last executing test programs: 6m31.111209009s ago: executing program 2 (id=1396): r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (async) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x2818405, &(0x7f0000001980)='dax\x00\x00lwayc') (async, rerun: 64) setpgid(0x0, 0x0) (async, rerun: 64) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x146) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005980)={0x10, 0x10, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xc252, 0x0, 0x0, 0x0, 0xff}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m30.911919202s ago: executing program 2 (id=1399): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, r0) 6m29.845260231s ago: executing program 2 (id=1400): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000180)={0x400, r1, 0x80000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 6m27.781870859s ago: executing program 2 (id=1403): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f00000001c0)=@generic={0x0, 0x40, 0xb}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m25.074764582s ago: executing program 2 (id=1413): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x80000, 0x87, 0x5}, 0x18) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x800, 0xe) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r2, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1000, 0x0, 0x0, 0x25dfdbfd}, 0x10}], 0x1}, 0x8810) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000007000000000000"], 0x50) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$tipc(0x1e, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000001c0)={0x10bc, 0x4, 0x1, 0x0, 0x7f}) r7 = syz_io_uring_setup(0x59b3, &(0x7f0000000300)={0x0, 0xf27e, 0x1000, 0x3, 0x394}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000440)=[r4, r3, r6, r5, r3], 0x5) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f00002ba000/0x1000)=nil}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000019180)={0x6, 0x4, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8}, [@exit], {0x95, 0x0, 0x0, 0x500}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000580)='./file0\x00', 0x306202, 0xe0) r11 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r11, &(0x7f0000000400)='algo=zstd dict=dict0 level=1', 0x1c) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={0xffffffffffffffff, r10}, 0xc) ioctl$KVM_NMI(r9, 0xae9a) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) 6m24.779409019s ago: executing program 2 (id=1414): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = io_uring_setup(0x6a15, &(0x7f0000000040)={0x0, 0xdbaa, 0x20, 0x2, 0x240}) io_uring_enter(r1, 0x6ca2, 0x369b, 0x41, &(0x7f0000000140)={[0x7]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x9000000}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6}}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x41}, 0x28) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x5, 0xb0, 0x11, 0x83, 0xbd}) 6m24.590478353s ago: executing program 32 (id=1414): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = io_uring_setup(0x6a15, &(0x7f0000000040)={0x0, 0xdbaa, 0x20, 0x2, 0x240}) io_uring_enter(r1, 0x6ca2, 0x369b, 0x41, &(0x7f0000000140)={[0x7]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@enum={0x3, 0x0, 0x0, 0xf, 0x9000000}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x6}}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x41}, 0x28) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x5, 0xb0, 0x11, 0x83, 0xbd}) 4m36.227891174s ago: executing program 4 (id=1862): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x40000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xb24c22, &(0x7f0000000180)={[{@xino_auto}, {@uuid_off}, {@default_permissions}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FE_READ_UNCORRECTED_BLOCKS(r6, 0x80046f49, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000", 0x17) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r9, 0x0) 4m33.038051184s ago: executing program 4 (id=1877): socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x3818c1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='mountstats\x00') ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x4a0}, {0xffffffffffffffff, 0x4000}, {r0, 0x480}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x505}], 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000011) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r3, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0x4000000002}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) 4m28.322461695s ago: executing program 4 (id=1896): write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) symlinkat(&(0x7f0000000d80)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x31}, 0x18) r1 = socket$inet(0x2, 0x4, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x0, 0x240, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000000), {[{{@arp={@broadcast, @multicast2, 0x1fffffeff, 0xff000000, 0xc, 0x4, {@mac=@multicast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x3e1, 0x7, 0x9, 0x1, 0x9, 0x4, 'batadv_slave_1\x00', 'bridge_slave_1\x00', {}, {}, 0x0, 0x108}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @rand_addr=0x64010101, 0x8, 0x65a6fc760376ea22}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x6, 0x5, 0x1, 0x0, "7ab0c7af32a8f54d0e853373a964e5187de1476d0b62c84d8f35f4739b35be32523cae56d298ab5bfcdc85249986fca510b95341543f6c7e76f984e1b7759ee3"}}}, {{@arp={@multicast1, @remote, 0xffffffff, 0xffffffff, 0x1, 0xe, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0xfff, 0x7f, 0x8, 0x0, 0xe, 'veth1_to_team\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x88}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @mac=@remote, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x5, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r3, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x1019, &(0x7f0000002500)=ANY=[], 0x0) 4m27.871851337s ago: executing program 4 (id=1899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0800000001000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000008000400000000000000000000000000000000000000e63287fe94723690e7dd875c308329f3f8251e31f68533a491ca4f2ac418370e27be470f344fb1e615472c2ad637a0189e23c2bb8ed93904cfa582873d3319f7bff89149d46efda9c8f7955ab8f074073be3861f71f20acb84773ec139a575c5ee346143847948ba420c0c5f5a71bad278"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sigaltstack(&(0x7f0000000200)={0x0, 0x0, 0xfffffca4}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r2, &(0x7f0000000700)) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 4m25.687243286s ago: executing program 4 (id=1905): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4m24.472552009s ago: executing program 4 (id=1909): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0xfff) accept$unix(r1, 0x0, 0x0) shutdown(r1, 0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10006, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m24.16073481s ago: executing program 33 (id=1909): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0xfff) accept$unix(r1, 0x0, 0x0) shutdown(r1, 0x2) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10006, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 48.811449702s ago: executing program 0 (id=2711): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x804) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000003, 0x208, 0x409, 0x8, 0x80, 0x11, 0x4, 0x8000000000000000, 0x2, 0x0, 0x3, 0x2, 0x3, 0xffffffffffffffff], 0x0, 0x194d40}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 47.232457438s ago: executing program 0 (id=2712): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x2, 0x0, &(0x7f0000000540)) r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000100)={0x26, &(0x7f0000000140)=[{0x15, '\x00', @data=0x14e2}]}) r4 = dup3(r2, r1, 0x0) sendfile(r4, r0, 0x0, 0x1000009) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000d7b1adbd000000000000000000"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f00000003c0)=0x8, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r6}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r7, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x50040, &(0x7f0000000500)={0x11, 0xb, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250f0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="1ac0c43cc6a2efd92a097f15567789e9d8edec6abf778e8590be9cf7bf9c16fdca3a8177e3a68b7b57b769bcd7cdc9d5371a762cc295a1bc94530be0069916ebc7673b261452ae29a110063b3ee3facce0762bc0e2240fd773982ff4ec604bb30d2031b6b94d1d47d6d053bcfce46e6b145dd92be37f5b46c4d4fbedb571c752e6b694f9a5155110be5fad0b9569d00cc5c2350cacf2c394fadcd802d0dbc21cec0cc5327fce6f2aae856a69f0d6a8c543eba7157135629fcf14db7df60d76c12d6e53a244b56842198c7bfdf2203a84c4fef94258f4ed5ebc9a07d3687573090000009d11fe4d8308279bb1f5ae"], 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x400e0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x8000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_gettime(0x0, &(0x7f0000000240)) 46.135234655s ago: executing program 0 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904"], 0x0) r0 = syz_usb_connect$uac2(0x1, 0xaa, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x9, 0x0, 0xd7, {0x8, 0xb, 0x1, 0x0, 0x1, 0xff, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3ff, 0x8, 0x19, 0x5}, [@input_terminal={0x10, 0x24, 0x2, 0x4, 0x205, 0x2, 0x6, 0x7, 0x4, 0x6, 0x80, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x4, 0x3, 0x1, 0x8, 0x5, 0x2b}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x0, 0x3, {0x8, 0x25, 0x1, 0x2, 0x14, 0x8, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x58, 0x0, 0x9, 0xd8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xfd, 0x4, {0x8, 0x25, 0x1, 0x2, 0x0, 0xff, 0x9}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x6, 0x7, 0x49, 0x20, 0x80}, 0x1ef, &(0x7f0000000180)={0x5, 0xf, 0x1ef, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0x8, 0x7, 0x9}, @generic={0xca, 0x10, 0x3, "886dba46fb9a23354f5f2b7b9c499e4601e55f205f53228c758fac13c390425db88e50543be3bbcedc84fc13f2e9ae8f1f5056d714d13ece0f09d55499f6f6c986f0c9e11812f3a8a6b09fc4fbe5dcb01bc0eae19a342edd40edaac8dbc377b0c443f4291f3bbbd4a289c7e19f71a9d9d6ab9d9df8a24599c8522987a257520bf63e184423f08f546dacc432045dd28676321cff1b039f59d95a869fd8e7c8dcde307d42cdd361d400b748c26cfdd166c64a576bb611fa8b6741bbadffe8457c589bc253886e45"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x5, 0x5aed}, @ss_container_id={0x14, 0x10, 0x4, 0xb2, "aa2cd72d780ee747e425e9a8f9f3e109"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x6, 0xb, 0x3}, @generic={0xf4, 0x10, 0xb, "79b1da56b6ccf109ac1f315d7b11075a17430228d3657fb14568a982f8fb8bda9d5838713d608d297ec2cacef5392e74362607c92182b0c34c0f27214b1ea8f5c33d185707e4b79c67a83fd55987cb4d138bc66715cf6379e4474ed05ccd9d9729d0806a12dbd3ec4c7381be83483409e34d2ee5221d1977014fd0d22bdd0012fd6fef7ae8957e2e51f73c7b7639df61e6866fbc2c492f94e8c0581afa418afb36d31ff60ff7d447ca47ed72e796b7dd93e78cb17864d6550cdd2bfa8576aeff19d37a112a963bde3b4c6f5482f9660fdf3887f36a58a5ac1e74be6e3aeecf6a9446c40ea8ac1dc46496cd465bf95402e8"}]}, 0x2, [{0x5c, &(0x7f0000000380)=@string={0x5c, 0x3, "8584a59d0b2ade4def0e6d80ae6367fb5d13f81e324e28ba88deba2cf1427620a85fd8e75ed83058dc61ca792ef36823477b6590f139a742df6481f4b4fe2c85d3e4b2ec7d10ca8f5d64c4955283666b20f6c4326f47809f4034"}}, {0x15, &(0x7f0000000400)=@string={0x15, 0x3, "1b97261455f5f893103c439a299888d959ff7e"}}]}) syz_usb_ep_write(r0, 0x8d, 0xd4, &(0x7f0000000480)="a6d40408d19d723d3d62d7953bdcb093ecf2e108faca92c13ab16c600cdd53ea1ab856ac0c2ef394eb659ab2f4b404704e505b9ef3086a945ef6139c8724c389fda798664adf3d095f3296d7250c4b3facbfb5d6365ccc3efa2b16891507d9745919ea115e17bd6cc9b122565a3a0f9780496068290c7269cc2a254ce95bd2d502710e90f1991dff5920cfca3e1cf871a7c441bdcd4d6e4363166bf832fe122fbbc512006836b995fe15e50c6528225d88ed97204c7f8c51f6451f147ec50ac36d0ffd862a9ec80ee359025250feb1296f10d33c") close(0xffffffffffffffff) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='8086 10d3 ffffffff ffffffff 0 0 8', 0x21) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb4, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x8c, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7b}, 0x2, 0x9, @broadcast, 0x8, 0x3ff, 0x6}}, @dsss={0x3, 0x1, 0x38}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @link_id={0x65, 0x12}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @fast_bss_trans={0x37, 0x52, {0x9, 0x0, "c6f8b40d548515b94900ee0c976b95b8", "01b6e09fe5ca23c3a6f13d31fde840357502107be7e5b77d432c9a3dc91f036b", "c6052e9e3c9d3ac30a9b97406129654a99c54946be45bf313e8c8c4fb5d0e338"}}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) 42.955674675s ago: executing program 0 (id=2727): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x42, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./nfsd_mnt\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd_mnt/threads\x00', 0x2000, 0x4) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@sha1={0x1, "c7ca6602825f86c52d8786a0cfcc5b322ca2513c"}, 0x15, 0x0) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 42.744787838s ago: executing program 0 (id=2730): bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x3) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000b80)=""/102384, 0x18ff0) pipe2(&(0x7f00000000c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000780)={0x6, 0x1000000, [{0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x6, 0xffffffff}, {0x6, 0x4, 0x1000000, 0x8001, 0x29, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0x5, 0x5, 0xffff}, {0x4, 0xe5f, 0x2, 0x30e, 0x8001, 0x6, 0x80000001}, {0xa, 0x2bb, 0x2, 0xd, 0x3, 0x7ff, 0x400}, {0x2, 0x44, 0x4, 0x6, 0x4, 0x4, 0x3}]}) socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000380)='\r\x046\xf5D\x00\x00\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x21) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x81) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000fcde8b66a280d7e368ffef80e839a4aa681089f0ac895dba16f1eaadc6b00954432b40935101afae74128a809683606084cf262638f3a8885584c5c1becf3b5959aef5bf55cc139cc52c5af79063bfb6d41ba0d8715c6c3979f928cd6212845f7a4b34e7dd9416d6805c4bdb569457a6bb0df63a7e97116014a4ce82c5c79cb69a8e4bd6f5f62df1a994995ee4715c614243a44d6799ca73eea5acfcc34039fed88f3142054598281f431828462c23c9745956ca1c9c86f9505080b2f9"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, 0x4}, 0x80) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) 41.006331831s ago: executing program 0 (id=2734): socket$nl_xfrm(0x10, 0x3, 0x6) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x4, 0x180}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000"], 0x5c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) socket(0x40000000015, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000040)={0x18, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) unshare(0xe040400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r4, 0x0, 0x7}, 0x38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) shmctl$SHM_LOCK(0x0, 0xb) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f02a, 0x17}) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x1810004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r7, 0x0, 0x0, 0x40, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) 40.612751135s ago: executing program 34 (id=2734): socket$nl_xfrm(0x10, 0x3, 0x6) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x4, 0x180}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000"], 0x5c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) socket(0x40000000015, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000040)={0x18, r2}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) unshare(0xe040400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, r4, 0x0, 0x7}, 0x38) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) shmctl$SHM_LOCK(0x0, 0xb) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f02a, 0x17}) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x1810004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r7, 0x0, 0x0, 0x40, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) 12.167848284s ago: executing program 7 (id=2827): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) inotify_init() socket(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001082dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="d0510013000cbe70be7bbbda", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0x1) socket(0x2, 0x2, 0x0) 12.022665751s ago: executing program 7 (id=2829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x9c, 0x30, 0xb, 0x5, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0xffffffffffffffff}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"1b000500", 0x101, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "001c0014", ["a700000100000800", "e4fe4000100008000800", "d83fc00900000000000000c4", "0000000000000000001000"]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) shutdown(r0, 0x1) listen(r0, 0x5) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write$binfmt_aout(r4, 0x0, 0x620) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, 0x0, 0x1f00) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) getrlimit(0x8, &(0x7f0000000280)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 11.829114305s ago: executing program 7 (id=2830): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100039fac05406e6e7418dffe0301090212000103015006090431050008065040"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) dup3(r1, r0, 0x80000) landlock_create_ruleset(&(0x7f0000000040)={0x4, 0x7, 0x2}, 0x30, 0x0) syz_clone3(&(0x7f0000000180)={0x23900200, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) 11.607914285s ago: executing program 3 (id=2832): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x25dddbff}, 0x14}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x11, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10003, 0x4, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4004010) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0xc0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xf2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) 10.507836624s ago: executing program 3 (id=2835): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x400, @loopback, 0x8001}}, [0x4, 0x0, 0x1ff, 0x2, 0x3, 0x8, 0xf4c, 0x2f1b, 0x9, 0x6, 0x2, 0x8, 0x2, 0x8, 0x300000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r1, 0x9f}, 0x8) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0x0}) r3 = getpgrp(0xffffffffffffffff) kcmp(r2, r3, 0x5, r0, r0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@rand_addr, 0x0}, &(0x7f0000000280)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x100, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x8, 0x2a4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80c0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x10) ioctl$XFS_IOC_GETPARENTS(r5, 0xc028583e, &(0x7f0000000540)={{[0x7, 0x3, 0x1, 0x2000400]}, 0x0, 0x2, 0x9, 0x0, &(0x7f0000000480)=[{{@_ha_fsid={[0x4, 0x1]}, {0xa, 0x0, 0x800, 0x1}}, 0xfff, 0x0, './cgroup.cpu/syz1\x00'}, {{@align, {0x10, 0x6, 0xffffffd3, 0x3}}, 0x100, 0x0, '\x00'}, {{@_ha_fsid={[0xd9, 0x800]}, {0xfff2, 0x2, 0xcfb, 0x5}}, 0xd, 0x0, '\x00'}, {{@align=0x3, {0x71, 0x8, 0x8, 0x7fff}}, 0x2, 0x0, '\x00'}]}) prlimit64(r2, 0xf, &(0x7f0000000580)={0x80000000, 0x80}, &(0x7f00000005c0)) read$msr(r0, &(0x7f0000000600)=""/9, 0x9) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000640), 0x4) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000680)=""/158, &(0x7f0000000740)=0x9e) r6 = io_uring_setup(0xa33, &(0x7f0000000780)={0x0, 0x9165, 0x20, 0x2, 0x16f}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000800)=[0x345bd12e, 0x4], 0x2) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000880)={{r7, r8/1000+60000}, {0x0, 0xea60}}, &(0x7f00000008c0)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000900), 0x0, 0x42000) ioctl$BLKSSZGET(r9, 0x1268, &(0x7f0000000940)) syz_clone(0x202000, &(0x7f0000000980)="5c73fb57acf0fd201d3a0ac8375f10d89140125c08b0ce8fea108a3f9e191921139ad136a110e0bcc46a8c43a9b79a045a81315805b03b6204fcdb330decb953db6ca86c712fd2ecb56f1780900a5e82e2b6e7017f7b96c7ced6c4905cd4b8cc00da5af7f491bd330baa2e4927821fc6a4595eb8805c1f0ca328084159cd1ddf982f7ce4e937215bcdf545bd9d88b9494fa83f5d7df1e0ba41969afed18da8a6d083ecc3e0b949b94448e56eb8ea518cd06ad15adef425d01ddbaff36a37c94652a5d44d0a43dca8a47011c486dc147d0b6f719f10cf3a6a1f1247fda1d1b4bcc46e1fc43e74dc188573d114d6d0e8d06b436add71a270aa5461f20f746f81", 0xff, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)="6f11d6a6c50968619426e5e36fa9cab5dc249a7001db27c977b580b1514864786e89b90368ef654b9c42b904ce749e5a8579c878b3f217d8e25adc4009fdc19b38b290c12117356479d7a9014bf9639d80a259f3fb916a86c8a8696f2d9a8b4edc7934787e70d675d57bb3a7861562617464f4a1753d312a3ea0dbbe25a5f759ab5e60cc7eb499ffc847dc9555e663376332726ee6ed7d4ecb8584c3f2ba6fe3a6374f1627cc9186f1fb6dad590a379f0ea6606f9ff9f0ab0f2ddc374b8b43238015338fb0120dd2565afd178e80") ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000c40)={0x0, 0x8aa3, 0x7, '\x00', &(0x7f0000000c00)=0x8}) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x2100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r10, 0x40085112, &(0x7f0000000cc0)=@n={0x1, 0x8, @generic=0x6, 0x4}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000d00)={{0xee}, 0x0, 0x3, 0x49, {0x5, 0x5d}, 0x5, 0x8}) lseek(r10, 0x3c7b, 0x1) ioctl$XFS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000d80)) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, &(0x7f0000000dc0)) 10.187962167s ago: executing program 3 (id=2841): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001d00010429bd7000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0x100, 0xd, 0x9, 0x8, 0x1, 0xff, 0x6, 0x5, 0x6, 0xfb, 0x67, 0x4}, {0xf9d1, 0x4000, 0x7, 0x7, 0x6, 0xfe, 0x9, 0x69, 0xf, 0x44, 0xfe, 0x4, 0x1ff}, {0x5, 0x9, 0x0, 0x4, 0x0, 0x4, 0x1, 0x2, 0x3, 0x7f, 0x6, 0x7, 0x6}], 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 10.08306294s ago: executing program 6 (id=2843): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6a909d806b168f32a13fe37d58128bbad0099cebdc25f5ab60c1e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x400000010, 0x9]}}) r0 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r1, 0x0, 0x40010082) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x15, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x1, 0x2, 0xfffffffe}}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000861c09b1b00b7e9159f1b297bb060004400e1f000005000700bf188d61c062739a79e09f98892da534726d58d47629503669dc306e0a908617cbe26f1ff1e64e18dc67c61e094e15a639d24c8b3342c62281fdecb098cd8c6048ce20f9a0879570f91c1435076ca0b5b981c33f91b50e45ff921703e0b7a8fca457d8ea7313cf306c0b006412083a6825dfe6"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 9.98295251s ago: executing program 6 (id=2844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d4}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1a70}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) socket$inet_smc(0x2b, 0x1, 0x0) 8.753058142s ago: executing program 6 (id=2845): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TUNGETVNETLE(r4, 0x800454dd, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_clone(0x18108800, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000200), &(0x7f00000003c0)=r6}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001d00010429bd7000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0x100, 0xd, 0x9, 0x8, 0x1, 0xff, 0x6, 0x5, 0x6, 0xfb, 0x67, 0x4}, {0xf9d1, 0x4000, 0x7, 0x7, 0x6, 0xfe, 0x9, 0x69, 0xf, 0x44, 0xfe, 0x4, 0x1ff}, {0x5, 0x9, 0x0, 0x4, 0x0, 0x4, 0x1, 0x2, 0x3, 0x7f, 0x6, 0x7, 0x6}], 0x5}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) 8.620981084s ago: executing program 7 (id=2846): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="c6831ed8838056e08cc5b459bfef3e6fed75d2901ee87b68bbb4a231d4871bc6e77e", 0x22}], 0x1, 0x0, 0x0, 0x20048851}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r2 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000200)='./file0\x00', 0x2, 0x200) pipe(&(0x7f00000003c0)) io_setup(0x3fb, &(0x7f0000000500)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x280000000000, &(0x7f0000000180)="4f9745fe9369804ff9c29a370b0394c216470e9532c1fdb611963471d34fd024463837a7ecc7b6d34ecabc3607bfdb888cb46b8f127915c22396ec5cc8e187da2be431269042152a18ab2ab8c602a0aae04f57f9897e7ae66197276f9eebf48091655f73233c00a6d85c17f0febeb7c8603b22a195f627c204ebeff6da14d90ceb9393d332f47324a91450bf461c89e441709519164b3d387c1c9f720c34cbf2770f9d838c27b1232fa51cb9b0a3d20f74361df9ed50aa519a07678c299d5fa4259a47ec944e4db826cc068b8a") ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b366") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, 0x0, 0x20000001) 7.629935583s ago: executing program 7 (id=2847): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1002089}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0xcc8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3f}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000300)='R', 0x1}], 0x1}}], 0x2, 0x40088d4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x8, 0xe3bc}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_clone(0x68000000, &(0x7f00000011c0)="977721b3a02de6628661a5a65505a364f41a87c23915351c37e513b74afb0420ef0dfdfa6b923e19de76d5b6391b19f0107b280cc08c19169519ddc22943436f29d9306fb1b53a68336c750c1553409248b3bf47b9b5e50c32594bfd5ad0db6a72b0a184530e143399beb0405cf55123c54ea044fe7f34d9931a1ee7617d4540b74438717ff5659678a25b95d4f9f4117d", 0x91, &(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001300)="a7a999a6ba6433d5df685b27cb00e0806e69a8a7950d8d3ff927d98fa7a1a21af7d5e1bc628045e5cdb3d12fe1791ccf013773b88ca4de7424591535aef56bcf4d473737969438f5a2266d09d241cac5e0c013b547e86927734981ce9ca9cd9b1d2ffb7660ebf1c60eb7cfb51e819fb7d5b32459ab8e2877870417343bd1407d5727c15715380deff9bf24df862f4b29c7e5e8f436442f6235577171e9a0b177efce580d8f1bb0e3d17a6bf59cd6910107a23dbaed208e0580306b0262809762c0f13424cf30d53cc77562172ad7966c5364087c8c25406ac35ebbe80f21f8ee017aae5611ad02e4495d23b105d9") writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000001180)={0x38, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x8, 0x9, 0x74, 0x8}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0xffe0}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xf}}]}}]}, 0x54}}, 0x20004804) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x116c, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4}) 5.019983715s ago: executing program 6 (id=2849): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r4}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x30) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x80000034) close(r7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000e40)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}, @local, {[@routing={0x33, 0x0, 0x1, 0x2}]}}}}}, 0x0) 4.978608545s ago: executing program 7 (id=2850): syz_usb_connect(0x6, 0xffffffffffffffc2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27}, 0x94) write(0xffffffffffffffff, &(0x7f0000000100)='10', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000713000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000712000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000269000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0xfffffffd, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x8) write(r5, &(0x7f0000000140), 0xfffffe3e) mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x4, 0x2020110, r5, 0x0) write(r4, &(0x7f0000000200)='dummy_hcd.0', 0xb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='dummy_hcd.0', 0xb) 4.612216245s ago: executing program 3 (id=2851): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0x7}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x2, 0x3, 0x101, {0x7, 0x2, 0x4, 0xf, 0x1, 0x5}, {0x1, 0x0, 0x0, 0x8001, 0x6, 0xff}, 0x0, 0x4, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001480)=[{&(0x7f0000001640)="65ee9d78e58430c059aa311705af62dd0b01cddf4c1d2c72b2642463ae8fa7a46b4aacc92debb35f06bb778d7319ffd714ef978672bdfbd834fcbdecfa8e97467976b561ee1e73", 0x47}, {&(0x7f00000001c0)="9c58b6a378ceb468e46e9d621f47e7e1a8115f715f8029e2e7ff671ba982775b2faea14ebcd71caefb54940ed661cd0ab478aa392ef4b24d4b49b68d36ea90e2c1502aba79ed5eeb974f8d5350473b90952a70736c03274097b4bc8b8273c40ff2c095575c98f4a437a1536721d193679f500e82502b6e07c5202dda029519adfd2c8d6d7be295c3d0acb982f823836517682c1ef02005d40f7b47324bdc4af596137fc3338f89", 0xa7}, {&(0x7f0000000280)="580bb9a2142840a57504fe04f1ff367c841c05e61c972cb6c87e7e8698c5b124859fb751480c220026b906fd4fb377caeb", 0x31}, {&(0x7f00000016c0)="c01545f5065fd99592b70aeaca8286e020e73b37c04432803e326cef84987e4d41b0c19eb6e721497f21808ab806469cb31cbc0738ee906ca5b87ec58f3e01d9bd78b1107fabcc731e75280ff7c7df8d52c42e47b02d69b4ad5eeedc961310dc0f1c31d9a6192ba7b074e9e836474a43100f7d1493a5819ce1", 0xfe6e}, {&(0x7f0000000340)="743b5fd2b31b865c396bf8b0052cafa1403d14dd24c5a0f62f3acc35f4", 0x1d}, {&(0x7f0000000380)="ff806294520f29ea122bca80e7f889feeba5cdcecd1e02cb952e397dfc8a453ea700f30dd31dad9f3fbc684d481b769af277d68fff38a28ce31aa5470d22cd71024043100f679bfede6a2e5f7b02752808254658ee3904f8f6a6da9e65881c11cc9702890690994ea570e7685e", 0x6d}, {&(0x7f0000000400)="22261d3865166a67fdeb01457ee07436b878ba8236f6cdacb87a", 0x1a}, {&(0x7f0000000440)="f277bdfac960febd3ce2ee2fb42f86381c99", 0x12}, {&(0x7f0000000480)="c79f46e434c2b79acb9b6e7397cae3bbb1b43de2db60a0265038bdcb3e56fbaa27e648ca51a260b0047ea344e5619992ec44d8cd082c673d5fa41e66d5d706a9ca0eeaac6833b80b733604c63aff7f938246b35c2ce6cd98eb2292ed2c16bde9c08c3954734145eb12e8e4efdeef7cd5e22f9f0787d423411f7dce3242408b228f5eb18e6f2c860e1c976994dad291f7472f9e69471e13acc08f8ee0d0332675eb9a9ef2f937e440b399ec44c421d92412d778aeb8a9802e959d664023a2030abb5f05ec669165728970613534d694c4bb85ee1df8c66c9591ec3d6d149b4c6e03682efc29e92a317b8a000c11cd42711bceab779b42b1b67fb91b496ffcd900af7d96e9f3ab6cae3ac84ce9401e04c63a0fab69e55a7bbe981b4fe53d82e17e3571c983d8e1bf79bbe3efc7b508d9818b47cd830212e7933142b1103469fa18df2df59a6cbf148987dfc59ef18dde4d467d2ba7b4a022487819ee828cca3e806d40be656dab929a0b0a97bbfc23de9d761250679c246eaf9fbf47d3cb74038db1f24cd1e12eee4ee8d0f1b71a7887d6659f6e2ea302d107abfe63cbb14e0ef0c9fb4a24c6808a0b5cc5bb3e8210703a53105f3fe92872b076a72347b2c3a13bb964e6a198cbd54baf7d95f03f0f47d1d9887e08b8fcc09ef085fba773dcd687d28ea29cbd3882d4e3d908b408061322fe03a1d0880d04d07988adcd7d140d86812a36467579addf16fabb907277221f599eb69ae1ea51474d9f5068fa0cb6074f40a045b78aca6227f6b4a2ff60a9ffb79a8733ead6cdc1bf3ac363fe6e819304c23e9a30ba8daeaf443528cd2f325a179c6ad8889b734310bffb5e03ff76a5ec8c625f696b3bede4e78c864c6f86ef34ab239ac50dd2e2d2c9d5d611f7ce0583bedda20afdd4732d43042c346507efd28abf54fe496c4ef30737c78f212252e5504cd6625b0e453eafc49ecb31e291367d58770a9319752defb2e7553ff930c78c64d3802e1485995a9601372e99846b596c6d76bb0cf5c87dafd830cb31d7308a16ed353e0bdd355919d57a04d31eb670f7eabad0e4426372bad8e72e7cfebd9cf59b086c4db76a65cd71ee57391f5df9d8eef0f6a8437c7d3bde337582dd7f5f8a1d2c465cdab7aed5853e8fd1718c3d5e980b24205b4f6464c83e4ccfad67e596b11c1507484bbf46d53041df9c62af39dadde1710c68ca8ea525a62fe1d7ad855d83f44aae0b5ca93c7d08c5b0b597f647b9e529d40934ccca092eeebb60fd2efb7b85878ec6c1918bdeea79594d5042dfb4f19006b6de5338952e7ee61dc8242b1312d2f32db8a528556e6e68cf10f8007785a4875e2d3150680ab14fd2f5e2c5229d2e2580c5abaf0a33dc6f4317f401f7efddb445e02d62763abb4b76b72a4d9c640af5c5b935c950b8a196769eb9b9ef0646b6db9925cb2388f59d1a0095bd6b44db41081fb13ce85868cf0f1ddbdec37a1dc45e8dac7f359092f284439b71bac54257c0126d7aed7b465b65fd674219ece54c60b25648611516a3002fda1bd18ef9043557196ccf516ecdb009b51fbf20e581d1f98dc4ea3ec761c798f5af548ac18707235b001d47c6897f8e476648d53c974e5cc4a449341015f055dcadd2844750cabdd6cc2ab32da556e83118d2494646c8892590f9607e7d1b8ceb729a42a03f4aeb072167c889958288a0acc78756e2b32917a928cb135af5326f626bb372896eeab37ec0eef9e6faf58fa8d3f58000ee559bbda7d839602e20b9fefecc620bf8490d62c87d2a8dd5360c299608b2fefcfd81c5eb730a86e7c3741c14fe4b8465a037f0fc05192c1a7278a05184ba0930ba06067ce2882f5c73f05c0cd800b61ef58ee3adcf15fe4cf1b1122cc6ba0ad56fea9d451e5276e67ceb9c8124c91ba67a87d04d3533cd14f71a94ebb6d05d77ef2f009a4b502b69a5a4bd8c0dd74fe69e6a7b1b235e255b9f87e6a6fccd3e0442028e769f2446e80aab74ada4b0f44523e103331aa59d524feee8d2f2e096b52f851518f960958aec9a4d2eda9192060e5f56d1d8fde02c5566c8540b4f080ad8912cc797a9614308e524a11135623f5d6595b1ed7cc9f2eb7a294795877cbd3bb5bdacaeaa5ae429f10b2d5b8346c180e17aa8203287b070006eef8ed319ea4c82a39146634755f962203b69fbe0b6a226d63359dbda96dfc3eca1b885aab196f19ffaae55eb21fd389b3d7faa3acfdc6a10395951cc475075e84bea8c45974c57041e691a8bb5763e4d7637bc80c40a383b56e6b5c915a035dba3c8daa5b4cb45ab5843d24dcea9b585d9c7f7d87c282c1759031b5f4845836738a9d136dd921ea00cae16e269f71041abe8548d5072bdf009bcfb8a44504dc56093f111a69c6c42184abea5cc2d6abf76cbf715edce9b546787c6109e3f0c596e135b638b93d34994983ac4782205bb531593562c66d9ae748e2029f08b6e2dfadea883be0402aec9c2026d1ecf994cad8ee652399407df70d95300431542c35474a24bcfe610dada269e4e139ce29ab18fce1e05f16de96b1bdce5cff6a62aa7924caf09ce4b4ea147b4d10c05412f9f1441f3956514b18ef49450e1b0a50c90bd8098906a9912e972b97fed014f73b5aef6858ea4af1f8148f6efc2c1a0d5552935b97d45d023ae606d9d8c8abc4ad9ef4c3f45ecbc42b1726fecbf4649070a94d02893822ea8f9e23377d339a19040385fef2b6b76cb6f21ac62d31a093d0765f329fc3b10020f5c33e2062feccee92aae978b2e6cba774c17d29de7c2557546286e051dcf36a0b7b330b542fd986746634102f60fee6df2be9564ff08abb7215398992ff44f4d98d409339bff1cd2aad2eea79f0735c96f5f55bc0db76b3e8d259b81bfa91fd9d06fdeedde63709de507a85a2f3de1b3d706caa47a6537a60098d9f7961e3581147c1fedb51b483bddf48b0c6e63fd3b1d10a6bd862e88c42690ff2e4a22c05f384e7979d2bbd2671303411871e441321cfa6af0ed6f3e0289c7e0d110474066e5904ce925e1db3f5109ec5ca31b037d8a3b037c4f765d035e99fed6368bb7f0065e90eaf8e18687b4cfa004fe9367014bae7ac74822ed7bcd7df73c827095358aad61d912687f75c4e5b734357666e9c52549823c0a9096c3cf6363d1d9c5fd4999e57b536c9b1d6d1fa49631352839bb17fb7639aa3541387c40d420971c9c83d5278c7540b3940caea40a561ffe0c4923185980615fb0c3bb798a13e1208087152b8227cc2d3736a2136a1c1410a7a0e00d1ef938d184f849933c2d78d17aee9c7feda935b84c3956c43fd04492c3a13e6cab5ce31526e460b28f0e1d2dbf3e8b2e7556d2dc17ab78ca93362a929ab338928fbb960f470a5fd328294cbf67d16a0d06d38720ced0a7cdd13efab25b42ca5f428f4f896e8b0112baa7f1bd4a325b4709be7e157245522e64eae71aab85563f418f047143074d5f0a9d107ddabacb9b7b17bcd79b71520c9beba2f2de2b79702379e8bea8ab7e63fd055925c65662b1d33e86e47fe303154f20148a376c36592bc45b7730ee95b327c4d92e0a6d33eb3517c9ea6ea128a7ac4bec063d49e6a94296b348198736abdf1a582e5a402b2948454f4a8a5f5b47a7f7cd586c9759b212457d42745fa4a7303953b5c85ad0954f1b929f17e73a4b894c1ce5c43883007ff554edd9a0d2eff3341f922b98ab7208aa79b5bff8d308529744e69c1e94473c2dc211693d47f98a3c56036209912570f22c34f54eb3ba02650a00976e9b0e886b0a2e2066aa9e63ef747bc7d862b8145dd78a6662170e811ea52ddb5bd818ce3847433c0244817986ab4752fafecf12fd626c85464966d1efde4399d425bb88eb55be606351241de32c08d76e77639505552710b298da071908d7b00259de01499c894318e2d94bdbd7049196fd20510c4be22bff8e9ab1ba2cdb7ab9e7fb33570444b8ec98652a1ce02190ebaabfbcaa15290dff3f6ae1568042f48089ae6552d5e60e59c2bf1881bccba2057cd4067fe19ab093043ad965628d71df5647cff951d3d793280e6c2068b9699a5f1076c0a9e9f98844dc4513332cdc4eb004f2690a29797b715d1c33b7c46db14a176e085afa470c50b1169e4dfda34317af1fa8c3b02d3fe2efe87b3785ee33ed89b7bd245668772bea6ea881381d06450d15f872fe6fc715a71d9f4b646b66894e6fa1145fefb5cdd7b7a31946fb8b8c8e8ba90da976e51a728f1eaf461403e22b8e100c248f083022621796884aa2cdbaf3e48ec4b311c55381f9d653090b49639d805f0ece954746c433f68389e7d53faf567e8eea795f9937c138079646546312ef2fa0b50af83450cd0ebe4d0a5bce39a469bed48b633d6f3b7c479856325cedec3755c9116f12df2d0cf437d95fa89961f6118845472bffb2946dfaa4cb8b5e98e4c075003bd4595927a6024f43a2a62909c3702f3424f79e428e6c0877f84942b49488d5c21955e98c245cc7645d5ceb4bce59ecb480eb6a53155774d966cbb147db98678b6b3c0461fbbe71346d7f0cabfdf73a671f1f8e3bacd0c8784eb78fad32f642cf673e6186e783ffaec67b32b37e9c36af57140da67c508cb1fd80b7dd03f82a9f1cd79a1e46b4b0126a97993e2c8b39a69412d7935e60ad5be217cb6ff426ca2046712726b2aee224189be4c39b111317c0cd707b487d88b7e83c12c203d533df31891604d1dcbb02dd4e68ad9004062e15177dd5e62cc56df1d38ecc7a716d666a5678122c49f23433a589757a6dacebbaeeb7319d8a35f9b0b5e444221016dff8e62c8e0e26e2a0fee363dd9cac0e6566f13a7bb891ad0fff4cbc5216c2af9a157b77e0360ef5b6dd4b1f28c2ee4b95db9a11b52f2ad89c6add3d86fb625e278ee54ef7c4f5adbba8601c851f6ec076f78ca4bdca961e82aa2e28f5a5863b16ac3252ba17fb81cc6bb8c1b927ad689feb9bf626f499ce171ccfd62cfb8bece7c5f5610b4abf673cd0a544670b42da1a88970f1f0c79a239ca28bbf0a6a4b723153c940fb064a6ba70da89c9debc3c723de6bd8c9218383094bab043b250dfeace63e6b676d30a1642914abb39e8efa56e4f385c19d5bee790ee5a8d3d983429912cad052088fa7f61d562527f8c36c0e8632dcb1b389355d2b305984410b4f2afeee43abb846074a90633732e9b70af17ba1e3324557b45b2ee120493a7a442b63300f9c8c2ed7b48a4b67b27a225ec0a50f7bf798c4151a3c98374f2d45d5e7408a606ed08898135ccd34e0e41a98926417abbf169c1391a4145dcfb1faa95d051b34abf1ad9c029d337eb66d4ba600d4b74e1261f727a16ad6c5642fd6f81f5d5281a82bbfd2c73081aa586e7406cd330497762be98cd0782ed1f0073cd46568cf80bde7eae0fb8d7d3b8e7e10bd643a37740df79dcf4710088bcc0208ba4b09e6ca40f92c7feacc66d2edfe9ff36ffdc09620603840797fa6f4db463880c7d086d7f10c9e8297e2a2d8718763ec93b69c00c65cde3dd962c4457794aac7d310f8adf7afd5cacf1b677a0aa572775c01f692db7443c48b1bbc93749627aa1382dbff010e05758941a9ca2089ad6b95a3309e6268d30de4fd77030ec94089043826323096bc174f72d3ffde29ec0184d2b394490220239361a10f65f2521a27053cf88e2d309bf1d7d1ee189098510870acc6cdc6c29d90de6264eae166fcfdb852baaef1cd650c636d52f448e924a1b068a57445b576809b08e1607e40fce5221270e6d107a402e24070c8ec0eac5d3fa4ac3a1fc01583d", 0x1000}], 0x9, &(0x7f0000001540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @dev={0xac, 0x14, 0x14, 0x40}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x10}}], 0x68}, 0x400c880) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000100)='`', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='pagemap\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) 4.131700835s ago: executing program 1 (id=2852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002000010028bd7000fbdbdf250a1b8000080000031700000014000200fc00000000000000000000000000000014"], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048800) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/213, 0xd5}, {&(0x7f0000000300)=""/2, 0x2}, {&(0x7f0000000380)=""/35, 0x23}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40002042) recvmmsg$unix(r4, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000005c0)="d93902", 0x3}], 0x1}}], 0x1, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0x28, 0x18, 0x1, 0x60bd2a, 0x25dfdc00, {0xa, 0x0, 0xe0}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x20040844) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 3.864033552s ago: executing program 5 (id=2853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) (async, rerun: 64) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004240)=[{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000140)="22b83d2146c1a98d8a50224d4ed92b8da50df049c46e4ceead13774b7c32ad4456f7ca0e05e861d211ac90382823d00500365e53cbec4886b33f446ad92f2d0028c522ac019ac61feafaf4d6089c9d320a4abe228b18a890cfc5eaa4ff1e1ee3d04ab8715a0b4d8cf774dfe55aa428a93bf7e5a1", 0x74}, {&(0x7f00000001c0)="06771c2ab1d3f7e848a80ac911cfdf92738721c9fe31f3ae048a7068d82e713b7fa5c18b5419cae0b8feac465863c138ea45debd3f82c6bb6b62c16626b6e7e9f01bab44631f0a46ab5c4b703f65efd3759c181c5f37f9925def7c393f6d13562db7b5ed77884da613fec98187b7d00e99097eb265758d1ae9ae65d9910258c451a178b6149c015e7c979a474feb1cf6f81156385ff0698b7e55f6be6a6026fe588d23f0d577d7843c4db00dd390e712c6ec2ca0edd1037809ed2ef7058366882a7587c997f4193723afe0faf7c1ff13aae45d98bdb3dfd6960381efaeb3a8e15b6a413f81da8e107a4dec01901fadf32087a4c94a56dc04fbcb178549f24c18bdc0ae3ea2e8e7146fb9ec816e8389a7fe11e723cbb1f30d82d9ccd279e65d83b7f6eeee26538c9b114b098cef6698d26d26eecf3cf54b0889e68ba62f50eed2518c9da7db102ac5851d4539d1cdf0906ab6c767f0fe525e29cf95b38bf7df49765a04915692ff7edb254cf10a18c469526d1dc28534e16e20b6b29f76f181490a824d608279add93bbbb2f1982975934cbde4f46b1af82b5227462ca240bd79a8a0f426bde987827c0e645f5e1c292aa7df58cb2d0364aae7040f49b6aa82dd7575fa0429c8c5002d2ae484f08404bb051f5900476b519ce93b47b1b59aa3813ea673c5bdc79754f94f41a2356f5d356bab8c8f8d5b061bb5873d35c6fe6c9ca033fff0457d03215bf396268b31541e2a6a50e666c5b9ed14a617404c5bcc105a3d5551fdfadff43548fb79d414ac7c6db2ebc4f6c2f1bea55b0a2b18070e28a2321192ce5b142ed9d49ffc003a9d7bc9c66c82017f38d4007d03e658a022f70886e1783ae7e79b063498a7826b8952d0982402c24a4003094c8e251f7c54430e13f872db5015996cccfc0a02382a6c8ee93f8ce24935193bfc21d9a8801266aef70248137660a3889d98859291133316c1bd535eb77ce471f947a3cc717357e15dcdcf547aaa77a8b185970187b81be6f4275f79b7e2afae920476864948555c7dd66d9c49c9ce338483979dd1909c9394dfd3b6265316a9ef0eab025c6eb5c38e9c620665e04268659411c6ad113289cdd4edc248f50c0e89ea9ba9f2b97e94b134e8db80fcdc9df5a10e014c6e77f4b7d51204dcd075f8b637aa2c7cf507e7aff16d9f84d26b0c915c9a4bc6fb2fb046fc5be8ab5f0ffaf159e8ef4d535b3b77040e6be993a78dedfe716ae2472008efa9ad2a2ef46a74d306128edfee4148bf864a564fe5524f13d97d8bb84ec169fde3356827589e80f8732c5bf10b7bf82b901b9c0d0fbb368035f2a798107d1c755ef24766d48a721d50247d71db8a8d1b5213e55d35570abeeb52bc90dac6c4ff1f520435e9cb2e5b50fc8883d0c39d3454aad827901d6a61849c9ffcdc95124171428894751cf679b125d85a4b393c87ba9cbd3da9d0240d4e6cc82c8716941c5aca666a0fc74778af4bbb488b87a783d1fdb588492337f30edb20aeadbe9eedb27b532d1ce618e4a656a9a4ceac1d687d93da9b30c9c439596d198ab260b3743e7ec8a5a087f24ac72299b7629b62b03741d8ebccba029117e519436b7dc68c5e6bd424d6a84ea52d4bcc36f2a15e5e40a6a709222ab2704cdb263a5c5cf334847c0d480d8aae593ef1859ae1f0f47b90b1907c5632721ff47367f96cd44265ae929ad4e2103839668e92c9901903feed99da2f01dbbe0bc5d38f07c4ac22b21d155e26613fa499e30bce10d3e9dabc72fba319cf55982b665335b3ef5eacddc037f40d41cb198c3a2c1db2628a8c158a85b8e838fdba8fff43b6ec8e61fafada185439221ac96cb11bde3b83687362ecaf4510e2b878cd10b1d27463727bcfe24bb49837f8b63b6a952469030a3c755b4fc51dfb4f6b9b7c442739406140fc3b34ba2eb1dab9d2e55bca873f75ef50d644e4a8e809ed875b8dd0abeaec68369df98acef8db44ed2cc1d7d3c1ff2ffa743aebd101739defb42e973baee75933714483787e1be0ea1a79571c42430be5a12301dfb31a1b0af48ab880c99137f1d7785df08c5123cc07e4c1ba54a84c47731a7b2e7c6ffd37abd170daea9908adab18c8ce9975aec51d53b27e480c6ba9fd74644378b0527d166ec31dd23de6bdf1da22fcb8504e0b57c144402ee88a3df85d4503c9774c4f7fe2c52d307f00eb08d2ec8c73ab1b0ab37cb592761b7c4c0dc0768a912dd9b5be6dacb901476893b5f0e52edc1014c9c99934a23701a6d079ba7345b5a1593bd80a9100fe164caeb7e3e43a3af2c91cc1549e73737de8fb99f87163fed6e8083fae88519ed492491a3daff4702f819dd217d55c32926f3a345381d4f230ce52c94d6f859160ede176c86708b8195844455dd265e8cb4fd7c74be0b442435439573303097df6b74a6469c9a166a664e32d8d411b1b2b426f33b0642aab8fe23ab121272c381b34aab2483e51d6ca152a827808637c48f749545221ebf84ce5fba0448e0fda3c41f0250abc72ce2609916f9c09a40ec7b9766e8256792e2b70437fbebab115714d38cf9332271401b1b3dd12ab5647347eee85e201ed6732b6e0dd4284793e99ce9a626be6d7c935c6bcc08d7e80a2db04da8e580ab484743b7a1cff4c2300e4df67076ec8b411cf2e9467f5bcf48b8b2bd6336fcc1c38f481c96078402cd56d77c214ee32947ec84299231de90bba11367ef9604e92ace9fc914ea48b39cead625186e9ebb8cca86b38e7edb67290cdd548313ce6625723b5d4886d9713c629c88b0b817a928ffb163a9521bb437f6c478e8f4812b2aa542dbf70fe382c078462e068be7e5d05f07d0ffb89f4e92c6715a9e59e1a40c573bac95919b3b64ad67c688dd8cba006d936ff74f860d153e621e21427e9708ce931fe1b271cd23646b890efcc72e2ca51f7772740790f5961b8c1534bc1af9711385c844eec95ef4fe129064db19b6316f7d33390c1cc86aa43cb0fc6af5f871cb2dd2b83aa51be8999f5b4b154c205d280933b613f7b0c8b21d8c44d72912c5d1eae762d23ed748c7634a81ffb3fc753ff3446150ab74851ba84838b78c3c2577d0106d0d6eb5323a5eb6ede8e2aa3c0b2c62a8346c23b757edb0cfa2ea15a25e3434279eeb489dc7b8c2c157720542140762927e00a90ae2462847de47868770355e81e73591711b662cb3f3c83e12cf1ffd6465b6bbe76bf9633ea92708dd442465c6a0f86491a498c714ca6d35a1db8ff262b7e9c829aad43b46e8c0de35b138e337801dec70b31864cddc85016f1cd5f8b5d4238fe79b5eb4054f61e72ad8ba9994e6db12a8e0c6b0a929d9779ac3cbad58cb169dee698367c2838aae849119818c2a09b09c79a68d5cc397d8691ad21793428b918770008780b2a82ed7516ff52f61254ec59c4f16bf7748693dd10fcc022836a21f27afb16aa0d63717d34dc77ca8f495117ec1cf0696242f888143d8e855079c757fd33437993139fdf3bcfc676a747a61bdc864ad4ae3f7089ba4b39ff6e7a40b5b3affbf831af15d6eaa0ee6a54b57807713950b6126240ab102772d22a2e6b4e8fb0c219d1e96cdebe40a36280291920c746801fa35e19f90d2a3312dda0531f637bc858affef70ff2416dbd3e45c54b26b9c42e001b09fa95a9b0efbb814b0f9ac0ce5e8f73a444b13d5ec48949bd60591ea9bfb2fb0eefbc87338d3899194037f10a24d2620b347595d48942fc3f5a4f260e48c83e831f4986907993f3822baaae90bf3cc667b78fc84995075fffd108f0d4ebeef5d4e5ed3d40cb056cb6a51a173d2ca60c98cb3a944aadb872ba031c8149c84670796951686d389615f394e2fce3a0c9ea5eaa663fc139d60e02604db2e5983b98e61f72763005f2b3d2c8f3a1d3bc66db9d8f3730795cede206b6e95ccff738f903140a30b6f9229d07328cf4c4c979d4babead17f748be7d511039fe8e514474aa1fa5e9c3ea24bc9f97fcd340aec0fe84fd3d50a422c7667ccfab8f903f79041f37861b694ec8cff4eaadaa37a9a769920c4f7ec72449d293027165000be171a096438884b92f48c07cf78d083b3040cf513518f1431381b463cca93db0f72c7fc3349cc15325c596ed9d03949a55ac9997ad7cfe92575bffb4b1f68c580f53b734161b258bce05d8b5bd4845ca0960a2608f868cad7c2ffac21025a9dac320b8d4860f21fb169659533999a981722eb98b02692a0ed4a0dd8efdb8c81d1d4f7c0bcce074eaf2ef860368c5bd101b290dfc1fc46d435ade0d96ba5e984842f9b8ad8bf853fcc60ed581b2ff07dd5baa7737f181fa454274b5f44f7d5e270b715dcefb3b9c48c185d54e447d772165e354e5ee6b606b31cbd77b1d47a8efee31873e48764f129c071b307fa788c2ee8eda09d87586bd0440d66523fe60490be814a333c251f152b42023b2347fd1f44e4f5fd7e7ea04e3496988c377acab9a4939dd7c692bcfe367a017de9401edafef3c7205a15a0098ea10bca6623294b65ea62f405e6cba14a36a997480551cccb497697274dfaed58b6631d36708f7c618505ee7c313c447966f31b41a497b3ccf542e6a5b9964f855f0a87947e171c0f64d031192e3bd0257cb873d8e7705e384060cd315757b49f2c08ef33db0ab05ef0ffb395f9072af118328adf78a3f54dac5f342d5a50b6f8111f102fcc74d4dd413c9a05eba915b360997f0321d2711691cc30dbd757356c4e623012915b3ba4b03c65c1f71521f0494ca1df0030eca8bc1bf6fc1d23df4a3be048d4f9fc0bbf2a2e43a8f6ea85b0c73635ae8c7da1dc6a6c1bb2b0a0f6fa3c45a214085c4469e6df5489bd10ec182e0665c03266da91e46772d208bf23560374ca66ed47bf1cf26c38d6ef022cf8dd4bd67de0bd9fd496bf6ae0882b58da7a5dcff748b368d6d4bdaf1f62e0ff796075dbedba3383796698577d9062746fbf93bdbf2cb41a8bc9388cb2caebe298e428eac0ee2361e5a8dfb7f10253a19010b7d7dc9e787589bb91d27f8a1448022a77ed73908ba0ca84f9f81c50c0da1aad4944d56d14e5f0daf4b0363d1bba1c8d44b8aac7e3a7b075f1633ca6d8e3138c40750b94f3b768e75e9a382a76863ddc84fe9be3930ddc847228bc962cc312c9a4e28b638450883384cb7c2be994bc9247104942cfa6b3329936634d5b01c1001c2e0b810d24c7a94a2fd5873cc9545f208d79962eaa79a845c60a90602da98fefead04f3149f315d8fed7d3228fa5091b7f42e31c309cbd9ff38142bf463a6f2f8bbc82717c112ec9fb8fff9d469adca57107f468085ddcc22c2dbfb1158601ecad56b873d827173e6efa2a8ea8ee712d8d0dddf7b30e52e982a252d47a9394be9f0dea39895c58ace59ecca39dd839a7ffdd2e5b33cef042b9207a777cfe7547ae5df30ced25c063762958a53a311db88af97d20e1db43c1aa69cc7c91192714e926c1e3e30c90a71a816886fe5fdc00195c8be33c07d9a48ff19fdf05a236bbc8c9a6a3e20ecc381811b3b12ddb4544846b3f58d20cd777a225cce2d1b5dbb276dcce17acf7ffcc9f220c631e725a8f1f5fde0213b693ea25f73cbca917c69f332ed4d1c35ab61e07cd1fb25066e621befb013bd9f60f0cc51c0ba27cbb9551e0693efedb5acb0138ea7bc8701d6094de182a245dd68d4a7cac30f69782e08ec9795438d1ff3d215bd93eabc9339c67acefbd9315cc9e8a0067a95dd4ac633b947a458d14a57a9bc061a48fcd47df7b3c7fbb8a1e200bb38d6dca157e0835f9af48909732187caf522c0179e0dd74413", 0x1000}, {&(0x7f00000011c0)="68643ce27e1068bcd04f9d4db77a7bd87bcab13d074755", 0x17}, {&(0x7f0000001200)="54201d5c75a23c99bdc48a81ce51a170f07b3eca7c4f17cf799bc241a15d7e1302a242f5945576e66f8c44478e28ddbcb149a19f1801559ad0187adef4186ff6efa846d3eb065d822f952f945faff769ab2df8ab453957b0", 0x58}, {&(0x7f0000001280)="2406db2ea759cb52b26b1e2be47dcdedaadf9d2c51a1bd8bd228f61b41d8ada88f105a05f1f02a59b2338d5a20df3f17476458d9970299ea06f154efc0710ad2ff3e90a4af6b37e086fa80eb28a34f33bec496c4559237747ec10f7862b958d61d39a2902edb7d27e87868619c2356e1d0320faca3c776b27bef127ab4ce9f7337d0b10a05abda6f193b098f50edaa8dd11ed270ff2ca2197eddc699dad822d121b9524bb862751e945af60960f849672d749c042aa43d11fc000e3801238c1e774b072f250b707911b0308c06d3a52ecae9182c65677c8722266327d3eda7eed9d1", 0xe2}], 0x5, &(0x7f0000001400)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xc0, 0x117, 0x2, 0xa5, "be2902673e3bb2f22a36268da03d451dce94f52aadc2c16978f9d44af951fb22f73652131658ed1caa3f18a7ff4f09e6f17be1a6ea033ec8b517e8b853d0045d3e7562ad17982594ae5dd91da832380e953fff40f48fe8e6139058fe136945cb082120185e69ced316b6968984cb04bae99d33b7ae2625927fafd95386aa96d7616e4983f984bbd8661d0e4d36e5898cb91182ad1457351e34f0e288766a37463a29390d97"}, @iv={0x1018, 0x117, 0x2, 0x1000, "c8288223026820bbda65a9c6a67015570e2263c379294cb6969d11ec1bbdc3ec2b406009b55082757171822157050cb5a1f039bd5b62fa18a2e8b285a565021b235114d1c9c7eee1882604aa7ad2103a8ec864b56cb75795a231693d4fb57411edf0d047de32147296177e23859bb0552ec3f4eb18210b97be3f857168783e11804772700d3bf359a10a38f5560bed429391afa4ec46dd32c4ad2c2b48891b3f1d4fe8013331c51dcd34650bf3eb832bf1308c6e4c3d92e705ffeb2c399fd4213dc341abe0387021faaf7bec6b10d5edfffb3464772faaa2e73b3ff042804e1caec18887fb15bbf1dd525e74ddacb7493286fc4e647e4ae16651131c971a498a0df561ed5b76a8c7ebe99470ed1d6c8648f0ccd256c02cb77f2ff7e13a253225d070dbbc999662ef47c5788e1404352b4ec864b7eb858292211438f9d4d2f51f2f55bed8319333ab23a7938cf5bfa00caa743ebf5e9ae5c0518752a6c4f8b0d6d469a086868d70aae05a94df5be30f6a1a4de91aae0ba6b177c0bcbb34829bbf8e30e780098f6d13c6e44af6ea79286e9d871b179ed7240b860772b57c7831506a667f5692c518c0feb346662480fb425f2726d3c14bd78447cf9ca346a6ddae6218be2cac925a607cfb2998eefa094d1a120e3bfddc5b68574dc39144582c802c17a233b380159c1dc8e229f4814804339679db570072f96640ff760c024165a60ca4a5809c8cdf21659108ab7f015c1b65f37557a142b1e80b01f3dabcf1833cde7a509d5b7b1654b3e7a60760b7b2d4a9c46166306ec35d90487212cfdc9c485c159b9d75123ca3a4c14c510af02a1011de354368da6dd55cb52bfefb1c69342c9841277f55c026fa4df917d950bef8372c19afd2430747f246af9c1ecf3bab7b579e6a31811722f9e213c141373dafc7ed42e304a710fb7869f05bec944cc0b259e4df8db8ac328ab2ec888cb2c018ce1beb0ee95bbaf168f0951c9892e832306e0406d6be6d9bc5f2223ef7fc0c715603d64eb82919a0026c92102d0b89958c821b76f035fc739042199d319ac012dbbb8e7990b2d94a4af42ab210c166531b98ad0d1d1d402ecc4bf3628f2e3396337bf1e2128492de0c91cba780a13f205d10d4aec7c33c6164f76c03afa9f07e7143f17f48fd625294a42a26567c65735c30bf7622214b16bc04251fca180f2344aa7a1ae757788eb7c159679a94fe1f71ff3aabec2fc5576acda3486b81645a01feef025437d5f01edb881e49fe202fd4f3c6b012c28acdc0805ab3d24a1d030f334323ecc3a32c5bf2b6e6b66066936ea01fd616b0cbb88f055faffcf83fc1fe71b87fc54d0934853076e53863862ab954a2787f943c1585484c792b02ad361c4a1d0fac87352e578126a4dab68a3d59d70d65bbcbeffdeaf8560b399ca911b0a421f39bfbbc04e545bf91ce82042692314d549150b08d90b118abad53208e79ef59f9e4a1640fcb70919a403e914b546028833c73008e08a480c5b0cdbb512f980db109301b8924f63cc53030d50721a4f67295e51b2b34bd99ab6f5aaffced3888bfe91b888c163310286030bf1bc7e92a17a7c778dd1fbf6dd968f7b06413e756dbee9d18d1585da75f3aeebe43d4519c4a7d6b8c88d8c4e3e8d6fbd3caf3355af61ed61f1b16339329906e927a19abd1b836296648eea743c0d7e1717871a3e387b08485286dba045acb652d6b59409838d4867404827e475035f65bbd56d30475bc86db2e5b35e56b4866ae298dbab44e90c4aa2f106b4367db1765512b9bba110dccc76867db5343a0855c5b6a9584aeab472e46b6d1cd4c448f9bd3427d3f37af4c42197e26cdb03d968550fd7df52fb7523d2a02edaf89964cb0e74e2aaee0ad561303fb9ab5add13a6248d44a0efee706a3abcc3d936e60f042b0c3b01e87246f2f651f5e70aa6cd5aecb959b45a5dd2a4a54d70a95a05793c6f297b8cc3d9b39a6856feb66ed7aa8170d75e8951d9e2afe7cc9c56157082a6c2f86c6d1e548dfbe202d02eb3a643b6f30fab3ac7c176aeddc203c535e429f91d72493c5b90faeb71d09470fde55d500e277ac4fcfb676dbeff510026fdc2fbf2e6a4842ed6faa7693e00a9c914f56262fb11d83173747549cafb6e9b8b5666abe5dd1dea11233f00522c751fac842aad4f14a72d1c1d984566dc78a4f3cdf465bcc231449fcb57cb3772db706afcab95427e4f6bfcceb61c861cb9ff8b3eacca19b1a8da2b7ec8095ab2992893f218a09bf5c906aac9d53fefb52a6ee4a7a4b13ecf53daaf9a30a88f18bce62f06517d4e21104afd8d5fdc01637091efd8c6328bbee942a47423a15c469a4d5dee8df1a52bf3b08b09cc8ae29f0b017ba35fa47a583999f4db9b42273058a9187dd328dd37d3867ca630af2ddc6ad5a9514385c6883739698a0f6030f3164b38e01ba59c14faa6c80888cd7dc762078d5063913cacd873d6cce47344c9d703d5e9a7393800792bf59fb334e58c4f3728d222019650b13a2ee57626acf42e0792747e183692e8914cb797bdead668829db39ba1c78d5d122554701f110722155b5694b9f9b655be9cf70bafe32bf7dedfc0a8810282c5ab246a71abdfe4636e85f61145a5c50691e66611c9100ef916ea1a573b5a5796d9e367305bbd94f954673a6d5b6a970a3e9f128eac15abfd712f28b3859522249b4fc1bef7be6e4e847b482dd60a6b11e4b7c846c3c0373f23b228ecf2d44019fe95ec49fc349de9d81511d7dce92b48181a6f165815f0774ea82ca8ef53df1045dd6fac929514e701a3044e0cdf8ae2950c0e2f4ce0ea4d2bb4754f452118d8c46a6270dfcc243639b20ed13aefc60eb26686b4b10f9adf47868cacafa5a52eddb9e171b605143ff58aefc521bcd11872b0ddb3383a622a02219b91f05162fe899c282968525bc44defedb1c32c8c7a487993136f60213e1fd857498b5e8dd53ca9346049a09ce51cc43223a392dab4492fa9a44c973e7feeb4fc920712b3af27b5156673e5852e95ab04b7965ff174a2f77baca7382639ed226ba01a2dabdba9f9e6edc62ee12c586ddabe0603e48e115a05de3504686dd9c328124797b3353d538fd1a186696fd325cac988f8ad56b4c86b2c29b15efcde8fc9d306ac4cf5e7b24b17a560c2e696450999f700642a1dc33d3bae0615b6c6da7936c9bbc8cd87092faf8b937b27ab0a4266e46114d963de36ed537ec725a1ed01a34b931950039e01d8dbe16843f7c569a589d7793b9b73fa90af927ff9e946ce759bb9e40a81fcb04df42b40bd62f24d312e054c19b69224f5973fc46351ae438efe7ff50051156e065839472514098f90819bd7b9dacc5c7945c5ffc41deef633c9f44414e32e95d04140c53612533304c899fb54ebdf4cd3514a4e17bc4946b68f13ad03aa07679acdbe5a4b9533c715a9d0835a78910596c0e216cffc29165bc088c98fb27bcba1ae2977d6e3cfe46db81c9e551b937548f1a07f7059ed7cf613d08f774a2bf8b6e9beaab36408ed254d9db68b950a30f72d416e3415bef88f3f1934ff69df8224fa1c449a320f084f4124cdad755f5ff37fc2d2aed9c3f7454b347b136f50183321f168af4ac3b4ee9c66db216a62a459eedc58a6fc247e490968f7bf190b208d25c479719ced94cb5516ac7906802c0d2ede786c71e831826236de10842902f4b1cb760e15507f7e7eb47eb766e7ca1f15f3188ebb90a62f3626baa563cc3e127e6a05e54f0db427f09b1cc6d5b0e1ce0ab37ad767ade523663b9884f11408b535ad1e9bf7a9fb09e30b9df58d3d2ad70afefc7a13ec8d427427b5b003bcf14f375dd723942e5cc9eeab3d02af5c101838dc99668be061eb707bbbb61a3109e93e86cf051b6ea513461545327ec5d8afff0fe897d5cfb90742e97950858be807161e7db6a1e07cfe8313a746497fbdc739627a1e5d5a115fe7046a0b010530f179d922a5c4a49d803de89b3fdbca8c31e470ee372f14a6cb8ae96cc2e3b57a49cab1b2fefbf5ce65597d9315824646de933b8b305c06245e871dd43382263fa7a09a061376b45f15f3771041febb06666378f127eb2703cb119814724578c0a6008e47105415363006af6256295e5cddb4fe53ef3c1d734fe1d495aeb395fed5f94b60edc9b4ef1328b2554f1716099ff4fa10603a3b28f989d81bff0aeb43830042140083a38d0eee4bd1807c502647153721f5028a6216ce32c02031452c6158fe12bbc9cef53a857bd0a79567145b238c9e8b4e62152426f328ff49d650a65e594b8ddb9ce552d7c643e1e19b12b8e92cee69efc84c4d875c9369b215115be0a1396dee31b7d96c7559859e765e2291f9597c8331aab150bd6fd55bd48165e09f3442300c39f469416501dd14ac979b38f5d8bdf484fd8e8e6d0cf5046b30ead7d5bd4f6455758354cb5992d229af6a7338efd77df99a5a6e8a7f9206fe3857dc183bfba0059031ecc98ed4e9d2af7259354334c25e4fa90e5e7b6149eb72a22e6fe0dcc0e8d8668e5dac3eefa31db461b7d2c5fb37414a06c2d9681a1abb6b7b0835c0b9b997ae088f72d6d50a598628d0df9129c2b33598f1454caa72a4a11b2c6102c6a252b1daf995e113133714c3c57a69bee25b761df0d1cb9e1c4a0842188625497bf83fc4e8a62c64bd5b955ad36f7a58df597a8d7647aee2ea5a16c05072983c823ae8c46f42b5d23d5a388a07c55e502d3855283b63c6a85f8ca960fe74db2844f0c6a5ffde9b34747075d9270a11e9038cedd291fa8dc51bb2b608ff97c93af3080135c4b67ca2cb949364f6331760b43c79fd5fcc5ec3d393889d28fd8474fe2782e59e663a1e38e2b946033750a27b9079aebfad344f239d61355821490327a7bd3c13e0b1a8188ebe2d6ebbe6f12f6ff64ac1dfd26e8743b7ba752e8715112ac85a48b1947e708e345c92f35cc484cb2fc27ad4fba77b0ae7cd3924e4d769c95297ff1aa399882793050a687e760684375789bd3bdff90c7275a19f2f48c21b0dcb6d17f7d53e114428a242b14e32f5d04bb3f3916fe7cdadb95b5702f767bda55c1df2a7c539ff8138b562fcfa53406da8e49087e23386584b35d184438aa2b435dfc0cadaf3830937fc4cd6f05c7be3ef9539b4fbdad2d9c166f296f74beb5321c48385907e04ef9462df5005787a54a49f86db8e0eac45dcc2d474df4a20a1d372fe42ace6658cd209bc3f3f264ed4f2cafa3acb842971ed8843438a96d4d1eea08cb1e0e6cec6570e0615cdf0b6262a3918e52ce9035693daae103c76b2c4b19454b1fc1df1c6f0aa5c9c70bf6b9942d9eac892b6d85a4c989e936264b6b7e9415fbece46fd641d106de7431702c7a11360649f1c3a5602e5d739575e7d1294f3b89cdefdad7e3a58778a669a1c11d094d5220290999c4c5e730c7ae5e0fe6fce9ac89bc96de67e88fc80d5aa9d5696916aad1a79db1abd99b829af5d152b674ec5b39b19585a2dc59f80669ef0b0a5179b5ee7250bc511be118642f88c30dc95b1ae6257702dad20d15b7650b678d97963766ffa84d53006fb1bd240513eb3e7555908d847365d92113492079f48ed374996a2398fd68b46e4e4843fece4d4c1563ebf3bfa02a8e7aa3c470774a773d92e41dd93acc7b5eed73108c601ebfae0a5cbb0c18c685cc6e21ed468e0a0148df318858f968eefee3ed19a98425137b913f90175601e5d83e9310ef2de65679685aee25ba822bc4e59611eead44eeb91d5087d1dda57b4cedcd858c744b7d474c6272412b567f358df9c9b91527"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x58, 0x117, 0x2, 0x3e, "a9efd3555b1450435421cd02516183e3033946ca5247aa5aca79bde0bbcf4e85281acbc1dbd0f608d08792477647f6fc938d8d7f4c03721962ff52989043"}, @iv={0x48, 0x117, 0x2, 0x33, "3f61286cc1138a06f8bcd8a9303f57f12be0a13447f479c9f30926c2f1654bf34bbd518ae02249a2532c7c2c81de530f023dc8"}, @assoc={0x18, 0x117, 0x4, 0xffff}, @op={0x18, 0x117, 0x3, 0x1}], 0x11f0}, {0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002600)="fe283313a954eecb9731ab67b71bc33ca5d07593b314bb158f51ac42302c0affefb1c78989c2d6df7e97d351c31e3df8d3ae74da6a0c763c7e3d4bd05f4486695a1220f30c2641761c510fe78047701f180746e3262ef094f0b8bf65c2926b24515e9a6024ff5504c073aa540455acc0a7aeb017ecdd31dac47ee0ee4c8f3788930face5b8d8aa0fafd66ae48b615d4106f981fc5fc4f6f9cad5629606db159a35a15c62683376b727e937d50e2ef01f11694c582fa60fa55aa3738969f98c2fb041663a285850973409a9cb3e1693ba28b7a395742bcb342843e1558e9080a50f4f95e580bbf8cf3bff560e", 0xec}, {&(0x7f0000002700)="959a5fa5475e45e50ddcd30f0724bacf89989bfb2ec4af704f23eab341fdf6dceb954b7b34835a1212d1ab1de9dc0dac51c019364fb4c65ddc8f83df80b6ca962d98ed1a7bf8d70a19de4de42066260a31b774d903540dd1e7b4c8b48963446260a3268e7fe08037ced73b11bdf2dc027c38de8c1351471b3723fbb90845f31bc41eba4c99431118ff88e58625e644e6c316a89389557fee2007aad55956a77d5d43163b71ca4fe999bcf3c52301dce92e1fab74cde92d4a836d1652a9e3684e57c58c2092f061fd30cc4e50e1f8a3", 0xcf}, {&(0x7f0000002800)="60cc4052e31f2206b4da07d50d1ec69ac3f260710597fa87085f05df8e5ae7dbf6baf4f7f80fcf6d6f0e339d", 0x2c}, {&(0x7f0000002840)="1fcc2f50b5cf4120e906c132dec1489f1c2ca71c8f5442799a69535c0a97d33289ea338b72013ba48f85131f031081e2e351242565c2b1043db14c5231d0877544c93ff9411a1151284c", 0x4a}, {&(0x7f00000028c0)="d9133981c46a47fcd62b1a1b1b158508cb47a252132b73bc3e24540d5f2f74fe4f306088d73a37d3ce4bcf0082a2c8d9b518a84dae713f270d5cab89cf3dea344ff30a76e544d65b1af197975c374a44233cb9728b83fd95ccbb6d5e537a349e", 0x60}, {&(0x7f0000002940)="70630947970cc506ebccdb456b71fc0135658e9afbdac13a3b2d7b153b4e8da0b560ed45924565bda377a35437a56310c7dd77b81e84bde3a0e7a327970d95b2d647a8aa381c1446d1f1ecea673dd060e05cf21ab9edf1d9a4d005140fb2d320ec7c2e97842c86680a20dccf60cfe15a096984d6c29efa9c1c0ef3bc5697c68373ef255ce4c3986fad3850513696cba99a87e7995130f7da481f07dbe2b27696c4d9afc0b439e94c517e5ba0aa2f6ead99270cc88ce2e307ee2b233940d755df3e4d42ef222c8d483fc0a12d6bda3bc6ac040bbd92e6e01c", 0xd8}, {&(0x7f0000002a40)="7fd68606d9c183fd260685eaeb2f694ff4b4cb7d8bf890603cae6634cfe47b7c9e704e54f42d4b8ed70b66b4703513dcdd79013db4fffee2eac8ceda9c41fc8acd216eee34e0c279e0e21712e435f535c0095713ab5a02f93057ab45eea32a9c89981d687ab95b66cd370da5", 0x6c}], 0x7, &(0x7f0000004300)=[@op={0x18}, @iv={0x28, 0x117, 0x2, 0x11, "b873f922b6d13a9615eec7506bef0b552a"}, @iv={0x18, 0x117, 0x2, 0x3, "715fef"}, @iv={0xa8, 0x117, 0x2, 0x90, "b0c20c86c19b28b13aaf2954a59fc525310fe3b0d951a564897b4e0f614729efbdebcd3571a22d586806a02bb0dde8815dae928e4e35d06a979427e38e045c5e4ec41164a8f18cd3615d46eb692170e0542c8ad0ea48ebccdc610f50204e3e576a8b14f1f2b71213068ef4daa961e58433213806c572b9a4d311a799938297198651447c0fd9abd1c5fd395c6abed410"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x68, 0x117, 0x2, 0x53, "b65a02d573c9e90dbad5aad7bae1c10051f716c8c9755e6047655096617bbe1f780d3e30e0907ea69f547bde9160ff65495653a413ccfd9663f42a658ff55ad35312b13a62f3cf8bda40439b1dce5c7e704187"}, @iv={0x28, 0x117, 0x2, 0x13, "0adec972d9b5f05dd11ccd52e0a43decbd1f17"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x1d8, 0x40042}, {0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002cc0)="814feaf9018569b8f1a60858be4b162fbac2cf6587db2da962c58b3936b6b8139ddb1ee4c563833a163ce25201a0ee3ec29bb473e06a10fc6189909ed8554b4842dc4ada74e0acd5d6db053c59fb9af37a031808aadfd7dfeddb3dd2594f7fbf28a19d16dc8160c352a1559af026b6093eac8c6b0cb5370afebef99951a1645e3f00ca5aaf397ad7dab0eb328ec85c77c461e8f51eadd55f2734a7f01088b376c28f1164f7a56db0f05f03916e35cc8339a3354f6b6356e7ece913928cae91155d64f430e21209434ed8f45f17063a176b788d63fddec59697", 0xd9}, {&(0x7f0000002dc0)="cebd7888cd7f551da3163b089557a6fe697aa1781d323dd6a2514fc7f5c02452c131772b65289193a57edf3b769e265b2b6440f6e06f7b0e32415dbf972ff44b48e178a378fa827193f3b569700ec997f7c89c993017f88a649ce98913d8c0df780825d829f205036794358d885919f1db86bc7f172658c678e52f01c90427941464614e63b017f4e623e01493ecda20bc211d5a5b6a9e27e3fdef4ff73363ce7ad23ec8ed74a2c12b150c4bb559c1f3caa94ca94ce22a67e44856e351940c5100c6d6013c52d828efecc34039f04660640aaa6948fd262653bff6d99ffcb42e6db6383de3299aaf37e8c1608099f5", 0xef}, {&(0x7f0000002ec0)="2fed6914bff60555dcf25108ae9f37d1e8fc18bd70a32cc75323f7dfe31e852f3936a7458c944e83a7b9af35ac22dcfbdaa1dd6789917ab61e4c5e58b54eb75127d2feb83a42cd0771afc751de6af748339c7450b0033b0355679d61a1ce00383f49c0454c6316d1df738987def308770c86b8ffde6828b5fae5d4b7d93d1eba20fceb61", 0x84}, {&(0x7f0000002f80)="345d3a8cd7bcf04eee5f3dcf021f594be29d20a7d25de5df2a941c1033169ed013cd42da1f2610d67535ba357a4e638b6637058bda85656e68110163a1e7822b3b116ed446f8994915f18e8697bd9f48911d2dbe56d0664c9ab95004555a8208c7ccb01b76c29fafe4c9d30ae61302a7b382497af496a55423bf76e96f94a6646ff3bf1f793247c315e36fed346f6f2f7f2db6a33c3b3d679349ad5e00b38e5101277a579fd0f3a738a6fcc6b9aa8439bb3498", 0xb3}, {&(0x7f0000003040)="1a57a87f144513b6f4f4d19d0b3571ea41fc49678437f2e81c55d64ac087bcb1f67032609e1502b4aee1019aede46c506f8c79c10cc81563f07a51d975ca2f86476ea9ef29b9f6d580b9777cefa6f90a9b6e96e585247cf59b579370d4d8b333e7548fe440ac4a10529ba8a1344f9c1da5c757ce0c1693a4a992867d3d51a4b61dd9720e65d22e05b2ff74f04bde4bbafe6d94413bf368a54e1761c99ac7ee37d320059509b5de5e36847792e731e6ebe5caaee81d011b4a40a6e8dc609df5967ec1cc3e253d", 0xc6}, {&(0x7f0000003140)="ff96037a7cdec3117892ebacea8c31c0bc70baa918e06cfdf110bf3052189b53b786627e4ab08d3b033e9486ff3629a27b1442606a9eff34fd52a1eef9ecdffe433095d494cde134d090e5623ee0c3eeddb5311da42b949bc62c36d099f6e9ed7231c99cc8365be8c8582e795c85a5e075342492ccc78bd69fc5af695255a9b174210b89aa77526243494bcd9142874f37d8c4db485b48c2ed9568e33e5fbfc2a3c9423725b71d2b30872b59915d4d4c55f0103f96f16a1ddd06a18e5262f6ba7a71f906c52f97bf95e5f9c764b0962d68fa5ac503b889d8b88e912c9cea415883749c567184df85c18043640cd438aa1822973aba8eccca0f5fcbf95117ba1a54742bb67fc3066df4f687749f8b0c995e379c8e540243327a89934f4ed20e5cfccede8fef107ab512e29e45c70fb7e3e4d5b321d51b16dad5bd8f99db59b8316a47c55ed62d3daf18c725acd40dee87b2c5790fc92b7336588f07cfd2d386275dd1755196d77358b1a99b24040866186da0e86dd90473c37c11058c790f13f7e29caf7c319cbb330f45c17622fdd9e36da8b9243c7192a90bc25d90e147377c21d4e3f94c329d440b541a9fd6277b1599ed89caf3d7ae8e5d9026415b450b2e4df0ddf4abe660f6969e136aa4b553700c54e7c4364b770669840fb3bd3a3150a5e4e900bf0d54f76e9d13b6a9928699ebf3497509a56b3414a6c0f0af1d27d353ba57e7d6d7349322dd6be18cf6c14ca0d1b27c5b36e1dfe0035c59a3a43e0b0e4f837bda0e00b1c6bbc487b8f32025bec568a67d26e49abba8ec532426453c5a77bde508c001e189beda90b5259a5f1a46a762546dacfe7c57ec6355e204ee1eb540f6ee8c3cecc8443cf25b03934398187a8d3103d4646870d9ee3ca05b1d9ed01f331e67407601119705c2a3b28e0b25fd1a1a31d1b985b134bb6201fb1c13027c4ef11ea6623af1259c70a435153153f28825e1ce63714125b496bf15ee46638a52004ebf76e68c0983c6012680637282aabc37bd00bc460766bf4e66c79217de913b88aeba4fb452a0f5448a682969bf315c07cf418dd6815115695429622e2b6f2c27d09bbc40ff514dfc697dc363f9edd841f4119ac36bbe4483b13bbe99d877acf3f676c4d9cac10a3ad2a6056815863363e6b93f58e86171fa4ca49a5a1bda2a5daca51bfe0cf8285cd05e5ef2b17774d48b104054b72ca87040eed346fd27265adaa0f503cb8bef617b6226bb4494f832beb6755c948bc46a608f1177a8699eabb9e74707b6a1fdf38340f352f2f44f3441153490ab725f7bd41cd6d183d44758e1e980ab5d08c85189ade28d1245796554fef241c0f76ff7cc93e6a6a4885f98397f0d0d652abcfcd8828e2ed0635674113c87ec198392daf8091d12efb447786acc467ebc29639831d46f4c3b1a03cd32b97dac4534e72dc0ab3d0d630c64f94cda96a8765778917eed16ecf81e46dab52e2ce3815b97582bb76da158a5d439378bb0ad2d107397f4bd90a55d0ec223f95ffad38c87fb3c8a778bef69d493875b5556530e92f3f7933898e3cf257f9691c14bdceebc15502f2418b5d9884ea867adeeac36442269bde0c085c3585e0739baa3515d6e302e6c8ab2aa361ea3f9e385723ae34c7fe58f1e55791e25908246748f335bdac74330deb7b137fab55015cad40e216098f9daef637e33d741f3575d406c0eb2ebcc3fa862228300d2b5511d432f331cfb033a64ac6134d68c34fda1f0e7fba2ca181a7753ad61eeca96eb134d1ef2dc264569042e1b2c0ae61831ef7d7a391f2b5eb445d6ec9a2d38a9306caaa349b6d81d43f2fe2f9588ee335dbe1cbb5c0c178e7fc550a13ef96d06519cbb3566485cbed98f2aef4c15dc9139f4d2b713ec5eda5e86d56e37999771de48144d7482cc85a5b4e14b21c6dc62c9e92cd8a524fc4820f666c353fc4c50314d014b2e3bb97fcdf38711a3b1c943b901715a6a7ac7d3a57b7a98fd6f4b547dfe946d1368a803d472f2c7316a828ab223dd5b9c5546cb892a78715349833c2762739c2c843698a28fd06828abce4060551f8c3ac9d1d9e8ae3560a55a311c934d600cf8fd13662f6663a6b67c32906cc779d7bbf8865b934bdb54cbd381451b44a8a688f9964d580dc945a2b0230cac1fa4f8915157fb6140d5b1ef7462c702b29bdb830170b50c96d3e83114938da823ae6b9ab8ada4b02a99a3b8f52127b26bcb82e51909f0100ef32104956d7f42d889d4b9f92355c8f7a219a3938d465e7f728fe1768490aeced310893a66c92a5cf559815bb08d30e2c1445885bf283d5f92a2301eb57a3537e25fe299d7027f5d3183a6c594e5373a95e0b677ea00cf6aaf9e6add12bb903621d8a7c09345b478d221f50ea4337a60615c9bc5f2dddf0977ecee904cda04210d4797d3df14fe733e625842d466bcba44a9f0775336ee4e0255d05d338eb9a834f8b804616bd7379ebe7b292b80f0e1119ac55a761615df015d233add1679e8c5fa7a5b55c8baaa780481503cc62b0fbf0140580138d7812ec5592a4b32eac4be09883167ba24421fa98e6eceb05d6eb857e903cae4aaeb52e18895bbe8095d8bce7944291ec9a352c724af31236763bb5510cf2c599390f77bb0df3e8d59f612cf248aacbf35dcfaabae0dd539d685ba6e3ec2e39636d5ff3e0f5a79f37f2f1256cc46b91de7591aefaf48ac353f86d820584f9f289e3a9397cc03846d74612ae1f5920923f4a122c28bc8b8714265a458713e31718dc8c546a4c1934ae75bac83227828bbc70be21c11ead86cd06ae56043e323116200be6c9e11c2a15944cce85ab9bb0d375fa96ccf9830d90a334131680459df6a6ba4b126242c00f3e3a8420447e4293af33b9eb26a066740f2591843fd987d2a2d46a588b7e8df55fc78e7ac0e98618ef60d698f2a0333e120256463ba4dfa07854e17a7a2d5fd17c1156fd31b9437ab24c20dda0ff14e34e5b156a1fb8a44637249dbc0bafd8a3131a95e0633dbd878378889cd08db9fcd2ea802438751ae71d1b77dad1fc2e1cfa96dec82d14f8cbae44199f7bdff291d19d2cb4bee6e6b88b2db0008b838bd4433a7ddb5c6cfe200280f4d90f0584c64167bce7583d967a3673003391058674016762d93d7085cce832247a2544ec42ca8a00409e2a1651b59ad123ac7640da4b2c9c7fa1ae6a26e9383653232f6f9dcee24835f45ba8a77e7fe134ae254c10f2b0ce8f1fb4a0d573d8d9ac0cb57a761553f4407f725c332b1e0292eff440a894e3af0ec221296f069909ee85c1ea4999aa5695f004587b0914bdec6c3b9bddc1519de69c5262431a643c940d323c5df285bdbc94a32aa16ad81e548b8256b37f9df2bb2f7c344eedb76ca2bfd81299af032e9b6076cb25aa6fce2b4193bc5648c383133aa4175f1907a46eb7bcf2050880056f04cb6f9770cc6c92fb3a50887a8e74c10740d370edb79ffb03adca020ff89b7ace11f6272f8a4c02dce7db14377e69f5821420e439d12df110e492eecfa84b5f0776e3e32cdc231a21b48cef43fff6d4bc2ff88be36485d5ae7fca4947cd222179a4385dd022b5068b79f6b5b07d019166869af2b99a989dc03549727b4847d27226dd8d61d83315c54153f030ed862bd2fb2edcf14cef213066b14756eae7ed40f337496afd52eb0aafe77e8668200221a0d7ce759fd1b77f69dc3f11d4681e3c2a49090d6586aee6dd416a9886a6022ae736c9e524b34504e1f655d911222294a74ee723581fe8214dcd72512d8dff84f69faa9680f8c0cb84d1ce689f09ceb81a548fa40a822e8c079e7e165f8d4728483621d391aa0d92102d9ed38ff89479ab970a958b63abaadc50dd1ca5e8fea88ba9799fb8171c9086e4be0eb792926a9d0b4e0fb1ac0fed3f018d85ae606873f0328227367b9efa14565e8c70a4b5bba2e883a9936511592a440d83b5a88e8e77c43aded50bb40c0030481d7d6459defd00c165c9de299356a94ad9ee217552f7f3b5bf9652685ab1942e8a313e1445e94ce467d2709b978140fc73f36a899bbb2a2081a140860a6a4db660de9e245dda48464e56d48fdccb8aceffd06377d2dd0fccd1d7018364615366be9cd71574871a51e7f7c7a339459a9b39882fe443be1655802d4695ba0b87671cb7b37df3dd61a8bf447d54fc5752931ff67596112a5d6ef3e0ae9f60b86580f3c40c11ea42f9a109f1f6358fe8c39d3cc64b1800bdfa74c2023e1373bd75ffe04b31497563b143e96dd368b04ced2d7181cacd3681fc1455b41053bcef440a1d8b1d7523e397a35e83d976d94a9cc0ecf131abf68f13d63b499e68cf132c54061f3076a0749ef3c51ae7d8abe71477b67762e66e0fe13aa293baef1e264578f3153d28ec46db1091d2a0742ce790d82e8105ea444e653048fda81f0b61da88c9a614d42dc4090a5336b7cbf001100e23626004bae8cd01e0d6f494b5263df61737b2d5aeb05a71a514ecd6c4b851844444b8aa10a3540baec718f809fa9cf176216570e77b078142d3084145918a1dcf4cb9e51edbabd74890fbeccec89674777814a1c06a236ad47a8f857cb222fe1799d63709111cdec5cd36fb27864e9cbe6ee8dfcf4f951ddcd1ea5f51412fd71d6e3ac630151e47d4d22eaeed820b45cc8b4082d78b11901ee7d2ac6b5b5d5a599ad235cd5a056b4508916b86f6e97050e595ab578d99b951aef539451ff048f9ef1de8f249ee3eabec37786f80a5132f4919dd83694de0ec4e93982e1fb3cb17638db1192ec902470d719a8883362d48c336c18d2cc21ed3ae1f01494f7f5e4e6224934bf20ed7df5efac3cc30493d7b87bc4f01bbba32cbbf0087eb5e6117d438bd05dd92661a07f78d478858e6ebc57258fe836d87cbde1f52a0894af700e4e0bb012c01ab8932936912bb8347faec6d6117bf6711ea3e1d10d8a849978654eafff78ec0370531e5fde3e6c018e19aeebf4ace1372f4d68d607040c2117824de433c9de5a5254b1367a46ae8a84c8ed0ec3e93a1bddd9c42372af640252b4c322161ad34fa0570bd774364c0ec412e65bccc88b6fb0f6d3b4e11544a941646ac0d965942025bbb8fb268f6bb0fe0843b38835cb39dc7ac8f44e7c54cbe26a4ea06406f7f8da3950ca240876219d15624d8a194a0c2278620744ae52554232e8a7f2d50a0f30d586216de147593856d7ed8c507eae5c3e2c737a6aae0a7ffb4de7e2a4ee2f65cc6769e2ebe20d7542d1151a94ca8a2f7ecb86baa2f2931056cdb6c9d4ce89dd0c9863e5e1253c3b0a6f9b4e8c5250bfecfea6f5913db817b6d5c722bf08c68f2c122b1d5fee64faece07c0aea7d941dc2a2ebcc2ac38445d264398dffe222f21bbef856a6addb397a98a5f2ab79576e8085364bd35f506778948b60b0a4f89067e883f05f38cb4aca350e3e1cbd0afce700042e3f587bef3eaf4acb5ed9595c0dca436659792e742753f7bdce5fe6fdf2da5ef13ba16822d5ecef168a86b0b72a9db2e3279d0927aa1e57ceddb711fac8b77a90dabd4bc736c286a960b9a1c1730179bfb31cea5a518b435c6baea5a44ac5dab5bfe14be9d747b57db1ef62991a02a4f97375003c738cebbf1939cd3d29b5a1ebc3e71ebeeb7bac27ac815aafa055e52f42d654689d893ace9ca0ef7717ee88777ad81b20222db8d00dad40ceb5dcabe3b895d18fcf3299b73d7aabf34a1c1aa9d346ffe13e77b0d9e411de349c3a776352b832419cf8f421c3d85fe0d410e901eb551ee9878549b7b3c532ea98b616610308dfff2d4f", 0x1000}], 0x6, &(0x7f00000041c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}], 0x60, 0x11}], 0x3, 0x40800) (async, rerun: 64) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.518798413s ago: executing program 5 (id=2854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7b}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x20000084}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 3.079776178s ago: executing program 5 (id=2855): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) sendmsg$NFT_BATCH(r1, &(0x7f0000002640)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002600)={&(0x7f0000002380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x0, 0xc, "587235d884972e34c1603661a3569320b1688f39f6c2ed0daa5e4936e9a1d8da697ec90c632f72a6d182cb62aef0"}]}, @NFT_MSG_DELOBJ={0x104, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xd3, 0x8, "e9be514c6a46534268a221af0c7dbec77b5c378f8d1e75729376fc335960d4a24b6e93c16d0b389ef372bd0354da3361717ccaf81e5a961815cac089f0a5152e47bc3d995743c0609d8ff9623b45594d7245a4bb192c5f975ceef24ac91165f4d7a31cd8092665a18d914017663258fa3374c09729b82fc3d08705f4410f06f345158cc4da4995a52ea50de6e99e1ee008b2f48f5c72106c1a1b50bf02ddf50f8254241cb5675212d0005d7d6f290254a60b9fbfc526f08398a2a00f1acff5f8bf3121639098439bada99667e7a6dc"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x260}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = getpid() mmap(&(0x7f00001f3000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x26bf9000) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r3, r4, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r10, &(0x7f0000004300)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x1280101, 0x0, 0x0, 0x81, 0x5, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x2, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x126, 0xdab5, 0x2000, 0x0, r8, r9, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002300)={r2, r8, r12}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x111, 0x4}}, 0x20) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r13, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5499}, &(0x7f00000000c0)=0x8) 3.05196128s ago: executing program 3 (id=2856): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) inotify_init() socket(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001082dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="d0510013000cbe70be7bbbda", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0x1) socket(0x2, 0x2, 0x0) 2.862046297s ago: executing program 1 (id=2857): socket$kcm(0x11, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x60a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0x1, &(0x7f0000000080)={0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000000)={0x3, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7}}, {{0xa, 0x4, 0x6df, @empty, 0x5}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) fstat(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.66391543s ago: executing program 5 (id=2858): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xfff3}}}, 0x24}}, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) mbind(&(0x7f0000704000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000001c0)=0x4, 0x9, 0x4) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x6, 0xa01}) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x8b22, 0x0, 0x0, 0x16, 0x11, "fee8a2ab78fc829fd1e00d96072000000ba89de2b7fb0000e6a180b8785d9600010041eb8109af000000000000002c7f5211e95610ed15c652e300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x0, 0x2000000000001]}}) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x40000024}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000300), 0x0, 0x2, 0x0, 0x0, r9}) ioctl$TCSBRKP(r0, 0x5425, 0x0) 2.531183484s ago: executing program 6 (id=2859): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000bac81746fdf686ee91f776b4c0923691d38cf23fcfa401a3894b1c5ed9cf9a24aa1c37cb3a10390c15a7307c4e99641978ec8bc5ca40b466dbaa4cf9697d060f9ea30011ff785c82855bd5e7d1424f582a8c58d1cfa735ca80c75d33fe27c244e77baa720f3ea5b498136f127560865bf3e9b78921227b98767c76818f51aa007da52e938aeb4369ba36a456fca61a76cfdb1353be51684d70e66eca4", @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="0500330000000000"], 0x24}}, 0xd03812c002510556) getegid() (async) getegid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r3, r3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r5, 0x0, r4, 0x0, 0x7, 0x3) (async) splice(r5, 0x0, r4, 0x0, 0x7, 0x3) setuid(0xee01) (async) setuid(0xee01) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0xa145c7, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0xa145c7, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') prlimit64(0x0, 0x2, &(0x7f0000000880)={0x542, 0xffffffffffffffff}, 0x0) brk(0x5d555ede6000) read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x4) getdents(r7, &(0x7f0000000040)=""/54, 0x36) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) r10 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r10, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r11], 0x20}}, 0x8080) 2.516920475s ago: executing program 3 (id=2860): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) fsync(r0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000140)={{@align=0x7, {0x4, 0xbad, 0x2, 0x7}}, {{[0x80000001, 0x2a5, 0x6, 0x9c4a]}, 0x0, 0x0, 0x400, 0x0, &(0x7f0000000040)=[{{@align=0xffff, {0xfff8, 0xa355, 0x3, 0x5}}, 0x81, 0x0, '/dev/i2c-#\x00'}, {{@align, {0x81c, 0x2, 0x2, 0xfffffffffffffff7}}, 0xaa0, 0x0, '/dev/i2c-#\x00'}, {{@_ha_fsid={[0x7, 0x8]}, {0x8, 0x0, 0x72, 0x3}}, 0x8, 0x0, '/dev/i2c-#\x00'}, {{@_ha_fsid={[0x2, 0x81]}, {0x5, 0x10, 0x1, 0x6}}, 0x8, 0x0, '/dev/i2c-#\x00'}, {{@align=0x4, {0x5, 0x1, 0x1800, 0x8000000000000001}}, 0x7, 0x0, '/dev/i2c-#\x00'}]}}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000003380)={&(0x7f0000000340)=[{0x8, 0x9000, 0x0, 0x0}, {0x1, 0x4010, 0x0, 0x0}], 0x2}) 2.43980018s ago: executing program 1 (id=2861): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x169c02) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x14404, 0x2, 0x10158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_AIE_ON(r4, 0x7001) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') mmap$snddsp(&(0x7f0000556000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x3000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.012434261s ago: executing program 1 (id=2862): r0 = socket(0x2c, 0x800, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x20000023893) capget(&(0x7f0000000100)={0x20080522, r4}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000080)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e1f, 0xfffffffe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xc020) bind$alg(r3, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 1.499678353s ago: executing program 5 (id=2863): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1d7a582f0f21cd68}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) r1 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)={0x8400, 0x10, 0x27}, 0x18) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x204031, 0xffffffffffffffff, 0xec776000) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x3778d2360f27f5b4, 0x4) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r4 = socket(0x25, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000000005, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x40) write$RDMA_USER_CM_CMD_JOIN_MCAST(r7, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x1, {"433f0000000000040000004500"}, 0x6a, 0x1, 0x8}}}, 0xa0) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r9 = pidfd_getfd(r2, r2, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0xffffffffffffffe2) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES64=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44894) (async) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x6, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0x1}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20044080) 1.382404632s ago: executing program 6 (id=2864): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x1f, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x8, 0x0, {0xffffffffffffffff}, {}, 0x7fffffffffffffff, 0x2}) ioprio_set$pid(0x2, r0, 0x4007) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) unshare(0x2c020400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xad, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0xc, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in=@broadcast, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='\"lgo=z', 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) 1.011931576s ago: executing program 1 (id=2865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x7b}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x20000084}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 117.478067ms ago: executing program 5 (id=2866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x70}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e1221b23bb601c477d3df373e75963d86ddf06712e9000d2f8db0049d90491c3248040000", 0x25}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f0000000240)="a43b2eaab40000000000800065", 0xd}, {&(0x7f0000000100)}], 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000340)={0x0, r9, 0xfffffffa, 0x7ffffe02, 0xb, 0x1fd, 0x1}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x70) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r11 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r11, 0x2000) 0s ago: executing program 1 (id=2867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000080), 0x1) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0xffffff1f}]) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = getpgid(0xffffffffffffffff) syz_open_procfs(r11, &(0x7f0000000200)='net/udplite6\x00') r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="f31fbd0d660f2a630066b8000000000f23d80f21f86635000000000f23f8b80d008ed82e667c75f364b646660fc735b800008ee866b9ff03000066ba000000000f3066b9bb0800000f32", 0x4a}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r12, 0x4080aebf, &(0x7f0000005700)=@svm={0x100, 0x1, 0x1080, {0x200000}, {"460bbb8db857a92b120f627552a12124df7b22b7134b43275daa38acc7b01bdcd4050e5d24dcd868b72b18f1c5c19355cf1f705abf087f8782ff2cb0fabd68d272ea03d79a3ec49a517250d468d0d06f8cb9899e501818ab79fe5af75a5a8cbd395701457fd920ee76790138d6a5c3e0d8b44b0f04c55bd75281bebde782b29060368888d81cfd7706aefeccf834b0eee6c82aba5ccdff180eaec4b9238f3ce2437f42c7cd077bf0d0a125edfe1b71b55ee10c25941fe18715b4c3742f4cf45c0d9adaa8f877b6af20d23f0584b62581f4bb0781c517bdabda4ed3d33f472ced32d344d0dfb97cc63227b967535ec63aeb2f3424aa441daa1d906c3a6ac8b9bf6e5ea1eb14ad9de9099331c292387e2f501b4e4840b4324817af61186626279031fdbca3ba2580789c8ee0dfc680cbac8e8220f004936385ce840d3c2b5001db053499e1f082d0b9909f048de45acc5df765add3d540dc9e4af6f88efdecb0c4322ce0e6599eb371cf13077a65e6b807b7b3dc0002d56206cc13e5bd3bf6e2522704ca31c1bc5b02b0b23038f1bb2cdc0f4558b3aa1177c73ec1bf30beb5a8f84639ea530b71f5065bf0685c30d2786fffd34238e9e47fce1a73988bdb4b79742ef7dbf19fd5460908ed85c68d7ddcf521c5adad6e4469433e603b356d774e54f2a249b373e8264bf710c21129ad248ba8a3395699a0b3f1f0cabaf924c3ce9e966be1e834d0500ed9a028d0be6f5bf126caf2bc492fad456bc10cb377227de5c99cd9d0fbbdb494fa99f87e913fafb7f53d12d124495f44685eb0dc4ff55ea97a473921d655279e41fa32c86e39ce35a183a5d9a1526d20ba834de4e53c0c1368b3f2652b7f6befaeac6c4a301f108f4054e4f4329cc5101b08bfcf2b80c28d0dc51100dddb3d1a31e404aa7fcf4bb172975e8a394144de01dc622bf5598e9ec7131cf3f26eacc8398f9627018e2435b2d0d83a6c231d6f05b6e8c3b7bc90b1c60018c21109d3f6481bac6f309e2c52287a06dfb6faad988ac6ab6d49400d3d2baa4e85c96cbc6ff13d2d336a1e66341d1d5da580720134fabbc9e5a06690670aea6a065e1591849216b7b81496792d80a2917507165866c39d14571cb2cc698c0172ea3300dfce18aac690699da472a0d01e9ee8b8688fe3cd6c38c5be2de28b390ef28ba010916b21c5043b163049d9ae6be465f300442fae349d9128f83d93436fba873e3b76b4ec45df1d636b5d2fb6fc331a5dc7829f0fc5d27157af428cfcf79e1ab215629efce8864ff62d51102db6159440600c9e3e2130fb80ab51e60b794e0d09fbd47e056a4785c1b7850474e7f233cf0df7be321d9413b153566293b632d91f94ec830d304da970c44765a3011a97730f9f0a2dd9e76612f15456f3abc89c12fc5d4bbbff9c28751c1d82845df8974033fa31b06eebe91216ad6e0770691776795d246218f9b719d58f3b4c2253ebdee4abf72ba193048e0aa7245b94304b4e1f61534863a2d5f8a8ed2e39aee12f9d431e2e53e03408b8f19615e98491870f045f9fa5df96e6e949d585c490a7923e92015c261ae9c80ab5c6b4ba97a0b4b602dae4587ef20ded191f0785ffb9e93484a737c0a0bd029b4834fa0887f7f0cff2c11b988d5612210fa5809fce1ce879f67dc04fd9377cae9fa798494e8d6bbbdfa206d0078f69cab64cd58ce51ba17a2ab658cbea4f8392d52039f7da12719fbebba42a7c4eb3234194ab4687e8ce9f30b0f543dc5bce6bfdd10d77a4def5d58e41840fd859b7b2c463ebb47ee509e0f0fe3aade6f4f6b713e3309f78506744086d89c7d86f7a0e48c97d4742dd8c34e67f130c25d0b648cb9c90530e335dbed52cc7a49bd23131e033222a3b4a2af8e6aa28feb5ace2e235d3977dbf774dec0c355b5c874a526fec0fb3728f05048844fe1b698b7ffc765053bfefcbefbc23c2251714de2f804137356946309fb60d1cc577f9b09aa4d956a520796f32b9c9029c52fe510a5aa60de80518a770b0595ed58f88d052143f039ade8e9159bdf80b629f8654144eadf77956042db4816cff0f503a6e98b86207498f45466c59dcf1dfa29dab07b2efef04d7352af47038215dcb69fdeea56366cd90a3e5a19be302ceacddc92c52fbbd0dfec48d381f56e12c80a53fd3da6204ab6f65038cef05b56e03a4f56cb6ad3d18581891ac1f753bc79fa75beb21ce64aa5c34791cfc2121698c445acf407b8f313f916ea6a76d5edf59a08b02e523853727cef2d85c27563165279bde21ff00b858f57656b781e63ee6ca48705c691d5b1624dba67b7de5686034624299d1068b9fe142b6cda1cfba51b8a7e3bd8ae95c90fd767bedd56e700eda9b85934dc685dfce5a9fd0fde731f032335ac24c3d22d28aaa2e7fb4b9fd7b6e1eb63b5d14885e6e3624974ff96888b9701d1e0373ac34eda5e26b8346e467cf2d7b85d1810ece8fff30a1de84299f425bada2fb24ea0d5f2c1bc462fa3df559c0100fb408e66d5ebfce1b9161c21e851546daf2a255574d51f9f3fff8e8fd8735a99e90afda375580a4071abb0d39eef378fe8bcd760f322a034bde30dff21cf50e0f626310f1e41d48bb2cd116ac69a0283b3d4c9da8e370647b35aee2ee32fa42b4a98771eba6b3fcb94d2590df4c1b919635e23158d045dd9bc0ee6f05be3ac37ea5329ba3590168db61fcf9758604198b646d96dfae14a075a2cd965eed8ad9149ebe0c86cc48a174d480966fc3877e68c9205e029e46a88bdc32428e777c86c9af5cf195618faeb6c3b2d56706ee1b2d8cb1d3772a5df2475a75117c66e9f05f5638ddf2648d5bef8748bddd186ad254db77a2873dc1b8f9a47ad627f14cb653b0e32903b4cfdc75223889c6c6acd550124fe674feb87cc627f30049739963f3d26bf95a8402d265f30e49236b1fed0ba5d93e1f7dc2da81f8f95dabe4f5a567ee90a4ab3a279a3b6d3bfc49f00a9b717530f3b3d786b82cbdfb7ef47696f223f84b4b61351c90ba5d622f882d05d4a4b954f6d6ef33a3016ebb2934d4b8d13fd34e3b49ea7d6552d6888e1761a95b92e3508fcf1c75fe8afccb893dd05545941b95ad284e55bc0dd3812737eaef6ffc9ad5e6da79a5a5c8ca05e5bd0aa2a97d6882795378f5fd29721b180dd7e7d9efe60a721671070b2c9c2c130aca4987ec331851b5bae02b941614c6ca244aa67b48b2c9da68e07a315ef85698799dfd1f1b605670e2dd92b6e0d56a085b4b0e0391d2b6b4ade24f912e20b3f7e47de832659aae55aa2250ccc08f7bbab990b866677ea0e7ff676d56abd7761850e7a5bf8db3a7cd1fae63b8052199a0069298a08bd89d03d755ebfd36aa315509001950795c9d5273a5a14a8d80190309bc71e4c64ea299b32e0f8fb34560b6bed7a36554938b4c57943abdbd7bf517284db75d0c495e6e73edc84383b67aaa0c6fb9bef5f34173ed64302a5c1377f2ddf89183e1b83d9198b2d1f1bcb57059312ca419840bc18d8e765ef2ed5ae532d99c38df6099da4a995690be18e120d6479a657e2281adcc17dae36c2895a29a0fe3d4ec5ac9f7ffca5a56cd61ad73b454fd5e4539543996230a544eb1f4681a1ff706c73f7a63f4b68a696ee82364e184e114bd5f826717435c9913430487b9e500aa74e43912d8b29d6aaa41d20ce2a3a9ef0e9f447005745b57f59e69b58f82223c80362f3be58fd7a70733dc498aedbce64884b5db51d3b4ca0e35bf70f701de512c9f60d19c0af06cc93e8ec98c9c6cb0434fbfa8279b8693029efd68ccd6abe2493e93b3090e311533b71a26da0cceb4a5edb1f498950e29357e80ff6ab5a7e12feee9a718f9a590ee26da07ed89cf1b89cf2d1a73ad286d2e54eb3e9e5f06d15e6e7be2b0c03177ccae178fb9ebaadb0c2d9be2c4c7fea96746a6f88180a22c49ceb151ca411664e038b1d372f05478ef8108f246558668294f88e45da3c4faf91a202fb23bc8d21e5497b172bdc9746e49b9cedbeab4b3db8901303bc95dd1fbc8d298d91f4e883640570e51026decde8d35eeccb9dd3181bf089c302d4a2438c0691fd9e5ee8cb5edf5012e2d804157e08d9f1ec3218e88dd9ee4a5d6fcc0771b3b6989342345f92fe8b75574ea11b6c64db57cbf5bbc2d58ba48831d55d317c1f0a6a88f09dc3fd91515b8b37b6b70fde661d2b772ea1b5550bb2d6ca56f407d8bb5ccee810b5fe0b0d6096bcff85b8b8b3b1bbd9bf01e6f3fdd11aafab3e2d771c7cda2bcb82174b4a2fc75036b25f1fac73a44fbef3448a42eb807a208e8558b0956b18f412d1ec15105f13a60213d10253e2f7140c1f3afa4b06b81d75aa8bf9a8af8267825dfc0e2158a48de7e04dbadbd2999bbc07939ca8a0ff6a8d408240367327a72cbbdaad877d52fdcf47d759eb0b302bbb1cce3f11d35d65947a88435b8270fab932e32bcf12e8c8f5e8dfaff42e3393d3ea9560f2125334780d2438256a82c9076ab41806987eaba1ffa8253ace5ce3689feb6a29d551f5ef5efd825681a2905feff649deb2c0c63735b31f51b03e6fe7aa88fa498dbeffba19f39cbf1aa5f7a1df89fdba9ea52edf4f659dd8981b98f411f51a7d8e8bdfb97bc5c27460b2a642fac38cc7a7d5a3e03a18099625436bf571edd8078a7584caab9a503d56c5a2ea64f6f7e3b86bb47f59a4a249f65dbc5c0ad1e2c07add3694e0ae4291ee4c060669cfb9c2e80860aa687c23347b36555cc111d5e411c5ca64cfae78c6eefa1666ad708f3b535ea02d570ebe9ca66dbe2b972b62c591a0278aba6cf40dfc617e2f3639f55e172aec6db509acb8a3f8f38fa1c139060b62885a97fbcad3b0bb55891d65bc9cdea9aa2913aa01f6c0b5c071a78dc7d49c758e682f1935c72fb6e0476e00c08a40a42fdeb2bdda5de454babc4079b95ca35514424dc7b0bda09909bec70aabdd1181c47dc2f3f578e1238e757bcdc44b1a5aaca082f60e211acc7b3be29d6a61cc2f973c2e471d9e6a1c857bce9f4bbe9d05171fff44828296c3075996c349633f313c849911a78bb47567683f60b9debe0f5fcc58150161220703aa570832798d6a52ff4da4600e7b9d5decfa6790c46293469e1184e90d5046c87ca81b319d34488829846c121d069ded6ae0e05c0fa583dd3576179429b5aa808007ac4bb1e937a24b5bbcb0d6f5107d9d6a20850c06249086e9aea24c3b1b7b417bbfe291aa894a789852d7ad6d4c776d1cba0e6d8c3936eabb53d0852e77e28c5c550545279a34d64f890430f75b61fd159d12a3e7b648aa5706096cceef1dfdaf7c48cc356c5b0d21edcbdee1447ce44427fcce305609d1920b19500bba3af93993c46cb9c5fcac48b820cc8e0e350b175cb74fc3b20ef629b0ad9f310a7c7562187e0e8f633c4cd31e9632b0f6bab1e2811cc7123efb567825d0b221bc2746e22d1b4873dceeaf21e5ed998cbb0b159f6185b0f55d13ceb51028d0b111d048b0873f48aa167380a61b2b1e40bc3c3a5a7012cc12c90333b3d4a978d2b9784251e8d4047b6a0336da18518a7761f69b51ea6cb69f1fcc92f9ae4eaf22fb26e75d23f36d1476df08f30cd31d8290684c635193f45764fe1a171119b69773b314ddabf551bc3c568df979f076e2dc9379b7bf1a96e55f14ef333396f0a2758a98371afb39cec413fda3f3bebd55b26ecfbed872442ecdb6e308fcb17c9a36cd8a4a00b4cb77da7f2d7b9401ea05cc3be276f17860d2482e2bc57e7f50837e55a30bd7e707f3e380c1a4040e91f3fbc6bcef1b751163a3b58a1483cc3"}}) kernel console output (not intermixed with test programs): t_r:tmpfs_t tclass=dir permissive=1 [ 682.578831][ T187] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 682.596630][T10592] DVB: Unable to find symbol stv0299_attach() [ 682.639328][T14573] gadgetfs: bound to dummy_udc driver [ 682.650993][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.754613][ T187] usb 1-1: config 0 descriptor?? [ 682.768219][T10592] DVB: Unable to find symbol tda8083_attach() [ 682.801212][T10592] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 682.855643][ T30] audit: type=1400 audit(3933219125.949:3301): avc: denied { write } for pid=14583 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 682.898179][T10592] usb 7-1: USB disconnect, device number 13 [ 682.932763][ T5743] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 682.985590][ C0] gadgetfs: connected [ 682.990006][ T5743] gadgetfs: disconnected [ 683.263528][ T187] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 684.765027][T14550] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2431'. [ 684.810323][T14600] kAFS: unable to lookup cell '' [ 684.841627][T14550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 684.903786][T14603] FAULT_INJECTION: forcing a failure. [ 684.903786][T14603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.916912][T14603] CPU: 0 UID: 0 PID: 14603 Comm: syz.6.2445 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 684.916931][T14603] Tainted: [L]=SOFTLOCKUP [ 684.916935][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 684.916941][T14603] Call Trace: [ 684.916946][T14603] [ 684.916950][T14603] dump_stack_lvl+0x100/0x190 [ 684.916969][T14603] should_fail_ex.cold+0x5/0xa [ 684.916983][T14603] _copy_from_user+0x2e/0xd0 [ 684.917000][T14603] ____sys_sendmsg+0x1d1/0xbe0 [ 684.917019][T14603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.917042][T14603] ___sys_sendmsg+0x190/0x1e0 [ 684.917055][T14603] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.917065][T14603] ? __lock_acquire+0x49f/0x1a40 [ 684.917079][T14603] ? get_pid_task+0x106/0x250 [ 684.917104][T14603] __sys_sendmsg+0x160/0x210 [ 684.917118][T14603] ? __pfx___sys_sendmsg+0x10/0x10 [ 684.917140][T14603] do_syscall_64+0x115/0x870 [ 684.917154][T14603] ? clear_bhb_loop+0x40/0x90 [ 684.917167][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.917179][T14603] RIP: 0033:0x7fed4019e019 [ 684.917189][T14603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.917200][T14603] RSP: 002b:00007fed410f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.917211][T14603] RAX: ffffffffffffffda RBX: 00007fed40425fa0 RCX: 00007fed4019e019 [ 684.917218][T14603] RDX: 0000000000000040 RSI: 0000200000000800 RDI: 0000000000000005 [ 684.917225][T14603] RBP: 00007fed410f6090 R08: 0000000000000000 R09: 0000000000000000 [ 684.917236][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.917242][T14603] R13: 00007fed40426038 R14: 00007fed40425fa0 R15: 00007ffe94038758 [ 684.917257][T14603] [ 685.400433][ T187] usb 1-1: reset high-speed USB device number 71 using dummy_hcd [ 685.791739][T14624] gfs2: error -5 reading superblock [ 686.928281][T10592] usb 1-1: USB disconnect, device number 71 [ 687.343171][T14648] fuse: Unknown parameter 'fsuuid' [ 687.991111][ T30] audit: type=1326 audit(3933219131.079:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14645 comm="syz.5.2459" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d339e019 code=0x0 [ 688.082162][ T187] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 688.089750][T10592] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 688.310188][ T187] usb 7-1: Using ep0 maxpacket: 32 [ 688.318421][T10592] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 688.329350][ T187] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 688.359033][T10592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.382742][ T187] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 688.417647][T10592] usb 2-1: Product: syz [ 688.439964][T10592] usb 2-1: Manufacturer: syz [ 688.538717][ T187] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 688.564931][T10592] usb 2-1: SerialNumber: syz [ 688.648008][ T187] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 688.700581][ T187] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 688.716145][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.741637][ T187] usb 7-1: Product: syz [ 688.757786][ T187] usb 7-1: Manufacturer: syz [ 688.774506][ T187] usb 7-1: SerialNumber: syz [ 688.799342][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 688.807952][ T187] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input76 [ 689.853464][T10592] rtl8150 2-1:1.0: couldn't reset the device [ 689.876468][T10592] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 689.908782][ T30] audit: type=1326 audit(3933219132.999:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14649 comm="syz.6.2460" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed4019e019 code=0x0 [ 689.953296][T14671] vlan0: entered allmulticast mode [ 689.978173][T14671] bond0: entered allmulticast mode [ 689.988235][T10592] usb 2-1: USB disconnect, device number 87 [ 690.007997][T14671] bond_slave_0: entered allmulticast mode [ 690.037984][T14671] bond_slave_1: entered allmulticast mode [ 690.058804][T14671] batadv0: entered allmulticast mode [ 690.091876][T14671] bridge0: port 3(vlan0) entered blocking state [ 690.113667][T14671] bridge0: port 3(vlan0) entered disabled state [ 690.143568][T14671] vlan0: entered promiscuous mode [ 690.163192][T14671] bond0: entered promiscuous mode [ 690.181934][T14671] bond_slave_0: entered promiscuous mode [ 690.201188][T14671] bond_slave_1: entered promiscuous mode [ 690.219697][T14671] batadv0: entered promiscuous mode [ 690.249416][T14671] bridge0: port 3(vlan0) entered blocking state [ 690.255737][T14671] bridge0: port 3(vlan0) entered forwarding state [ 690.295831][T14672] bond0: (slave batadv0): Releasing backup interface [ 690.315336][T14672] batadv0: left promiscuous mode [ 690.362479][ T30] audit: type=1400 audit(3933219133.459:3304): avc: denied { mounton } for pid=14681 comm="syz.0.2469" path="/487/file0" dev="tmpfs" ino=2613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 690.397362][T14672] batadv0: left allmulticast mode [ 690.585461][T14672] bridge_slave_0: left allmulticast mode [ 690.591258][T14672] bridge_slave_0: left promiscuous mode [ 690.607478][T14672] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.638381][T14672] bridge_slave_1: left allmulticast mode [ 690.645236][T14672] bridge_slave_1: left promiscuous mode [ 690.695778][T14672] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.222300][ T187] imon:send_packet: packet tx failed (-71) [ 691.256635][T14672] bond0: (slave bond_slave_0): Releasing backup interface [ 691.265228][ T187] imon 7-1:155.0: panel buttons/knobs setup failed [ 691.277476][ T187] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 691.292471][T14672] bond_slave_0: left promiscuous mode [ 692.114195][T14672] bond_slave_0: left allmulticast mode [ 692.125836][ T187] (id 0x00) [ 692.179558][T14672] bond0: (slave bond_slave_1): Releasing backup interface [ 692.216772][T14672] bond_slave_1: left promiscuous mode [ 692.236212][ T187] rc_core: IR keymap rc-imon-pad not found [ 692.251680][T14672] bond_slave_1: left allmulticast mode [ 692.265140][ T187] Registered IR keymap rc-empty [ 692.279619][ T187] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 692.328365][ T187] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 692.365136][T14672] team0: Port device team_slave_0 removed [ 692.380369][ T187] imon:send_packet: packet tx failed (-71) [ 692.449115][ T187] imon 7-1:155.0: remote input dev register failed [ 692.471128][ T187] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 692.481773][T14672] team0: Port device team_slave_1 removed [ 692.505633][T14672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.535848][ T187] imon 7-1:155.0: unable to initialize intf0, err 0 [ 692.554283][T14672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.568944][ T187] imon:imon_probe: failed to initialize context! [ 692.596999][ T187] imon 7-1:155.0: unable to register, err -19 [ 692.605721][T14672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.641038][T14672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.652354][ T187] usb 7-1: USB disconnect, device number 14 [ 692.688109][T14672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 693.006190][ T8566] bridge0: port 3(vlan0) entered disabled state [ 696.564004][ T30] audit: type=1400 audit(3933219139.649:3305): avc: denied { bind } for pid=14728 comm="syz.6.2481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 697.652636][T14740] fuse: Unknown parameter '' [ 699.453617][T14752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'. [ 699.516563][ T30] audit: type=1400 audit(3933219142.609:3306): avc: denied { create } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 699.616502][ T30] audit: type=1400 audit(3933219142.629:3307): avc: denied { setopt } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 699.760891][ T30] audit: type=1400 audit(3933219142.629:3308): avc: denied { connect } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 699.899273][T14765] overlayfs: failed to resolve './file0': -2 [ 699.917971][T14763] syzkaller0: entered promiscuous mode [ 699.925067][ T30] audit: type=1400 audit(3933219142.629:3309): avc: denied { name_connect } for pid=14753 comm="syz.1.2488" dest=20001 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 699.976678][T14763] syzkaller0: entered allmulticast mode [ 700.510677][ T30] audit: type=1400 audit(3933219142.659:3310): avc: denied { create } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 700.679471][T14775] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 700.700871][ T30] audit: type=1400 audit(3933219142.659:3311): avc: denied { create } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 701.709473][T14775] bond5: entered promiscuous mode [ 702.692612][T14775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 702.706942][ T30] audit: type=1400 audit(3933219142.659:3312): avc: denied { create } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 703.669114][T14778] ipvlan3: entered allmulticast mode [ 703.720689][T14778] bond5: entered allmulticast mode [ 703.733367][ T30] audit: type=1400 audit(3933219142.669:3313): avc: denied { connect } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 703.851302][T14779] ipvlan4: entered allmulticast mode [ 703.882428][ T30] audit: type=1400 audit(3933219142.669:3314): avc: denied { create } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 703.906173][T14786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=14786 comm=syz.3.2486 [ 703.952845][T14775] bond5: (slave bridge1): making interface the new active one [ 704.004843][T14775] bridge1: entered promiscuous mode [ 704.010876][ T30] audit: type=1400 audit(3933219142.669:3315): avc: denied { create } for pid=14753 comm="syz.1.2488" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 704.049937][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2498'. [ 704.060766][T14775] bridge1: entered allmulticast mode [ 704.080768][T14775] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 704.126506][ T30] audit: type=1400 audit(3933219142.669:3316): avc: denied { ioctl } for pid=14753 comm="syz.1.2488" path="socket:[54874]" dev="sockfs" ino=54874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 704.396683][ T30] audit: type=1400 audit(3933219143.589:3317): avc: denied { setopt } for pid=14767 comm="syz.1.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 704.434060][T14796] fuse: Unknown parameter '' [ 704.580007][T14793] binder: 14792:14793 ioctl c0306201 200000000180 returned -14 [ 704.932574][T12610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.947621][T12610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.955530][T12610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.963269][T12610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.970561][T12610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.991093][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.998648][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 705.005954][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 705.013588][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 705.020858][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 705.923628][T14829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.927502][ T8595] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.100111][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 707.186112][ T5623] Bluetooth: hci5: command tx timeout [ 707.466945][ T8595] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.534961][ T8595] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.705812][ T8595] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.807742][T14858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2516'. [ 708.946822][T14861] fuse: Unknown parameter '' [ 709.264004][ T5623] Bluetooth: hci5: command tx timeout [ 709.277817][T14866] syzkaller0: entered promiscuous mode [ 709.290543][T14866] syzkaller0: entered allmulticast mode [ 709.737900][T14880] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 709.840121][T14880] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 709.943444][T14880] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 710.102523][ T30] audit: type=1400 audit(3933219153.189:3318): avc: denied { write } for pid=14874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.631051][ T5707] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 710.649143][T14880] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 710.852128][ T5707] usb 7-1: Using ep0 maxpacket: 8 [ 711.049479][ T8595] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 711.342058][ T5623] Bluetooth: hci5: command tx timeout [ 711.542782][ T5707] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 711.565032][ T8595] bridge1 (unregistering): left promiscuous mode [ 711.586729][ T5707] usb 7-1: config 0 has no interface number 0 [ 711.598159][ T8595] bridge1 (unregistering): left allmulticast mode [ 711.619041][ T5707] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 711.644032][ T30] audit: type=1400 audit(3933219154.739:3319): avc: denied { write } for pid=14903 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.679347][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.704315][ T5707] usb 7-1: Product: syz [ 711.708709][ T8595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.730708][ T5707] usb 7-1: Manufacturer: syz [ 711.745267][ T5707] usb 7-1: SerialNumber: syz [ 711.765234][ T8595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.779533][ T5707] usb 7-1: config 0 descriptor?? [ 711.793185][ T8595] bond0 (unregistering): Released all slaves [ 711.803434][ T5707] usb 7-1: selecting invalid altsetting 1 [ 711.817490][ T5707] dvb_ttusb_budget: ttusb_init_controller: error [ 711.826707][ T8595] bond1 (unregistering): Released all slaves [ 711.840224][ T5707] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 711.878992][ T8595] bond2 (unregistering): Released all slaves [ 711.915428][ T8595] bond3 (unregistering): Released all slaves [ 711.933185][ T5707] DVB: Unable to find symbol stv0299_attach() [ 711.999519][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 712.083767][ T8595] : left promiscuous mode [ 712.091267][ T5707] DVB: Unable to find symbol tda8083_attach() [ 712.134622][ T5707] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 712.187456][ T5707] usb 7-1: USB disconnect, device number 15 [ 712.594827][T14813] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.653312][T14813] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.705276][T14813] bridge_slave_0: entered allmulticast mode [ 712.749756][T14813] bridge_slave_0: entered promiscuous mode [ 712.820150][T14813] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.874129][T14813] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.956158][T14813] bridge_slave_1: entered allmulticast mode [ 712.995659][T14813] bridge_slave_1: entered promiscuous mode [ 713.220366][T14813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.330889][T14813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.423533][ T5623] Bluetooth: hci5: command tx timeout [ 713.587348][ T8595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.643129][ T30] audit: type=1400 audit(3933219156.729:3320): avc: denied { write } for pid=14923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.668837][ T8595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.720331][ T8595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.761316][ T8595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.852720][ T8595] veth1_macvtap: left promiscuous mode [ 713.887323][ T8595] veth0_macvtap: left promiscuous mode [ 713.898597][ T30] audit: type=1400 audit(3933219156.989:3321): avc: denied { write } for pid=14957 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.931623][ T8595] veth1_vlan: left promiscuous mode [ 714.046833][ T8595] veth0_vlan: left promiscuous mode [ 714.492043][T10592] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 714.592122][ T5707] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 715.391593][ T8595] team0 (unregistering): Port device team_slave_1 removed [ 715.404530][T14982] sctp: [Deprecated]: syz.0.2538 (pid 14982) Use of int in max_burst socket option. [ 715.404530][T14982] Use struct sctp_assoc_value instead [ 715.439125][T14982] CIFS: Attempting to mount //1#7.0.0.1/7/䅯yshare [ 715.447344][T10592] usb 6-1: Using ep0 maxpacket: 32 [ 715.457165][ T5707] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 715.467596][ T8595] team0 (unregistering): Port device team_slave_0 removed [ 715.476158][ T5707] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.494574][T10592] usb 6-1: config index 0 descriptor too short (expected 27632, got 27) [ 715.512902][T10592] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 715.534957][ T5707] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 715.550492][T14982] CIFS: VFS: Error connecting to socket. Aborting operation. [ 715.558777][T14982] CIFS: VFS: cifs_mount failed w/return code = -4 [ 715.565672][T10592] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 715.579117][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.596109][T10592] usb 6-1: config 1 has no interface number 0 [ 715.611558][T10592] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.651420][T10592] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 715.696269][T10592] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 715.708037][T10592] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.717599][T14813] team0: Port device team_slave_0 added [ 715.740256][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 715.757320][T10592] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 715.770571][T14974] ip6gre1: entered allmulticast mode [ 715.783327][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 715.804991][ T8566] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 715.815960][T14813] team0: Port device team_slave_1 added [ 715.848312][ T5707] usb 7-1: GET_CAPABILITIES returned 0 [ 715.859737][ T5707] usbtmc 7-1:16.0: can't read capabilities [ 715.933011][T14813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.962625][T10592] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 715.990182][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.027052][T14990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 716.150776][T14813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.213708][T14813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.005843][T14813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.044180][T10592] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 717.188876][ T5707] usb 7-1: USB disconnect, device number 16 [ 717.205714][T14813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.341764][ T5743] usb 6-1: USB disconnect, device number 31 [ 717.357210][ T8595] IPVS: stop unused estimator thread 0... [ 717.364238][ T5743] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 717.454532][T14994] SELinux: invalid class [ 717.470859][T14813] hsr_slave_0: entered promiscuous mode [ 717.503043][T14813] hsr_slave_1: entered promiscuous mode [ 717.543993][T14813] debugfs: 'hsr0' already exists in 'hsr' [ 717.566983][T14994] SELinux: failed to load policy [ 717.574251][T14813] Cannot create hsr debugfs directory [ 717.589226][ T30] audit: type=1400 audit(3933219160.679:3322): avc: denied { write } for pid=14993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.805325][ T30] audit: type=1400 audit(3933219160.899:3323): avc: denied { write } for pid=15014 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.115549][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 719.502107][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.472515][T10592] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 721.598202][ T30] audit: type=1400 audit(3933219164.689:3324): avc: denied { write } for pid=15028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.663738][T10592] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 721.708623][T10592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.764827][T10592] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 721.828942][T10592] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 721.934915][ T30] audit: type=1400 audit(3933219165.029:3325): avc: denied { write } for pid=15061 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.968208][T10592] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 722.946908][T15044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.955357][T15060] tipc: Cannot configure node identity twice [ 723.947493][T15060] tipc: Cannot configure node identity twice [ 723.958776][T15044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.033963][T15065] tipc: Enabling of bearer rejected, failed to enable media [ 726.026540][ T30] audit: type=1400 audit(3933219169.109:3326): avc: denied { map } for pid=15079 comm="syz.5.2554" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 726.249372][T15089] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 726.359575][ T30] audit: type=1400 audit(3933219169.449:3327): avc: denied { ioctl } for pid=15084 comm="syz.0.2555" path="socket:[56628]" dev="sockfs" ino=56628 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 726.653446][ T30] audit: type=1400 audit(3933219169.659:3328): avc: denied { write } for pid=15069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 726.862086][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 726.900594][ T30] audit: type=1400 audit(3933219169.989:3329): avc: denied { write } for pid=15107 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 727.339001][T14813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 727.394939][T14813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.456754][T14813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 727.547937][T14813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.574081][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x11e) = 0xbe702911 [ 727.584890][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x186) = 0x800 [ 727.595846][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x11e) = 0xbe702911 [ 727.610867][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 727.627862][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 727.652374][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 727.669128][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 727.693464][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 727.710351][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 727.734895][T15116] kvm: kvm [15115]: vcpu0, guest rIP: 0x610c Unhandled WRMSR(0x187) = 0x800 [ 728.305759][T14813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 728.364970][T14813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.420831][T14813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 728.458996][T14813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.607459][ T30] audit: type=1400 audit(3933219171.699:3330): avc: denied { write } for pid=15119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.644692][ T5814] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 728.682166][T14813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.726129][T14813] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.757195][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.764328][ T8596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.786637][ T30] audit: type=1400 audit(3933219171.879:3331): avc: denied { write } for pid=15147 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.832214][ T5743] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 728.840674][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 728.854823][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.861916][ T8595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.893734][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 728.941538][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 728.968390][T14813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 729.000763][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 729.016973][T14813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 729.042034][ T5743] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 729.057888][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 729.081351][ T5743] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.125486][ T5814] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 729.137899][ T5743] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 729.161393][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.201574][ T5814] usb 2-1: Product: syz [ 729.206802][ T5743] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 729.237900][ T5814] usb 2-1: Manufacturer: syz [ 729.261247][ T5814] usb 2-1: SerialNumber: syz [ 729.275346][ T5743] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.139920][ T5814] usb 2-1: config 0 descriptor?? [ 730.147216][ T5743] usb 7-1: config 0 descriptor?? [ 730.171686][T15131] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 730.223007][ T5814] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input78 [ 730.327274][ T30] audit: type=1400 audit(3933219173.419:3332): avc: denied { write } for pid=15150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.597049][ T30] audit: type=1400 audit(3933219173.559:3333): avc: denied { append } for pid=15169 comm="syz.5.2567" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 730.634011][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 730.717434][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 730.748854][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 730.784018][ T30] audit: type=1400 audit(3933219173.879:3334): avc: denied { write } for pid=15172 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.826635][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 730.874899][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 730.904582][ T5707] usb 2-1: USB disconnect, device number 88 [ 730.910509][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 730.939405][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 730.994979][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 731.056116][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 731.092451][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 731.120389][ T5743] hid-multitouch 0003:0457:07DA.0020: unknown main item tag 0x0 [ 731.157365][T14813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.179593][ T5743] hid-multitouch 0003:0457:07DA.0020: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0 [ 731.277179][ T5743] usb 7-1: USB disconnect, device number 17 [ 731.288187][T14813] veth0_vlan: entered promiscuous mode [ 731.340233][T14813] veth1_vlan: entered promiscuous mode [ 731.371231][T15186] fido_id[15186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 731.525052][T14813] veth0_macvtap: entered promiscuous mode [ 731.672935][T14813] veth1_macvtap: entered promiscuous mode [ 732.472222][T15199] bond1: left promiscuous mode [ 732.476998][T15199] gre1: left promiscuous mode [ 732.483130][T15199] macsec1: left promiscuous mode [ 732.488122][T15199] macsec1: left allmulticast mode [ 732.493570][T15199] dummy0: left allmulticast mode [ 732.499754][T15199] vxcan2: left promiscuous mode [ 732.508213][T15199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 732.517848][T15199] bond5: left promiscuous mode [ 732.522810][T15199] bridge1: left promiscuous mode [ 732.528416][T15199] ipvlan3: left allmulticast mode [ 732.533948][T15199] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 732.541267][T15199] ipvlan4: left allmulticast mode [ 732.546341][T15199] bond5: left allmulticast mode [ 732.551172][T15199] bridge1: left allmulticast mode [ 732.556926][T15199] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 732.571808][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.578904][ T8562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.654407][ T30] audit: type=1400 audit(3933219175.749:3335): avc: denied { write } for pid=15177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.741681][T14813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.759394][T15203] IPVS: Scheduler module ip_vs_sip not found [ 732.805739][T14813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.875509][ T8595] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.901424][ T30] audit: type=1400 audit(3933219175.989:3336): avc: denied { write } for pid=15208 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.933716][ T8595] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.057677][ T8590] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 733.082084][ T5707] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 734.047331][ T8590] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 734.067746][ T187] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 735.045089][ T5814] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 735.073225][ T993] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 736.183278][ T8595] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.304499][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.372877][ T5814] usb 2-1: device not accepting address 89, error -71 [ 736.462114][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 736.532687][ T8595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.585906][ T8595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.690628][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.727836][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.692788][T15243] fuse: Unknown parameter '' [ 737.798880][ T30] audit: type=1400 audit(3933219180.889:3337): avc: denied { write } for pid=15215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.970068][ T30] audit: type=1400 audit(3933219182.059:3338): avc: denied { write } for pid=15248 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.022107][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 739.196066][ T993] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 739.376987][ T993] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 739.409146][ T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.456949][ T993] usb 4-1: Product: syz [ 739.481450][ T993] usb 4-1: Manufacturer: syz [ 739.518684][ T993] usb 4-1: SerialNumber: syz [ 739.555882][ T993] usb 4-1: config 0 descriptor?? [ 739.593869][ T30] audit: type=1400 audit(3933219182.669:3339): avc: denied { mount } for pid=15265 comm="syz.6.2582" name="/" dev="hugetlbfs" ino=57832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 739.812321][ T30] audit: type=1400 audit(3933219182.759:3340): avc: denied { unmount } for pid=12608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 739.845045][ T993] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 740.661799][ T993] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 740.746526][ T993] usb 4-1: USB disconnect, device number 61 [ 741.072000][ T187] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 741.622752][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.929668][ T187] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.950381][ T187] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.012654][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2591'. [ 742.033876][ T187] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 742.053687][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.079140][ T187] usb 2-1: Product: syz [ 742.089769][T15292] ipvlan2: entered allmulticast mode [ 742.100356][ T187] usb 2-1: Manufacturer: syz [ 742.105271][T15292] syz_tun: entered allmulticast mode [ 742.120694][ T187] usb 2-1: SerialNumber: syz [ 742.203272][T15289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.222729][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 742.285848][T15294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.349235][ T187] usb 2-1: usb_control_msg returned -71 [ 742.406352][ T187] usbtmc 2-1:1.0: can't read capabilities [ 742.439723][ T187] usb 2-1: USB disconnect, device number 91 [ 742.481898][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 742.523984][ T993] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 742.922967][ T993] usb 7-1: Using ep0 maxpacket: 32 [ 742.975012][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 742.996065][ T993] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 743.052089][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 743.080661][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 743.102492][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 743.119024][ T993] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 743.136341][ T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.155812][ T993] usb 7-1: Product: syz [ 743.166012][ T993] usb 7-1: Manufacturer: syz [ 743.623822][ T993] usb 7-1: SerialNumber: syz [ 743.749116][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.958227][ T993] usb 7-1: config 0 descriptor?? [ 743.998115][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.015504][T15297] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 744.091351][ T993] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input79 [ 744.456837][T15324] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 744.919190][ T9] usb 2-1: string descriptor 0 read error: -71 [ 744.931625][ T30] audit: type=1400 audit(3933219188.009:3341): avc: denied { nlmsg_write } for pid=15323 comm="syz.0.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 744.967649][ T9] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 745.025409][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.097326][ T9] usb 2-1: can't set config #1, error -71 [ 745.137183][ T993] usb 7-1: USB disconnect, device number 18 [ 745.143166][ C0] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 745.143193][ C0] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19 [ 745.179199][ T9] usb 2-1: USB disconnect, device number 92 [ 745.222811][T15334] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 747.319269][ T30] audit: type=1400 audit(3933219190.409:3342): avc: denied { write } for pid=15346 comm="syz.6.2605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 747.342426][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 747.424398][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 747.480232][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2607'. [ 747.506858][ T30] audit: type=1400 audit(3933219190.439:3343): avc: denied { watch } for pid=15346 comm="syz.6.2605" path="/119/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 747.588447][T15362] FAULT_INJECTION: forcing a failure. [ 747.588447][T15362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.620196][T15361] overlay: Unknown parameter 'uid<00000000004294967295' [ 747.665333][ T30] audit: type=1400 audit(3933219190.439:3344): avc: denied { watch_sb } for pid=15346 comm="syz.6.2605" path="/119/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 747.691319][T15362] CPU: 0 UID: 0 PID: 15362 Comm: syz.0.2610 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 747.691338][T15362] Tainted: [L]=SOFTLOCKUP [ 747.691341][T15362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 747.691351][T15362] Call Trace: [ 747.691355][T15362] [ 747.691359][T15362] dump_stack_lvl+0x100/0x190 [ 747.691378][T15362] should_fail_ex.cold+0x5/0xa [ 747.691392][T15362] _copy_from_user+0x2e/0xd0 [ 747.691408][T15362] copy_msghdr_from_user+0x9f/0x4c0 [ 747.691421][T15362] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 747.691439][T15362] ___sys_sendmsg+0x106/0x1e0 [ 747.691450][T15362] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.691460][T15362] ? __lock_acquire+0x49f/0x1a40 [ 747.691474][T15362] ? get_pid_task+0x106/0x250 [ 747.691500][T15362] __sys_sendmsg+0x160/0x210 [ 747.691514][T15362] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.691536][T15362] do_syscall_64+0x115/0x870 [ 747.691549][T15362] ? clear_bhb_loop+0x40/0x90 [ 747.691563][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.691574][T15362] RIP: 0033:0x7f2b1d99e019 [ 747.691584][T15362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.691594][T15362] RSP: 002b:00007f2b1bbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.691606][T15362] RAX: ffffffffffffffda RBX: 00007f2b1dc25fa0 RCX: 00007f2b1d99e019 [ 747.691613][T15362] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 747.691619][T15362] RBP: 00007f2b1bbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 747.691626][T15362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.691633][T15362] R13: 00007f2b1dc26038 R14: 00007f2b1dc25fa0 R15: 00007ffc26c1fc78 [ 747.691647][T15362] [ 747.890961][ T30] audit: type=1400 audit(3933219190.709:3345): avc: denied { mounton } for pid=15350 comm="syz.5.2607" path="/file0" dev="ramfs" ino=58256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 747.942648][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 747.951706][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.959724][ T9] usb 2-1: Product: syz [ 747.964035][ T9] usb 2-1: Manufacturer: syz [ 747.968816][ T9] usb 2-1: SerialNumber: syz [ 747.978682][T15366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2612'. [ 748.052077][ T30] audit: type=1326 audit(3933219191.139:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15369 comm="syz.0.2613" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b1d99e019 code=0x0 [ 748.164025][T15374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.289942][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 748.321447][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 748.360702][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 748.443321][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 748.496647][ T9] usb 2-1: USB disconnect, device number 93 [ 748.675698][ T30] audit: type=1400 audit(3933219191.769:3347): avc: denied { append } for pid=15369 comm="syz.0.2613" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 749.116339][ T30] audit: type=1400 audit(3933219192.209:3348): avc: denied { write } for pid=15396 comm="syz.1.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 750.004309][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2623'. [ 751.816673][T15419] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2628'. [ 751.887877][T15419] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2628'. [ 752.115606][ T30] audit: type=1400 audit(3933219195.209:3349): avc: denied { accept } for pid=15421 comm="syz.1.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 753.215967][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2633'. [ 753.244486][ T187] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 753.422800][ T187] usb 2-1: device descriptor read/64, error -71 [ 753.659335][T15447] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2635'. [ 753.682747][ T187] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 753.796157][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2636'. [ 753.882066][ T187] usb 2-1: device descriptor read/64, error -71 [ 754.012487][ T187] usb usb2-port1: attempt power cycle [ 754.102071][ T5814] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 754.262278][ T5814] usb 4-1: Using ep0 maxpacket: 16 [ 754.279176][ T5814] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 754.288269][ T5814] usb 4-1: config 0 has no interface number 0 [ 754.335860][ T5814] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 754.372496][ T187] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 754.390019][ T5814] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 754.427015][ T187] usb 2-1: device descriptor read/8, error -71 [ 754.444369][ T5814] usb 4-1: config 0 interface 41 has no altsetting 0 [ 754.481638][ T5814] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 754.491277][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.529516][ T5814] usb 4-1: Product: syz [ 754.551620][ T5814] usb 4-1: Manufacturer: syz [ 754.574278][ T5814] usb 4-1: SerialNumber: syz [ 754.595812][ T5814] usb 4-1: config 0 descriptor?? [ 754.623405][T15450] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 754.630682][T15450] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 754.674092][ T187] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 754.726438][ T187] usb 2-1: device descriptor read/8, error -71 [ 754.852538][ T187] usb usb2-port1: unable to enumerate USB device [ 754.873468][T15450] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 754.908287][T15450] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 754.980287][T15459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2640'. [ 755.325163][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2640'. [ 755.368356][ T5814] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 755.402769][ T5814] usb 4-1: USB disconnect, device number 62 [ 755.462836][T15467] 9p: Could not find request transport: rdmport=0x0H*K6=70 [ 756.761719][T15476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.359758][ T30] audit: type=1400 audit(3933219201.449:3350): avc: denied { setattr } for pid=15499 comm="syz.6.2655" name="NETLINK" dev="sockfs" ino=59058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 758.481143][ T30] audit: type=1400 audit(3933219201.509:3351): avc: denied { append } for pid=15499 comm="syz.6.2655" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 758.507986][ T187] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 758.598313][ T30] audit: type=1800 audit(3933219201.649:3352): pid=15500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.2655" name="/" dev="sockfs" ino=59058 res=0 errno=0 [ 758.682243][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 758.692039][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 759.461625][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 759.501608][ T187] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 759.621993][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 760.323395][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 760.347053][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 760.380631][ T9] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 760.398027][ T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 760.418099][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.448866][ T9] usb 7-1: Product: ᠁ [ 760.473108][ T187] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 760.491921][ T9] usb 7-1: Manufacturer: Ⱓ [ 760.510489][ T9] usb 7-1: SerialNumber: syz [ 760.517797][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.553056][ T187] usb 2-1: Product: syz [ 760.571398][ T187] usb 2-1: Manufacturer: syz [ 760.598644][ T187] usb 2-1: SerialNumber: syz [ 760.620944][ T187] usb 2-1: config 0 descriptor?? [ 760.644706][T15522] FAULT_INJECTION: forcing a failure. [ 760.644706][T15522] name failslab, interval 1, probability 0, space 0, times 0 [ 760.668257][T15494] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 760.687266][ T187] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input80 [ 760.698629][T15522] CPU: 0 UID: 0 PID: 15522 Comm: syz.5.2662 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 760.698648][T15522] Tainted: [L]=SOFTLOCKUP [ 760.698652][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 760.698661][T15522] Call Trace: [ 760.698665][T15522] [ 760.698670][T15522] dump_stack_lvl+0x100/0x190 [ 760.698688][T15522] should_fail_ex.cold+0x5/0xa [ 760.698703][T15522] should_failslab+0xc2/0x120 [ 760.698723][T15522] __kmalloc_noprof+0xfc/0x820 [ 760.698736][T15522] ? rcu_is_watching+0x12/0xc0 [ 760.698753][T15522] ? tomoyo_realpath_from_path+0xb6/0x690 [ 760.698768][T15522] tomoyo_realpath_from_path+0xb6/0x690 [ 760.698783][T15522] tomoyo_path_number_perm+0x23c/0x580 [ 760.698799][T15522] ? tomoyo_path_number_perm+0x22e/0x580 [ 760.698816][T15522] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 760.698846][T15522] ? find_held_lock+0x2b/0x80 [ 760.698856][T15522] ? __fget_files+0x215/0x3d0 [ 760.698867][T15522] ? hook_file_ioctl_common+0x140/0x440 [ 760.698879][T15522] ? __fget_files+0x215/0x3d0 [ 760.698893][T15522] ? __fget_files+0x21f/0x3d0 [ 760.698906][T15522] security_file_ioctl+0xd3/0x230 [ 760.698924][T15522] __x64_sys_ioctl+0xb7/0x210 [ 760.698941][T15522] do_syscall_64+0x115/0x870 [ 760.698956][T15522] ? clear_bhb_loop+0x40/0x90 [ 760.698969][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.698980][T15522] RIP: 0033:0x7f18d339e019 [ 760.698990][T15522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.699000][T15522] RSP: 002b:00007f18d4308028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.699011][T15522] RAX: ffffffffffffffda RBX: 00007f18d3625fa0 RCX: 00007f18d339e019 [ 760.699018][T15522] RDX: 0000200000000080 RSI: 000000004008ae89 RDI: 0000000000000005 [ 760.699025][T15522] RBP: 00007f18d4308090 R08: 0000000000000000 R09: 0000000000000000 [ 760.699031][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.699037][T15522] R13: 00007f18d3626038 R14: 00007f18d3625fa0 R15: 00007ffe829d1dd8 [ 760.699052][T15522] [ 760.699068][T15522] ERROR: Out of memory at tomoyo_realpath_from_path. [ 761.098082][ T187] usb 2-1: USB disconnect, device number 98 [ 761.098115][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 761.154525][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.167389][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 761.456392][ T30] audit: type=1326 audit(3933219204.549:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15538 comm="syz.5.2667" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d339e019 code=0x0 [ 761.509425][T15540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.476831][ T5707] usb 7-1: USB disconnect, device number 19 [ 763.342403][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 765.288067][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 765.431191][ T30] audit: type=1400 audit(3933219208.519:3354): avc: denied { execute } for pid=15569 comm="syz.6.2675" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 765.503017][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 765.528472][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.555657][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 765.583240][ T993] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 765.610485][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 765.636540][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.665369][ T9] usb 2-1: config 0 descriptor?? [ 765.758160][ T993] usb 6-1: Using ep0 maxpacket: 8 [ 765.778475][ T993] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 765.790577][ T993] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 765.824202][ T993] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 765.858346][ T993] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 765.907649][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 765.918586][ T993] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 765.931185][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 765.958744][ T993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.967235][ T9] usb 2-1: USB disconnect, device number 99 [ 766.038881][ T993] usbtmc 6-1:16.0: bulk endpoints not found [ 767.167941][ T993] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 768.002744][T15586] netlink: 'syz.5.2674': attribute type 4 has an invalid length. [ 768.011726][T15586] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2674'. [ 768.121773][ T993] usb 7-1: Using ep0 maxpacket: 8 [ 768.854157][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 768.889468][T15592] syz.1.2681 (15592): attempted to duplicate a private mapping with mremap. This is not supported. [ 768.909385][ T993] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 768.941117][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.954297][T15595] input: syz1 as /devices/virtual/input/input81 [ 768.984548][ T993] usb 7-1: config 0 descriptor?? [ 769.149461][ T9] usb 6-1: USB disconnect, device number 32 [ 769.884737][ T993] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 770.729771][ T993] usb 7-1: USB disconnect, device number 20 [ 770.868092][T15613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2689'. [ 770.965245][ T5707] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 771.151475][ T5707] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 771.175930][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.218030][ T5707] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 771.420931][T15606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.446741][T15606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.541462][T15623] fuse: Unknown parameter '' [ 771.803351][T15625] fuse: Unknown parameter '' [ 772.942059][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.413462][ T993] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 773.572006][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 773.807869][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.376295][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.428309][ T993] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 774.458844][ T30] audit: type=1326 audit(3933219217.549:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15648 comm="syz.5.2701" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d339e019 code=0x0 [ 774.493472][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.504862][T15646] syzkaller0: entered promiscuous mode [ 774.514157][T15652] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 774.524339][T15646] syzkaller0: entered allmulticast mode [ 774.535901][ T993] usb 7-1: config 0 descriptor?? [ 774.978982][ T993] corsair 0003:1B1C:1B02.0021: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 775.256605][ T993] corsair 0003:1B1C:1B02.0021: Failed to get K90 initial state (error -71). [ 775.292659][ T993] usb 7-1: USB disconnect, device number 21 [ 775.890478][T15669] IPv6: Can't replace route, no match found [ 775.918328][T15669] FAULT_INJECTION: forcing a failure. [ 775.918328][T15669] name failslab, interval 1, probability 0, space 0, times 0 [ 775.930986][T15669] CPU: 0 UID: 0 PID: 15669 Comm: syz.6.2706 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 775.931004][T15669] Tainted: [L]=SOFTLOCKUP [ 775.931007][T15669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 775.931014][T15669] Call Trace: [ 775.931019][T15669] [ 775.931025][T15669] dump_stack_lvl+0x100/0x190 [ 775.931042][T15669] should_fail_ex.cold+0x5/0xa [ 775.931056][T15669] should_failslab+0xc2/0x120 [ 775.931071][T15669] kmem_cache_alloc_noprof+0x91/0x6a0 [ 775.931084][T15669] ? fib6_add+0xf49/0x1eb0 [ 775.931099][T15669] fib6_add+0xf49/0x1eb0 [ 775.931112][T15669] ? do_raw_spin_lock+0x128/0x260 [ 775.931128][T15669] ? __pfx_fib6_add+0x10/0x10 [ 775.931139][T15669] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 775.931155][T15669] ? __asan_memcpy+0x3c/0x60 [ 775.931168][T15669] ip6_route_add+0xf9/0x1d0 [ 775.931184][T15669] inet6_rtm_newroute+0x157/0x160 [ 775.931200][T15669] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 775.931224][T15669] ? find_held_lock+0x2b/0x80 [ 775.931234][T15669] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 775.931249][T15669] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 775.931264][T15669] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 775.931281][T15669] rtnetlink_rcv_msg+0x95e/0xe90 [ 775.931297][T15669] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.931316][T15669] ? ref_tracker_free+0x37e/0x6c0 [ 775.931334][T15669] netlink_rcv_skb+0x159/0x420 [ 775.931346][T15669] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.931362][T15669] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 775.931378][T15669] ? netlink_deliver_tap+0x1ae/0xcc0 [ 775.931392][T15669] netlink_unicast+0x585/0x850 [ 775.931405][T15669] ? __pfx_netlink_unicast+0x10/0x10 [ 775.931416][T15669] ? __pfx_sock_has_perm+0x10/0x10 [ 775.931434][T15669] netlink_sendmsg+0x8b0/0xda0 [ 775.931447][T15669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.931460][T15669] ? selinux_socket_sendmsg+0x198/0x2f0 [ 775.931479][T15669] ____sys_sendmsg+0xa4d/0xbe0 [ 775.931495][T15669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.931508][T15669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.931526][T15669] ? rcu_is_watching+0x12/0xc0 [ 775.931542][T15669] ? ___sys_sendmsg+0x19d/0x1e0 [ 775.931552][T15669] ? kfree+0x1e5/0x6c0 [ 775.931570][T15669] ___sys_sendmsg+0x190/0x1e0 [ 775.931582][T15669] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.931604][T15669] ? __pfx___might_resched+0x10/0x10 [ 775.931620][T15669] __sys_sendmmsg+0x20c/0x440 [ 775.931636][T15669] ? __pfx___sys_sendmmsg+0x10/0x10 [ 775.931650][T15669] ? ksys_write+0x190/0x250 [ 775.931676][T15669] ? fput+0x79/0x100 [ 775.931694][T15669] ? ksys_write+0x1ac/0x250 [ 775.931710][T15669] ? __pfx_ksys_write+0x10/0x10 [ 775.931728][T15669] __x64_sys_sendmmsg+0x9c/0x100 [ 775.931742][T15669] ? lockdep_hardirqs_on+0x78/0x100 [ 775.931756][T15669] do_syscall_64+0x115/0x870 [ 775.931769][T15669] ? clear_bhb_loop+0x40/0x90 [ 775.931781][T15669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.931793][T15669] RIP: 0033:0x7fed4019e019 [ 775.931802][T15669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.931813][T15669] RSP: 002b:00007fed410f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 775.931824][T15669] RAX: ffffffffffffffda RBX: 00007fed40425fa0 RCX: 00007fed4019e019 [ 775.931831][T15669] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 775.931837][T15669] RBP: 00007fed410f6090 R08: 0000000000000000 R09: 0000000000000000 [ 775.931844][T15669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 775.931850][T15669] R13: 00007fed40426038 R14: 00007fed40425fa0 R15: 00007ffe94038758 [ 775.931863][T15669] [ 777.169617][T15681] overlayfs: failed lookup in lower (newroot/141, name='file0', err=-40): overlapping layers [ 777.201745][T15681] overlayfs: failed lookup in lower (newroot/141, name='file0', err=-40): overlapping layers [ 777.227904][T15681] overlayfs: failed lookup in lower (newroot/141, name='file0', err=-40): overlapping layers [ 777.265892][T15681] overlayfs: failed lookup in lower (newroot/141, name='file0', err=-40): overlapping layers [ 777.645242][ T993] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 777.804226][ T993] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 777.828423][ T993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 777.839025][ T993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 777.871275][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 777.898972][ T993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 777.908459][ T993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 777.943806][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 777.967350][ T993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 777.978733][ T993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 778.020060][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 778.034403][ T993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 778.056668][ T993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 778.088541][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 778.111463][ T993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 778.123620][ T993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 778.150397][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 778.178447][ T993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 778.202704][ T993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 778.223820][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 778.246226][ T993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 778.255442][ T993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 778.278988][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 778.314515][ T993] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 778.323956][ T993] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 778.349968][ T993] usb 7-1: config 0 interface 0 has no altsetting 0 [ 778.390467][ T993] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 778.399932][ T993] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 778.417262][ T993] usb 7-1: Product: syz [ 778.421514][ T993] usb 7-1: Manufacturer: syz [ 778.434023][ T993] usb 7-1: SerialNumber: syz [ 778.447891][ T993] usb 7-1: config 0 descriptor?? [ 778.477597][ T993] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 778.759579][T15684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.779853][T15684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.809814][ T30] audit: type=1400 audit(3933219221.899:3356): avc: denied { write } for pid=15683 comm="syz.6.2709" name="functions" dev="configfs" ino=9354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 778.859060][T15684] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 778.884949][T15684] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 778.893867][ T30] audit: type=1400 audit(3933219221.949:3357): avc: denied { write } for pid=15683 comm="syz.6.2709" name="ep.0" dev="configfs" ino=60000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 778.929748][T15684] udc dummy_udc.0: failed to start g1: -22 [ 778.946145][T15684] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 778.985483][T15684] UDC core: g1: couldn't find an available UDC or it's busy [ 779.026568][ T993] usb 7-1: USB disconnect, device number 22 [ 779.034320][ T993] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 779.210158][T15695] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 779.452964][ T30] audit: type=1400 audit(3933219222.549:3358): avc: denied { getattr } for pid=15703 comm="syz.5.2715" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 779.635117][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 779.732879][T15719] devpts: Bad value for 'max' [ 780.303182][ T30] audit: type=1400 audit(3933219223.389:3359): avc: denied { write } for pid=15697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.505746][ T30] audit: type=1400 audit(3933219223.599:3360): avc: denied { write } for pid=15736 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.018857][ T30] audit: type=1326 audit(3933219224.109:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.5.2722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d339e019 code=0x0 [ 781.070568][T15754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 781.169294][ T30] audit: type=1400 audit(3933219224.259:3362): avc: denied { write } for pid=15739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.341655][ T30] audit: type=1400 audit(3933219224.429:3363): avc: denied { write } for pid=15761 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.502231][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 781.671999][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 781.683042][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 781.694135][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 781.713070][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 781.745385][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 781.754882][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.765800][ T9] usb 2-1: Product: syz [ 781.773092][ T9] usb 2-1: Manufacturer: syz [ 781.782295][ T9] usb 2-1: SerialNumber: syz [ 781.793692][ T9] usb 2-1: config 0 descriptor?? [ 782.094104][ T9] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 782.582017][T15772] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2724'. [ 782.991042][ T9] usb 2-1: USB disconnect, device number 100 [ 783.630380][ T5610] overlayfs: failed lookup in lower (newroot/546, name='bus', err=-40): overlapping layers [ 783.664420][ T5610] overlayfs: failed lookup in lower (newroot/546, name='bus', err=-40): overlapping layers [ 784.276687][ T8561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.331163][ T8561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.569660][ T8561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.936628][ T8561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.150339][ T30] audit: type=1400 audit(3933219229.239:3364): avc: denied { bind } for pid=15813 comm="syz.6.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 786.264746][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 786.280280][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 786.288494][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 786.308650][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 786.318187][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 786.566510][T15833] cgroup: Bad value for 'name' [ 786.645040][ T30] audit: type=1400 audit(3933219229.729:3365): avc: denied { ioctl } for pid=15837 comm="syz.6.2740" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 786.676733][T15838] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 786.812274][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 786.840107][ T30] audit: type=1400 audit(3933219229.729:3366): avc: denied { write } for pid=15837 comm="syz.6.2740" name="functions" dev="configfs" ino=9354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 787.012258][ T993] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 787.029167][ T9] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 787.044427][ T30] audit: type=1400 audit(3933219229.849:3367): avc: denied { write } for pid=15805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.113662][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.123272][T10593] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 787.203106][ T9] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 787.253162][ T993] usb 6-1: Using ep0 maxpacket: 8 [ 787.272644][ T30] audit: type=1400 audit(3933219230.169:3368): avc: denied { write } for pid=15846 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.386293][ T993] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 787.398251][T15835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.408271][T10593] usb 7-1: unable to get BOS descriptor or descriptor too short [ 787.470713][T15854] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2742'. [ 787.481807][ T993] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 787.494170][T15835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.507585][T10593] usb 7-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 787.536881][ T993] usb 6-1: Product: syz [ 787.543505][T15854] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2742'. [ 787.561530][T10593] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 787.576069][ T993] usb 6-1: Manufacturer: syz [ 787.595822][ T993] usb 6-1: SerialNumber: syz [ 787.617855][ T993] usb 6-1: config 0 descriptor?? [ 787.632534][ T8561] bridge_slave_1: left allmulticast mode [ 787.650433][ T8561] bridge_slave_1: left promiscuous mode [ 787.660552][T10593] usb 7-1: string descriptor 0 read error: -22 [ 787.684120][ T9] usb 2-1: emi26_load_firmware - request_firmware() failed [ 787.691377][ T5707] usb 4-1: emi26_load_firmware - request_firmware() failed [ 787.703639][T10593] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 787.724384][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.756163][ T9] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 787.764593][ T5707] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 787.788055][T10593] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.805803][ T993] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 787.820501][ T8561] bridge_slave_0: left allmulticast mode [ 787.837942][T10592] usb 1-1: emi26_load_firmware - request_firmware() failed [ 787.847698][ T9] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 787.863385][ T5707] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 787.922015][ T8561] bridge_slave_0: left promiscuous mode [ 787.931002][T10593] usb 7-1: config 0 descriptor?? [ 787.949134][T10592] usb 1-1: emi26_load_firmware - error loading firmware: error = -110 [ 787.960882][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.980327][T15844] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 787.999560][ T9] usb 2-1: USB disconnect, device number 101 [ 788.007741][ T5707] usb 4-1: USB disconnect, device number 63 [ 788.036237][T10593] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 788.043720][T10592] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 788.079914][ T8561] batman_adv: batadv0: Interface deactivated: gretap1 [ 788.345163][T10592] usb 1-1: USB disconnect, device number 72 [ 788.385064][ T5623] Bluetooth: hci2: command tx timeout [ 788.425221][ T993] input: gspca_zc3xx as /devices/platform/dummy_hcd.5/usb6/6-1/input/input82 [ 788.438809][ T30] audit: type=1400 audit(3933219231.529:3369): avc: denied { write } for pid=15853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.537125][T10593] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 789.489171][T10593] usb 7-1: USB disconnect, device number 23 [ 789.581174][T10592] usb 6-1: USB disconnect, device number 33 [ 789.671904][ T30] audit: type=1400 audit(3933219232.759:3370): avc: denied { write } for pid=15877 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.870038][T15884] trusted_key: encrypted_key: insufficient parameters specified [ 790.875527][ T5623] Bluetooth: hci2: command tx timeout [ 790.926305][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2749'. [ 790.935302][T15893] openvswitch: netlink: Flow key attr not present in new flow. [ 791.316899][T10593] hid (null): unknown global tag 0xe [ 791.373517][ T30] audit: type=1400 audit(3933219234.449:3371): avc: denied { ioctl } for pid=15902 comm="syz.5.2751" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 791.402845][T10593] hid_parser_main: 24 callbacks suppressed [ 791.402859][T10593] hid-generic 0008:0006:0009.0022: unknown main item tag 0x0 [ 791.417947][T10593] hid-generic 0008:0006:0009.0022: unknown main item tag 0x0 [ 791.560592][T10593] hid-generic 0008:0006:0009.0022: unknown global tag 0xe [ 791.594123][ T30] audit: type=1400 audit(3933219234.579:3372): avc: denied { mount } for pid=15905 comm="syz.6.2753" name="/" dev="ramfs" ino=60694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 791.637490][T10593] hid-generic 0008:0006:0009.0022: item 0 2 1 14 parsing failed [ 791.693540][T10592] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 791.701757][ T8561] batman_adv: batadv0: Removing interface: gretap1 [ 791.713811][T10593] hid-generic 0008:0006:0009.0022: probe with driver hid-generic failed with error -22 [ 791.772846][ T30] audit: type=1400 audit(3933219234.589:3373): avc: denied { search } for pid=15907 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.873653][ T8561] bond1 (unregistering): (slave gre1): Releasing backup interface [ 791.913966][T10592] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 791.924148][ T30] audit: type=1400 audit(3933219234.589:3374): avc: denied { search } for pid=15907 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.965876][T10592] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 792.027148][T10592] usb 6-1: config 220 has an invalid descriptor of length 177, skipping remainder of the config [ 792.072578][ T8561] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 792.102604][T10593] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 792.111802][T10592] usb 6-1: config 220 has no interface number 2 [ 792.121150][ T30] audit: type=1400 audit(3933219234.589:3375): avc: denied { search } for pid=15907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.180357][ T8561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.192224][T10592] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 792.243845][ T8561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.259850][T10592] usb 6-1: config 220 interface 0 has no altsetting 0 [ 792.289146][ T30] audit: type=1400 audit(3933219234.589:3376): avc: denied { search } for pid=15907 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.322241][T10592] usb 6-1: config 220 interface 76 has no altsetting 0 [ 792.329213][T10593] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.346504][ T8561] bond0 (unregistering): Released all slaves [ 792.367444][T10592] usb 6-1: config 220 interface 1 has no altsetting 0 [ 792.381797][T10593] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.415879][ T8561] bond1 (unregistering): Released all slaves [ 792.427183][T10593] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 792.453048][T10592] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 792.465880][ T30] audit: type=1400 audit(3933219234.589:3377): avc: denied { create } for pid=15905 comm="syz.6.2753" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 792.503143][T10592] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.518050][T10593] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 792.530130][ T8561] bond2 (unregistering): Released all slaves [ 792.542630][T10592] usb 6-1: Product: syz [ 792.556749][T10593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.567033][T10592] usb 6-1: Manufacturer: syz [ 792.578759][ T8561] bond3 (unregistering): Released all slaves [ 792.587187][ T30] audit: type=1400 audit(3933219234.589:3378): avc: denied { ioctl } for pid=15905 comm="syz.6.2753" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=60695 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 792.619560][T10592] usb 6-1: SerialNumber: syz [ 792.647043][ T8561] bond4 (unregistering): Released all slaves [ 792.654569][T10593] usb 7-1: config 0 descriptor?? [ 792.726519][ T30] audit: type=1400 audit(3933219234.609:3379): avc: denied { read } for pid=15905 comm="syz.6.2753" dev="nsfs" ino=4026533221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 792.777920][ T8561] bond5 (unregistering): Released all slaves [ 792.909302][ T30] audit: type=1400 audit(3933219234.609:3380): avc: denied { open } for pid=15905 comm="syz.6.2753" path="net:[4026533221]" dev="nsfs" ino=4026533221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 792.946962][T12610] Bluetooth: hci2: command tx timeout [ 792.964673][T10592] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 793.033838][T10592] uvcvideo 6-1:220.0: No valid video chain found. [ 793.085502][T10592] usb 6-1: selecting invalid altsetting 0 [ 793.089223][T10593] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 793.111870][T10592] usb 6-1: selecting invalid altsetting 0 [ 793.111888][T10592] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 793.136577][T10592] usb 6-1: USB disconnect, device number 34 [ 793.188930][ T8561] : left promiscuous mode [ 793.265288][T10593] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 793.345107][T15914] 9p: Bad value for 'rfdno' [ 793.346837][T15914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.347028][T15914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.347432][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2754'. [ 793.750832][ T8561] tipc: Disabling bearer [ 793.762635][ T8561] tipc: Left network mode [ 793.824781][T15952] netlink: 272 bytes leftover after parsing attributes in process `syz.5.2759'. [ 794.358037][ T5814] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 794.393501][ T993] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 794.401187][ T8561] hsr_slave_0: left promiscuous mode [ 794.418560][ T8561] hsr_slave_1: left promiscuous mode [ 794.438388][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.466023][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.496709][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.512255][ T9] usb 7-1: reset high-speed USB device number 24 using dummy_hcd [ 794.522498][ T5814] usb 6-1: Using ep0 maxpacket: 8 [ 794.534150][ T5814] usb 6-1: unable to get BOS descriptor or descriptor too short [ 794.544648][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.556266][ T5814] usb 6-1: config 1 has an invalid interface number: 152 but max is 0 [ 794.564932][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 794.577846][ T993] usb 4-1: unable to get BOS descriptor or descriptor too short [ 794.588791][ T5814] usb 6-1: config 1 has no interface number 0 [ 794.614287][ T993] usb 4-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 794.634808][ T5814] usb 6-1: too many endpoints for config 1 interface 152 altsetting 8: 122, using maximum allowed: 30 [ 794.669269][ T993] usb 4-1: config 202 has 0 interfaces, different from the descriptor's value: 1 [ 794.695011][ T5814] usb 6-1: config 1 interface 152 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 794.746951][ T993] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 794.773052][ T8561] veth1_macvtap: left promiscuous mode [ 794.803988][ T993] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 794.812264][ T5814] usb 6-1: config 1 interface 152 has no altsetting 0 [ 794.828759][ T8561] veth0_macvtap: left promiscuous mode [ 794.854100][ T5814] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54 [ 794.865720][ T993] usb 4-1: Manufacturer: syz [ 794.878037][ T8561] veth1_vlan: left promiscuous mode [ 794.899456][ T5814] usb 6-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3 [ 794.909614][ T8561] veth0_vlan: left promiscuous mode [ 794.938205][ T5814] usb 6-1: Manufacturer: syz [ 794.956705][ T5814] usb 6-1: SerialNumber: syz [ 795.023730][T12610] Bluetooth: hci2: command tx timeout [ 795.117681][ T993] usb 4-1: USB disconnect, device number 64 [ 795.167385][T10593] usb 7-1: USB disconnect, device number 24 [ 795.217690][ T5814] usb 6-1: USB disconnect, device number 35 [ 795.354043][T10593] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 795.394459][ T8561] team0 (unregistering): Port device team_slave_1 removed [ 795.426848][ T8561] team0 (unregistering): Port device team_slave_0 removed [ 795.520331][T10593] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9756, setting to 64 [ 795.532536][T10593] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 795.545172][T10593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.570518][T15981] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 795.597561][T10593] hub 7-1:4.0: USB hub found [ 795.604575][ T993] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 795.659892][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 795.763514][ T993] usb 4-1: Using ep0 maxpacket: 16 [ 795.804159][T10593] hub 7-1:4.0: 2 ports detected [ 795.817540][ T993] usb 4-1: unable to get BOS descriptor or descriptor too short [ 795.838764][T10593] usb 7-1: selecting invalid altsetting 1 [ 795.866214][ T993] usb 4-1: config 202 has an invalid descriptor of length 0, skipping remainder of the config [ 795.895008][T10593] hub 7-1:4.0: Using single TT (err -22) [ 795.946160][ T993] usb 4-1: config 202 has 0 interfaces, different from the descriptor's value: 1 [ 796.118404][T10593] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 797.086655][ T993] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 797.097691][ T8561] IPVS: stop unused estimator thread 0... [ 797.116291][T10593] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 798.088113][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 798.111982][ T993] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 799.091470][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 799.091482][ T30] audit: type=1400 audit(3933219242.169:3455): avc: denied { create } for pid=16003 comm="syz.1.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 799.120159][T16009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.197638][ T993] usb 4-1: Manufacturer: syz [ 799.203504][T10593] usb 7-1: USB disconnect, device number 25 [ 799.230539][T16009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.294199][ T993] usb 4-1: can't set config #202, error -71 [ 799.367793][ T993] usb 4-1: USB disconnect, device number 65 [ 799.484251][ T30] audit: type=1400 audit(3933219242.239:3456): avc: denied { accept } for pid=16003 comm="syz.1.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 799.694888][ T30] audit: type=1400 audit(3933219242.399:3457): avc: denied { perfmon } for pid=16014 comm="syz.6.2770" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 799.848669][ T30] audit: type=1400 audit(3933219242.669:3458): avc: denied { create } for pid=16014 comm="syz.6.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 799.874316][T15820] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.720324][T15820] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.778013][T12608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 800.784735][T15820] bridge_slave_0: entered allmulticast mode [ 800.811343][ T30] audit: type=1400 audit(3933219242.669:3459): avc: denied { getopt } for pid=16014 comm="syz.6.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 800.843796][T16040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 800.857570][T16032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 800.864112][T16032] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 800.871715][T16032] audit: backlog limit exceeded [ 800.880235][T15820] bridge_slave_0: entered promiscuous mode [ 800.936043][T15820] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.987342][T15820] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.041260][T15820] bridge_slave_1: entered allmulticast mode [ 801.081216][T15820] bridge_slave_1: entered promiscuous mode [ 801.201124][T15820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.233269][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 801.300536][T15820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.444923][T15820] team0: Port device team_slave_0 added [ 801.486988][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 801.523703][T15820] team0: Port device team_slave_1 added [ 801.646678][T15820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.660039][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 801.695291][T15820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.737299][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 801.772249][ T9] usb 7-1: can't read configurations, error -71 [ 801.831899][T15820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.737080][T15820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.778894][T15820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.941814][T15820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.020259][T16052] syz.5.2778 (16052): drop_caches: 2 [ 803.033083][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.164990][T16067] syzkaller0: entered promiscuous mode [ 803.213120][T16067] syzkaller0: entered allmulticast mode [ 803.497376][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2784'. [ 803.528513][T15820] hsr_slave_0: entered promiscuous mode [ 803.559341][T15820] hsr_slave_1: entered promiscuous mode [ 803.614444][T16079] netlink: 'syz.5.2784': attribute type 2 has an invalid length. [ 804.019895][T16093] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 804.092367][ T30] kauditd_printk_skb: 349 callbacks suppressed [ 804.092378][ T30] audit: type=1400 audit(3933219247.179:3715): avc: denied { search } for pid=16095 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.258682][T16100] syzkaller0: entered promiscuous mode [ 804.287938][ T30] audit: type=1400 audit(3933219247.179:3716): avc: denied { search } for pid=16095 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.318666][T16100] syzkaller0: entered allmulticast mode [ 804.497150][ T30] audit: type=1400 audit(3933219247.179:3717): avc: denied { search } for pid=16095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.771037][T16082] audit: audit_backlog=65 > audit_backlog_limit=64 [ 804.778769][T16113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 804.782766][ T30] audit: type=1400 audit(3933219247.179:3718): avc: denied { search } for pid=16095 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.816235][T16113] audit: audit_lost=36 audit_rate_limit=0 audit_backlog_limit=64 [ 804.857099][T16082] audit: audit_lost=37 audit_rate_limit=0 audit_backlog_limit=64 [ 804.868709][T16105] audit: audit_backlog=65 > audit_backlog_limit=64 [ 804.885927][T16115] audit: audit_backlog=65 > audit_backlog_limit=64 [ 805.522808][T16127] autofs: Unknown parameter '{Z}]0id4Ğu3~q`is}1}HQלa' [ 805.679871][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 805.910462][T16139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.980022][T16139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.103913][T15820] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 806.132849][ T9] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 806.156765][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 806.206190][T15820] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 806.244443][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 806.283178][T16148] netlink: 'syz.3.2798': attribute type 1 has an invalid length. [ 806.299757][T15820] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 806.306672][ T9] usb 7-1: device descriptor read/64, error -71 [ 806.345731][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2798'. [ 806.365024][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 806.415954][T15820] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 806.444805][T15820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 806.498937][T16148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 806.572328][ T9] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 806.622099][ T5814] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 806.714022][ T9] usb 7-1: device descriptor read/64, error -71 [ 806.733272][T16172] xt_hashlimit: size too large, truncated to 1048576 [ 806.749294][T16174] FAULT_INJECTION: forcing a failure. [ 806.749294][T16174] name failslab, interval 1, probability 0, space 0, times 0 [ 806.782702][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 806.802567][ T5814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.821017][T16174] CPU: 0 UID: 0 PID: 16174 Comm: syz.3.2802 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 806.821039][T16174] Tainted: [L]=SOFTLOCKUP [ 806.821043][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 806.821049][T16174] Call Trace: [ 806.821054][T16174] [ 806.821058][T16174] dump_stack_lvl+0x100/0x190 [ 806.821076][T16174] should_fail_ex.cold+0x5/0xa [ 806.821090][T16174] should_failslab+0xc2/0x120 [ 806.821105][T16174] __kmalloc_noprof+0xfc/0x820 [ 806.821118][T16174] ? tomoyo_encode2+0xfb/0x3c0 [ 806.821132][T16174] tomoyo_encode2+0xfb/0x3c0 [ 806.821144][T16174] tomoyo_encode+0x29/0x50 [ 806.821154][T16174] tomoyo_realpath_from_path+0x18c/0x690 [ 806.821168][T16174] tomoyo_path_number_perm+0x23c/0x580 [ 806.821184][T16174] ? tomoyo_path_number_perm+0x22e/0x580 [ 806.821200][T16174] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 806.821229][T16174] ? find_held_lock+0x2b/0x80 [ 806.821239][T16174] ? __fget_files+0x215/0x3d0 [ 806.821250][T16174] ? hook_file_ioctl_common+0x140/0x440 [ 806.821262][T16174] ? __fget_files+0x215/0x3d0 [ 806.821275][T16174] ? __fget_files+0x21f/0x3d0 [ 806.821288][T16174] security_file_ioctl+0xd3/0x230 [ 806.821305][T16174] __x64_sys_ioctl+0xb7/0x210 [ 806.821322][T16174] do_syscall_64+0x115/0x870 [ 806.821336][T16174] ? clear_bhb_loop+0x40/0x90 [ 806.821350][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.821361][T16174] RIP: 0033:0x7fb71b39e019 [ 806.821370][T16174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.821385][T16174] RSP: 002b:00007fb71c1ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.821397][T16174] RAX: ffffffffffffffda RBX: 00007fb71b625fa0 RCX: 00007fb71b39e019 [ 806.821404][T16174] RDX: 0000200000000180 RSI: 00000000c0845657 RDI: 0000000000000003 [ 806.821410][T16174] RBP: 00007fb71c1ac090 R08: 0000000000000000 R09: 0000000000000000 [ 806.821417][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 806.821424][T16174] R13: 00007fb71b626038 R14: 00007fb71b625fa0 R15: 00007ffc17205ab8 [ 806.821438][T16174] [ 806.821447][T16174] ERROR: Out of memory at tomoyo_realpath_from_path. [ 807.056356][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 807.067928][T15820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.082612][ T9] usb usb7-port1: attempt power cycle [ 807.103214][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 807.119010][ T5814] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 807.144422][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.184215][T15820] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.231939][ T5814] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 807.255026][ T8562] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.262120][ T8562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.273140][ T5814] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 807.296570][ T5814] usb 6-1: Manufacturer: syz [ 807.309836][ T8562] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.316945][ T8562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.372685][ T5814] usb 6-1: config 0 descriptor?? [ 807.443692][T15820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.486593][ T9] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 807.548034][ T9] usb 7-1: device descriptor read/8, error -71 [ 807.610496][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 807.802153][ T9] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 807.825563][ T9] usb 7-1: device descriptor read/8, error -71 [ 807.942608][ T9] usb usb7-port1: unable to enumerate USB device [ 807.975726][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.989429][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.239515][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.252811][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.346368][T15820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.585590][T15820] veth0_vlan: entered promiscuous mode [ 808.605920][T15820] veth1_vlan: entered promiscuous mode [ 808.647979][T15820] veth0_macvtap: entered promiscuous mode [ 808.668637][T15820] veth1_macvtap: entered promiscuous mode [ 808.713387][T15820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.738757][T15820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.761456][ T8596] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.774610][ T8596] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.816351][ T8590] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.829403][ T8590] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.114407][ T30] kauditd_printk_skb: 507 callbacks suppressed [ 809.114419][ T30] audit: type=1400 audit(3933219508.203:4190): avc: denied { read } for pid=15820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 809.156676][ T8596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.184679][ T8596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.280342][ T30] audit: type=1400 audit(3933219508.233:4191): avc: denied { write } for pid=15820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 809.355142][ T8562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.404630][ T8562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.517002][ T30] audit: type=1400 audit(3933219508.243:4192): avc: denied { read } for pid=15820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 809.748082][T16226] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.754689][T16226] audit: audit_lost=50 audit_rate_limit=0 audit_backlog_limit=64 [ 809.762528][T16226] audit: backlog limit exceeded [ 809.768055][ T5814] rc_core: IR keymap rc-hauppauge not found [ 809.777652][ T5814] Registered IR keymap rc-empty [ 809.788700][T15820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.804358][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 809.813318][T16226] audit: audit_backlog=65 > audit_backlog_limit=64 [ 809.819817][T16226] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 809.829208][T16226] audit: backlog limit exceeded [ 809.849738][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 809.916915][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 809.973351][ T5814] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 810.030007][ T9] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 810.086632][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.108238][ T5814] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input85 [ 810.155898][T16230] UDC core: g1: couldn't find an available UDC or it's busy [ 810.170354][ T9] usb 7-1: Product: syz [ 810.191959][ T9] usb 7-1: Manufacturer: syz [ 810.207256][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.230099][ T9] usb 7-1: SerialNumber: syz [ 810.240176][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2810'. [ 810.267536][ T9] ums-karma 7-1:1.0: USB Mass Storage device detected [ 810.282282][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.304192][ T9] ums-karma 7-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 810.304192][ T9] Please send a copy of this message to and [ 810.352424][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.402941][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.452886][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.511629][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.563710][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.622684][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.652810][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.691883][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 810.732960][ T5814] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 810.753662][ T9] ums-karma 7-1:1.0: probe with driver ums-karma failed with error -5 [ 810.780808][ T9] usb 7-1: USB disconnect, device number 32 [ 810.797507][ T5814] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 810.832159][ T5707] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 810.893017][ T5814] usb 6-1: USB disconnect, device number 37 [ 811.062058][ T5707] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 811.081588][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.132661][ T5707] usb 4-1: Product: syz [ 811.155764][ T5707] usb 4-1: Manufacturer: syz [ 811.178549][ T5707] usb 4-1: SerialNumber: syz [ 811.272135][ T5814] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 811.421557][ T5814] usb 6-1: device descriptor read/64, error -71 [ 811.460730][T16247] syzkaller1: entered promiscuous mode [ 811.494255][T16247] syzkaller1: entered allmulticast mode [ 811.499886][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 811.720911][ T5814] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 811.893112][ T5814] usb 6-1: device descriptor read/64, error -71 [ 811.955721][T10593] usb 4-1: USB disconnect, device number 66 [ 812.003415][ T5814] usb usb6-port1: attempt power cycle [ 812.087075][T16258] Invalid source name [ 812.132570][ T5707] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 812.177929][T10592] IPVS: starting estimator thread 0... [ 812.185556][T16258] IPVS: lc: FWM 3 0x00000003 - no destination available [ 812.271284][T16259] IPVS: using max 77 ests per chain, 184800 per kthread [ 812.301967][ T5707] usb 7-1: Using ep0 maxpacket: 8 [ 812.309808][ T5707] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.331303][ T5707] usb 7-1: config 0 interface 0 has no altsetting 0 [ 812.344748][ T5707] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 812.353892][ T5814] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 812.366342][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.385949][ T5814] usb 6-1: device descriptor read/8, error -71 [ 812.392488][ T5707] usb 7-1: Product: syz [ 812.401310][ T5707] usb 7-1: Manufacturer: syz [ 812.409747][ T5707] usb 7-1: SerialNumber: syz [ 812.424923][ T5707] usb 7-1: config 0 descriptor?? [ 812.446212][ T5707] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 812.543155][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 812.567875][ T9] ath9k_htc: Failed to initialize the device [ 812.596041][T10593] usb 4-1: ath9k_htc: USB layer deinitialized [ 812.631735][ T5814] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 812.661998][ T5707] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 812.688398][ T5707] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 812.698624][ T5814] usb 6-1: device descriptor read/8, error -71 [ 813.560425][ T5707] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 813.631186][ T5814] usb usb6-port1: unable to enumerate USB device [ 813.649484][ T5707] usb 7-1: USB disconnect, device number 33 [ 813.846148][T16270] fuse: Bad value for 'fd' [ 814.168223][ T30] kauditd_printk_skb: 430 callbacks suppressed [ 814.168234][ T30] audit: type=1400 audit(3933219513.253:4612): avc: denied { read write } for pid=15820 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.255468][T16285] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2827'. [ 814.316161][ T30] audit: type=1400 audit(3933219513.253:4613): avc: denied { open } for pid=15820 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.463555][ T30] audit: type=1400 audit(3933219513.293:4614): avc: denied { ioctl } for pid=15820 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.642386][ T30] audit: type=1400 audit(3933219513.333:4615): avc: denied { create } for pid=16284 comm="syz.7.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 814.746132][T14813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.755382][T12608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 814.776495][ T30] audit: type=1400 audit(3933219513.333:4616): avc: denied { read } for pid=16284 comm="syz.7.2827" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 814.800911][T14813] audit: audit_lost=56 audit_rate_limit=0 audit_backlog_limit=64 [ 814.811954][T12608] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 814.835730][T10838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 815.729645][T16299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=16299 comm=syz.3.2832 [ 815.756406][T16302] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2834'. [ 816.273650][ T5707] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 816.324240][T16327] FAULT_INJECTION: forcing a failure. [ 816.324240][T16327] name failslab, interval 1, probability 0, space 0, times 0 [ 816.354265][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2843'. [ 816.391315][T16327] CPU: 0 UID: 0 PID: 16327 Comm: syz.3.2841 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 816.391334][T16327] Tainted: [L]=SOFTLOCKUP [ 816.391338][T16327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 816.391345][T16327] Call Trace: [ 816.391349][T16327] [ 816.391353][T16327] dump_stack_lvl+0x100/0x190 [ 816.391371][T16327] should_fail_ex.cold+0x5/0xa [ 816.391386][T16327] should_failslab+0xc2/0x120 [ 816.391401][T16327] __kmalloc_noprof+0xfc/0x820 [ 816.391413][T16327] ? __pfx_dynamic_dname+0x10/0x10 [ 816.391429][T16327] ? tomoyo_encode2+0xfb/0x3c0 [ 816.391443][T16327] tomoyo_encode2+0xfb/0x3c0 [ 816.391456][T16327] tomoyo_encode+0x29/0x50 [ 816.391466][T16327] tomoyo_realpath_from_path+0x18c/0x690 [ 816.391480][T16327] tomoyo_path_number_perm+0x23c/0x580 [ 816.391495][T16327] ? tomoyo_path_number_perm+0x22e/0x580 [ 816.391512][T16327] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 816.391541][T16327] ? find_held_lock+0x2b/0x80 [ 816.391551][T16327] ? __fget_files+0x215/0x3d0 [ 816.391562][T16327] ? hook_file_ioctl_common+0x140/0x440 [ 816.391574][T16327] ? __fget_files+0x215/0x3d0 [ 816.391587][T16327] ? __fget_files+0x21f/0x3d0 [ 816.391600][T16327] security_file_ioctl+0xd3/0x230 [ 816.391619][T16327] __x64_sys_ioctl+0xb7/0x210 [ 816.391636][T16327] do_syscall_64+0x115/0x870 [ 816.391649][T16327] ? clear_bhb_loop+0x40/0x90 [ 816.391663][T16327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.391674][T16327] RIP: 0033:0x7fb71b39e019 [ 816.391684][T16327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.391694][T16327] RSP: 002b:00007fb71c1ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 816.391705][T16327] RAX: ffffffffffffffda RBX: 00007fb71b625fa0 RCX: 00007fb71b39e019 [ 816.391712][T16327] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 816.391719][T16327] RBP: 00007fb71c1ac090 R08: 0000000000000000 R09: 0000000000000000 [ 816.391725][T16327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.391732][T16327] R13: 00007fb71b626038 R14: 00007fb71b625fa0 R15: 00007ffc17205ab8 [ 816.391745][T16327] [ 816.391923][T16327] ERROR: Out of memory at tomoyo_realpath_from_path. [ 816.621630][T10593] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 816.657843][T16332] syzkaller0: entered promiscuous mode [ 816.663419][T16332] syzkaller0: entered allmulticast mode [ 817.479417][ T5707] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 817.521946][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.557672][ T5707] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 817.644657][T10593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 817.667930][T10593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 817.691038][ T5707] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 817.730814][T10593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 817.746324][ T5707] usb 6-1: Manufacturer: syz [ 817.769506][ T5707] usb 6-1: config 0 descriptor?? [ 817.812797][T10593] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 817.865674][T10593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.919796][T10593] usb 2-1: Product: syz [ 817.939703][T10593] usb 2-1: Manufacturer: syz [ 817.950432][ T5707] rc_core: IR keymap rc-hauppauge not found [ 817.966864][ T5707] Registered IR keymap rc-empty [ 817.973680][T10593] usb 2-1: SerialNumber: syz [ 817.992327][ T5707] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 818.017772][T16311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.032490][T10593] usb 2-1: config 0 descriptor?? [ 818.070866][T16311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.086865][ T5707] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input86 [ 818.277930][T10593] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 818.476448][T16321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.514349][T16321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.706431][ T30] kauditd_printk_skb: 294 callbacks suppressed [ 819.706444][ T30] audit: type=1400 audit(3933219518.794:4874): avc: denied { read write } for pid=12608 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 821.140094][ T30] audit: type=1400 audit(3933219518.794:4875): avc: denied { open } for pid=12608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 821.384878][T10593] usb 2-1: USB disconnect, device number 102 [ 821.435262][ T30] audit: type=1400 audit(3933219518.794:4876): avc: denied { ioctl } for pid=12608 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 821.695195][ T30] audit: type=1400 audit(3933219518.934:4877): avc: denied { create } for pid=16346 comm="syz.7.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 821.776425][T16367] audit: audit_backlog=65 > audit_backlog_limit=64 [ 821.783108][T16366] audit: audit_backlog=65 > audit_backlog_limit=64 [ 821.819846][T16366] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 821.858165][ T30] audit: type=1400 audit(3933219519.424:4878): avc: denied { search } for pid=16349 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.894594][T16367] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 821.905150][T16366] audit: backlog limit exceeded [ 821.962858][T16369] hsr0: entered promiscuous mode [ 821.985470][T16364] dummy_hcd dummy_hcd.0: remove, state 4 [ 822.038784][T16369] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 822.071664][T16364] usb usb1: USB disconnect, device number 1 [ 822.493485][ T5814] usb 6-1: USB disconnect, device number 42 [ 822.742032][T16379] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.2852'. [ 822.816830][T16364] dummy_hcd dummy_hcd.0: stopped [ 822.865234][T16381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2852'. [ 822.880806][T16364] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 823.594111][T16367] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 823.607302][T16409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2856'. [ 823.750467][T16367] dummy_hcd dummy_hcd.0: Dummy host controller [ 824.292963][T16418] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 824.437471][T16417] mmap: syz.6.2859 (16417): VmData 37724160 exceed data ulimit 1346. Update limits or use boot option ignore_rlimit_data. [ 824.464633][T16367] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 824.825146][ T30] kauditd_printk_skb: 356 callbacks suppressed [ 824.825159][ T30] audit: type=1400 audit(3933219523.874:5189): avc: denied { create } for pid=16428 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 824.854425][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 824.889839][T16367] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 825.016005][T16367] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 825.089933][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 825.098094][ T30] audit: type=1400 audit(3933219523.874:5190): avc: denied { mounton } for pid=16428 comm="syz.1.2862" path="/589/file0" dev="tmpfs" ino=3198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 825.126021][T16367] usb usb1: Product: Dummy host controller [ 825.187295][T16367] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 825.575097][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 826.123744][T16367] usb usb1: SerialNumber: dummy_hcd.0 [ 826.168602][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 826.206119][ T30] audit: type=1400 audit(3933219523.874:5191): avc: denied { mount } for pid=16428 comm="syz.1.2862" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 826.323072][ T9] usb 4-1: string descriptor 0 read error: -22 [ 826.382204][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 826.560043][T16450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 826.566761][ T30] audit: type=1400 audit(3933219523.874:5192): avc: denied { create } for pid=16428 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 826.589156][T16449] audit: audit_backlog=65 > audit_backlog_limit=64 [ 826.595904][T16449] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64 [ 826.604087][T16449] audit: backlog limit exceeded [ 826.628857][T16449] audit: audit_backlog=65 > audit_backlog_limit=64 [ 826.635484][T16449] audit: audit_lost=88 audit_rate_limit=0 audit_backlog_limit=64 [ 826.663400][ T9] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 826.751826][T16367] hub 1-0:1.0: USB hub found [ 826.769108][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 826.907219][T16367] hub 1-0:1.0: 1 port detected [ 826.926338][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 827.009639][T16427] ================================================================== [ 827.017709][T16427] BUG: KASAN: slab-use-after-free in i2c_adapter_lock_bus+0xe0/0x100 [ 827.025760][T16427] Read of size 8 at addr ffff88802b4bf108 by task syz.3.2860/16427 [ 827.033618][T16427] [ 827.035920][T16427] CPU: 0 UID: 0 PID: 16427 Comm: syz.3.2860 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 827.035938][T16427] Tainted: [L]=SOFTLOCKUP [ 827.035942][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 827.035949][T16427] Call Trace: [ 827.035955][T16427] [ 827.035961][T16427] dump_stack_lvl+0x100/0x190 [ 827.035977][T16427] print_report+0x13d/0x4b0 [ 827.035993][T16427] ? __virt_addr_valid+0x239/0x430 [ 827.036009][T16427] ? i2c_adapter_lock_bus+0xe0/0x100 [ 827.036025][T16427] kasan_report+0xdf/0x1c0 [ 827.036040][T16427] ? i2c_adapter_lock_bus+0xe0/0x100 [ 827.036057][T16427] i2c_adapter_lock_bus+0xe0/0x100 [ 827.036075][T16427] i2c_transfer+0x23b/0x380 [ 827.036093][T16427] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 827.036111][T16427] i2cdev_ioctl+0x19d/0x830 [ 827.036126][T16427] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 827.036142][T16427] ? selinux_file_ioctl+0x13b/0x290 [ 827.036160][T16427] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 827.036180][T16427] __x64_sys_ioctl+0x18e/0x210 [ 827.036196][T16427] do_syscall_64+0x115/0x870 [ 827.036210][T16427] ? clear_bhb_loop+0x40/0x90 [ 827.036224][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.036236][T16427] RIP: 0033:0x7fb71b39e019 [ 827.036246][T16427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.036257][T16427] RSP: 002b:00007fb71c1ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.036270][T16427] RAX: ffffffffffffffda RBX: 00007fb71b625fa0 RCX: 00007fb71b39e019 [ 827.036279][T16427] RDX: 0000200000003380 RSI: 0000000000000707 RDI: 0000000000000004 [ 827.036286][T16427] RBP: 00007fb71b43500c R08: 0000000000000000 R09: 0000000000000000 [ 827.036294][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.036300][T16427] R13: 00007fb71b626038 R14: 00007fb71b625fa0 R15: 00007ffc17205ab8 [ 827.036311][T16427] [ 827.036315][T16427] [ 827.227715][T16427] Allocated by task 1: [ 827.231761][T16427] kasan_save_stack+0x30/0x50 [ 827.236413][T16427] kasan_save_track+0x14/0x30 [ 827.241069][T16427] __kasan_kmalloc+0xaa/0xb0 [ 827.245628][T16427] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 827.250977][T16427] usb_alloc_dev+0x55/0x1090 [ 827.255551][T16427] usb_add_hcd.cold+0x257/0x1158 [ 827.260460][T16427] dummy_hcd_probe+0x189/0x2fa [ 827.265206][T16427] platform_probe+0x106/0x1d0 [ 827.269852][T16427] really_probe+0x241/0xa60 [ 827.274338][T16427] __driver_probe_device+0x20e/0x450 [ 827.279594][T16427] driver_probe_device+0x4a/0x140 [ 827.284601][T16427] __device_attach_driver+0x1df/0x320 [ 827.289944][T16427] bus_for_each_drv+0x159/0x1e0 [ 827.294771][T16427] __device_attach+0x1e4/0x4d0 [ 827.299510][T16427] device_initial_probe+0xaf/0xd0 [ 827.304518][T16427] bus_probe_device+0x64/0x160 [ 827.309252][T16427] device_add+0x121d/0x1970 [ 827.313727][T16427] platform_device_add+0x35a/0x800 [ 827.318816][T16427] dummy_hcd_init+0x5eb/0xc00 [ 827.323463][T16427] do_one_initcall+0x11d/0x700 [ 827.328201][T16427] kernel_init_freeable+0x6ea/0x7b0 [ 827.333372][T16427] kernel_init+0x1f/0x1e0 [ 827.337685][T16427] ret_from_fork+0x72b/0xd50 [ 827.342249][T16427] ret_from_fork_asm+0x1a/0x30 [ 827.346999][T16427] [ 827.349304][T16427] Freed by task 16364: [ 827.353337][T16427] kasan_save_stack+0x30/0x50 [ 827.357992][T16427] kasan_save_track+0x14/0x30 [ 827.362650][T16427] kasan_save_free_info+0x3b/0x70 [ 827.367648][T16427] __kasan_slab_free+0x5f/0x80 [ 827.372383][T16427] kfree+0x22b/0x6c0 [ 827.376253][T16427] device_release+0xd2/0x270 [ 827.380820][T16427] kobject_put+0x1f7/0x640 [ 827.385220][T16427] put_device+0x1f/0x30 [ 827.389344][T16427] usb_put_dev+0x23/0x30 [ 827.393571][T16427] usb_remove_hcd.cold+0x307/0x401 [ 827.398657][T16427] dummy_hcd_remove+0x109/0x1e0 [ 827.403482][T16427] platform_remove+0x5f/0x80 [ 827.408052][T16427] device_remove+0xcb/0x180 [ 827.412534][T16427] device_release_driver_internal+0x44e/0x620 [ 827.418648][T16427] unbind_store+0xf8/0x110 [ 827.423157][T16427] drv_attr_store+0x74/0xb0 [ 827.427643][T16427] sysfs_kf_write+0xf2/0x150 [ 827.432221][T16427] kernfs_fop_write_iter+0x3e0/0x5f0 [ 827.437486][T16427] vfs_write+0x6ac/0x1050 [ 827.441790][T16427] ksys_write+0x12a/0x250 [ 827.446112][T16427] do_syscall_64+0x115/0x870 [ 827.450675][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.456554][T16427] [ 827.458850][T16427] Last potentially related work creation: [ 827.464532][T16427] kasan_save_stack+0x30/0x50 [ 827.469179][T16427] kasan_record_aux_stack+0xa7/0xc0 [ 827.474368][T16427] insert_work+0x36/0x230 [ 827.478676][T16427] __queue_work+0x9bc/0x12b0 [ 827.483246][T16427] queue_work_on+0x1a9/0x1e0 [ 827.487806][T16427] rpm_idle+0x700/0x790 [ 827.491935][T16427] rpm_suspend+0xf73/0x11a0 [ 827.496409][T16427] rpm_idle+0x60c/0x790 [ 827.500537][T16427] __pm_runtime_idle+0xba/0x1a0 [ 827.505371][T16427] hub_event+0xe0d/0x4a60 [ 827.509683][T16427] process_one_work+0xa23/0x1940 [ 827.514589][T16427] worker_thread+0x5ef/0xe50 [ 827.519149][T16427] kthread+0x370/0x450 [ 827.523186][T16427] ret_from_fork+0x72b/0xd50 [ 827.527751][T16427] ret_from_fork_asm+0x1a/0x30 [ 827.532499][T16427] [ 827.534798][T16427] Second to last potentially related work creation: [ 827.541359][T16427] kasan_save_stack+0x30/0x50 [ 827.546006][T16427] kasan_record_aux_stack+0xa7/0xc0 [ 827.551178][T16427] insert_work+0x36/0x230 [ 827.555480][T16427] __queue_work+0x9bc/0x12b0 [ 827.560040][T16427] queue_work_on+0x1a9/0x1e0 [ 827.564599][T16427] rpm_idle+0x700/0x790 [ 827.568726][T16427] rpm_suspend+0xf73/0x11a0 [ 827.573202][T16427] rpm_idle+0x60c/0x790 [ 827.577328][T16427] __pm_runtime_idle+0xba/0x1a0 [ 827.582150][T16427] hub_event+0xe0d/0x4a60 [ 827.586459][T16427] process_one_work+0xa23/0x1940 [ 827.591371][T16427] worker_thread+0x5ef/0xe50 [ 827.595929][T16427] kthread+0x370/0x450 [ 827.599975][T16427] ret_from_fork+0x72b/0xd50 [ 827.604546][T16427] ret_from_fork_asm+0x1a/0x30 [ 827.609283][T16427] [ 827.611577][T16427] The buggy address belongs to the object at ffff88802b4bf000 [ 827.611577][T16427] which belongs to the cache kmalloc-2k of size 2048 [ 827.625607][T16427] The buggy address is located 264 bytes inside of [ 827.625607][T16427] freed 2048-byte region [ffff88802b4bf000, ffff88802b4bf800) [ 827.639461][T16427] [ 827.641768][T16427] The buggy address belongs to the physical page: [ 827.648163][T16427] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b4b8 [ 827.656900][T16427] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 827.665374][T16427] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 827.672889][T16427] page_type: f5(slab) [ 827.676842][T16427] raw: 00fff00000000040 ffff88813fe28000 dead000000000100 dead000000000122 [ 827.685394][T16427] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 827.693953][T16427] head: 00fff00000000040 ffff88813fe28000 dead000000000100 dead000000000122 [ 827.702591][T16427] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 827.711231][T16427] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 827.719869][T16427] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 827.728503][T16427] page dumped because: kasan: bad access detected [ 827.734882][T16427] page_owner tracks the page as allocated [ 827.740562][T16427] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5626749860, free_ts 0 [ 827.760165][T16427] post_alloc_hook+0xfd/0x120 [ 827.764827][T16427] get_page_from_freelist+0xf48/0x3530 [ 827.770262][T16427] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 827.776142][T16427] new_slab+0xa2/0x640 [ 827.780194][T16427] refill_objects+0xe3/0x410 [ 827.784759][T16427] __pcs_replace_empty_main+0x376/0x680 [ 827.790280][T16427] __kmalloc_noprof+0x66d/0x820 [ 827.795112][T16427] platform_device_alloc+0x35/0x260 [ 827.800280][T16427] dummy_hcd_init+0x292/0xc00 [ 827.804928][T16427] do_one_initcall+0x11d/0x700 [ 827.809674][T16427] kernel_init_freeable+0x6ea/0x7b0 [ 827.814846][T16427] kernel_init+0x1f/0x1e0 [ 827.819159][T16427] ret_from_fork+0x72b/0xd50 [ 827.823721][T16427] ret_from_fork_asm+0x1a/0x30 [ 827.828460][T16427] page_owner free stack trace missing [ 827.833795][T16427] [ 827.836088][T16427] Memory state around the buggy address: [ 827.841694][T16427] ffff88802b4bf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 827.849734][T16427] ffff88802b4bf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 827.857771][T16427] >ffff88802b4bf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 827.865806][T16427] ^ [ 827.870099][T16427] ffff88802b4bf180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 827.878126][T16427] ffff88802b4bf200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 827.886153][T16427] ================================================================== [ 827.913333][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 827.935062][ T9] usb 4-1: media controller created [ 827.954107][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 829.183935][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 829.398517][ T8596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.445885][T16427] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 829.453079][T16427] CPU: 0 UID: 0 PID: 16427 Comm: syz.3.2860 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 829.463983][T16427] Tainted: [L]=SOFTLOCKUP [ 829.468276][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 829.478302][T16427] Call Trace: [ 829.481557][T16427] [ 829.484481][T16427] dump_stack_lvl+0x100/0x190 [ 829.489134][T16427] vpanic+0x552/0x970 [ 829.493085][T16427] ? __pfx_vpanic+0x10/0x10 [ 829.497559][T16427] ? rcu_is_watching+0x12/0xc0 [ 829.502306][T16427] ? i2c_adapter_lock_bus+0xe0/0x100 [ 829.507570][T16427] panic+0xd1/0xe0 [ 829.511270][T16427] ? __pfx_panic+0x10/0x10 [ 829.515655][T16427] ? i2c_adapter_lock_bus+0xe0/0x100 [ 829.520916][T16427] ? preempt_schedule_common+0x42/0xc0 [ 829.526348][T16427] check_panic_on_warn.cold+0x19/0x34 [ 829.531691][T16427] end_report.part.0+0x3a/0x90 [ 829.536436][T16427] kasan_report.cold+0xe/0x18 [ 829.541098][T16427] ? i2c_adapter_lock_bus+0xe0/0x100 [ 829.546358][T16427] i2c_adapter_lock_bus+0xe0/0x100 [ 829.551453][T16427] i2c_transfer+0x23b/0x380 [ 829.555944][T16427] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 829.560857][T16427] i2cdev_ioctl+0x19d/0x830 [ 829.565333][T16427] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 829.570335][T16427] ? selinux_file_ioctl+0x13b/0x290 [ 829.575511][T16427] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 829.580520][T16427] __x64_sys_ioctl+0x18e/0x210 [ 829.585259][T16427] do_syscall_64+0x115/0x870 [ 829.589821][T16427] ? clear_bhb_loop+0x40/0x90 [ 829.594470][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.600336][T16427] RIP: 0033:0x7fb71b39e019 [ 829.604721][T16427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.624298][T16427] RSP: 002b:00007fb71c1ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.632771][T16427] RAX: ffffffffffffffda RBX: 00007fb71b625fa0 RCX: 00007fb71b39e019 [ 829.640713][T16427] RDX: 0000200000003380 RSI: 0000000000000707 RDI: 0000000000000004 [ 829.648656][T16427] RBP: 00007fb71b43500c R08: 0000000000000000 R09: 0000000000000000 [ 829.656606][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.664546][T16427] R13: 00007fb71b626038 R14: 00007fb71b625fa0 R15: 00007ffc17205ab8 [ 829.672493][T16427] [ 829.675535][T16427] Kernel Offset: disabled [ 829.679829][T16427] Rebooting in 86400 seconds..