 562.383024][T12288] [U]  [ 562.435470][ T9] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 562.612971][T12302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12302 comm=syz.5.1804 [ 563.260080][T12306] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 563.895221][T12310] netlink: 'syz.3.1806': attribute type 29 has an invalid length. [ 563.904433][T12310] netlink: 'syz.3.1806': attribute type 29 has an invalid length. [ 563.916654][ T9] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 563.918615][T12310] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1806'. [ 563.961247][T12306] overlayfs: overlapping lowerdir path [ 564.120197][ T8707] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 564.154214][ T9] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 564.175979][ T9] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 564.203532][ T9] usb 1-1: USB disconnect, device number 56 [ 564.280827][ T8707] usb 3-1: Using ep0 maxpacket: 32 [ 564.291543][ T8707] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 564.310210][ T8707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.333030][ T8707] usb 3-1: config 0 descriptor?? [ 564.384877][ T8707] as10x_usb: device has been detected [ 564.443403][ T8707] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 564.735600][ T8707] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 564.747015][T12305] ------------[ cut here ]------------ [ 564.752529][T12305] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 564.752538][T12305] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#1: syz.2.1805/12305 [ 564.768430][T12305] Modules linked in: [ 564.772857][T12305] CPU: 1 UID: 0 PID: 12305 Comm: syz.2.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.784171][T12305] Tainted: [L]=SOFTLOCKUP [ 564.788666][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.799050][T12305] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 564.804918][T12305] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d 16 4c 05 45 85 f6 75 13 48 8d 3d 71 34 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 564.824846][T12305] RSP: 0018:ffffc9000495fa50 EFLAGS: 00010246 [ 564.831487][T12305] RAX: 0000000000000003 RBX: ffff88807b264b30 RCX: 1ffffffff21af8dc [ 564.839459][T12305] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90dae520 [ 564.847792][T12305] RBP: ffffc9000495fbc0 R08: 0000000000000001 R09: 0000000000000000 [ 564.856087][T12305] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.864547][T12305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.872839][T12305] FS: 00007f5dfac426c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 564.882083][T12305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.888638][T12305] CR2: 0000001b333e7ff8 CR3: 00000000574ba000 CR4: 00000000003526f0 [ 564.897113][T12305] Call Trace: [ 564.900747][T12305] [ 564.903653][T12305] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 564.909264][T12305] ? __mutex_lock+0x26d/0x1b10 [ 564.914343][T12305] ? dmx_section_feed_start_filtering+0x56/0x660 [ 564.921192][T12305] ? find_held_lock+0x2b/0x80 [ 564.925840][T12305] ? __pfx___mutex_lock+0x10/0x10 [ 564.931183][T12305] ? __pfx___mutex_lock+0x10/0x10 [ 564.936178][T12305] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 564.942145][T12305] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 564.947759][T12305] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 564.953394][T12305] dmx_section_feed_start_filtering+0x3a8/0x660 [ 564.959610][T12305] dvb_dmxdev_filter_start+0x767/0xdd0 [ 564.965056][T12305] dvb_demux_do_ioctl+0xe64/0x1200 [ 564.970488][T12305] dvb_usercopy+0x167/0x340 [ 564.974970][T12305] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 564.981040][T12305] ? __pfx_dvb_usercopy+0x10/0x10 [ 564.986048][T12305] ? selinux_file_ioctl+0x13b/0x290 [ 564.991568][T12305] ? selinux_file_ioctl+0xb6/0x290 [ 564.996653][T12305] dvb_demux_ioctl+0x29/0x40 [ 565.001555][T12305] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 565.006814][T12305] __x64_sys_ioctl+0x18e/0x210 [ 565.012093][T12305] do_syscall_64+0x10b/0xf80 [ 565.016656][T12305] ? clear_bhb_loop+0x40/0x90 [ 565.022106][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.027977][T12305] RIP: 0033:0x7f5df9d9cdd9 [ 565.032845][T12305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.052942][T12305] RSP: 002b:00007f5dfac42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.061674][T12305] RAX: ffffffffffffffda RBX: 00007f5dfa015fa0 RCX: 00007f5df9d9cdd9 [ 565.069614][T12305] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 565.077918][T12305] RBP: 00007f5df9e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 565.086380][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.094664][T12305] R13: 00007f5dfa016038 R14: 00007f5dfa015fa0 R15: 00007ffe24d5bb78 [ 565.103136][T12305] [ 565.106145][T12305] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 565.113393][T12305] CPU: 1 UID: 0 PID: 12305 Comm: syz.2.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 565.124294][T12305] Tainted: [L]=SOFTLOCKUP [ 565.128584][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.138607][T12305] Call Trace: [ 565.141855][T12305] [ 565.144764][T12305] dump_stack_lvl+0x100/0x190 [ 565.149414][T12305] vpanic+0x552/0x970 [ 565.153370][T12305] ? __pfx_vpanic+0x10/0x10 [ 565.157845][T12305] ? lock_release+0x245/0x310 [ 565.162497][T12305] panic+0xd1/0xe0 [ 565.166194][T12305] ? __pfx_panic+0x10/0x10 [ 565.170579][T12305] check_panic_on_warn.cold+0x19/0x34 [ 565.175919][T12305] ? __mutex_lock+0x94f/0x1b10 [ 565.180652][T12305] __warn.cold+0x191/0x328 [ 565.185037][T12305] __report_bug+0x296/0x3d0 [ 565.189508][T12305] ? __mutex_lock+0x94f/0x1b10 [ 565.194240][T12305] ? __pfx___report_bug+0x10/0x10 [ 565.199235][T12305] ? register_lock_class+0x40/0x560 [ 565.204405][T12305] report_bug_entry+0xe1/0x290 [ 565.209135][T12305] ? __mutex_lock+0x956/0x1b10 [ 565.213870][T12305] handle_bug+0x1cd/0x2a0 [ 565.218172][T12305] exc_invalid_op+0x17/0x50 [ 565.222647][T12305] asm_exc_invalid_op+0x1a/0x20 [ 565.227466][T12305] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 565.232810][T12305] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d 16 4c 05 45 85 f6 75 13 48 8d 3d 71 34 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 565.252393][T12305] RSP: 0018:ffffc9000495fa50 EFLAGS: 00010246 [ 565.258427][T12305] RAX: 0000000000000003 RBX: ffff88807b264b30 RCX: 1ffffffff21af8dc [ 565.266367][T12305] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90dae520 [ 565.274313][T12305] RBP: ffffc9000495fbc0 R08: 0000000000000001 R09: 0000000000000000 [ 565.282253][T12305] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 565.290191][T12305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.298134][T12305] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 565.303743][T12305] ? __mutex_lock+0x26d/0x1b10 [ 565.308479][T12305] ? dmx_section_feed_start_filtering+0x56/0x660 [ 565.314773][T12305] ? find_held_lock+0x2b/0x80 [ 565.319429][T12305] ? __pfx___mutex_lock+0x10/0x10 [ 565.324435][T12305] ? __pfx___mutex_lock+0x10/0x10 [ 565.329436][T12305] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 565.335053][T12305] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 565.340666][T12305] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 565.346102][T12305] dmx_section_feed_start_filtering+0x3a8/0x660 [ 565.352315][T12305] dvb_dmxdev_filter_start+0x767/0xdd0 [ 565.357750][T12305] dvb_demux_do_ioctl+0xe64/0x1200 [ 565.362837][T12305] dvb_usercopy+0x167/0x340 [ 565.367312][T12305] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 565.372830][T12305] ? __pfx_dvb_usercopy+0x10/0x10 [ 565.377829][T12305] ? selinux_file_ioctl+0x13b/0x290 [ 565.383006][T12305] ? selinux_file_ioctl+0xb6/0x290 [ 565.388103][T12305] dvb_demux_ioctl+0x29/0x40 [ 565.392679][T12305] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 565.397949][T12305] __x64_sys_ioctl+0x18e/0x210 [ 565.402690][T12305] do_syscall_64+0x10b/0xf80 [ 565.407268][T12305] ? clear_bhb_loop+0x40/0x90 [ 565.411917][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.417784][T12305] RIP: 0033:0x7f5df9d9cdd9 [ 565.422177][T12305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.441763][T12305] RSP: 002b:00007f5dfac42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.450151][T12305] RAX: ffffffffffffffda RBX: 00007f5dfa015fa0 RCX: 00007f5df9d9cdd9 [ 565.458095][T12305] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 565.466035][T12305] RBP: 00007f5df9e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 565.473978][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.481920][T12305] R13: 00007f5dfa016038 R14: 00007f5dfa015fa0 R15: 00007ffe24d5bb78 [ 565.489867][T12305] [ 565.493135][T12305] Kernel Offset: disabled [ 565.497432][T12305] Rebooting in 86400 seconds..