last executing test programs: 10m35.315899977s ago: executing program 0 (id=372): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000500), 0x9, 0xc400) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000700000000000061195400000000009500000000000000"], 0x0}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0xd00, 0x4, 0x1, 0x0, 0x3, 0xcc7, 0x8, 0x7, 0x5, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x8c, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0xffff, 0xfffffff4]}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xfffffe3e, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, 0x0, 0x0) 10m34.798109488s ago: executing program 0 (id=374): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000380)={0x400008, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x16000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044055) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x4) landlock_restrict_self(r6, 0x0) 10m34.101386574s ago: executing program 0 (id=376): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001700)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x14, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_socket_connect_nvme_tcp() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x6e855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0xa, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) unshare(0x28040680) r5 = fsopen(0x0, 0x0) fsmount(r5, 0x1, 0x5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000009c0)={r6, &(0x7f0000000ac0), &(0x7f0000000a00)=@tcp6, 0x1}, 0x20) capset(&(0x7f0000000b00)={0x19980330}, &(0x7f0000000000)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 10m31.593282748s ago: executing program 0 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 10m30.388614055s ago: executing program 0 (id=388): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair(0x26, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x80) listen(0xffffffffffffffff, 0xf65a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 10m26.676536971s ago: executing program 0 (id=402): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x9, 0x800001000087}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x400008, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x16000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044055) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x4) landlock_restrict_self(r5, 0x0) 10m25.188666535s ago: executing program 32 (id=402): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x9, 0x800001000087}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x400008, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x16000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044055) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048040}, 0x48804) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x4) landlock_restrict_self(r5, 0x0) 1m29.488977605s ago: executing program 4 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') creat(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000440)) sendmsg$nl_generic(r3, 0x0, 0x4000040) mq_timedsend(r2, 0x0, 0x0, 0x3, 0x0) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r5, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1m28.130514204s ago: executing program 4 (id=2264): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') chdir(0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) 1m27.993054287s ago: executing program 4 (id=2265): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x99, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) prlimit64(r2, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1m26.662681687s ago: executing program 4 (id=2266): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000100)=[{0x2, 0x1, 0xa, 0x9}, {0x0, 0xd9, 0xd, 0x9}, {0x7, 0x1, 0xc, 0x1ff}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fb00080000528e46", "252432e72844858a068b92a5a810f4dc", "b5ab0900", "5aee41448c84afb7"}, 0x28) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000bc0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80002000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x5, 0x39, 0x747d5e13, 0xc, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x3, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0xd, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da6, 0x2, 0x202, 0x2, 0x4, 0xe, 0x7, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xfffffffd, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x8f08, 0x5, 0xfffd, 0x3, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0x5, 0x7, 0x1, 0x6, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0x5, 0x2, 0x0, 0x2, 0x401, 0xc, 0x7, 0x4, 0x9, 0xe, 0x5, 0x3, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0xfffffeef, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x0, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x8000, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xed, 0x9, 0x20000005, 0x3, 0xdc, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x74a8b99a, 0x3, 0x88, 0x2, 0x3fffffe, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x105, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x83, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0x7ffffffd, 0xa, 0xe, 0x101, 0x13, 0xf, 0x136, 0x6]}, 0x45c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0x1}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1m25.701400902s ago: executing program 4 (id=2271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x8502, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x4, 0x0, 0x0) 1m23.941372921s ago: executing program 4 (id=2277): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a580000000c0a010100000000000000008a0000060900020073797a310000000009000100ff797a31000000002c0003801c0000800c00018006000100d10300000c000440000000002df31a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000140)={0x48}) write$selinux_attr(r5, &(0x7f0000000440)='system_u:object_r:printer_device_t:s0\x00', 0x26) add_key(&(0x7f00000006c0)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff3}, {0x9, 0xffe0}}}, 0x24}}, 0x4c014) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x3, 0x1002, 0x5, 0x8, 0xfffffffd, 0x6, 0x140000, 0x5, 0x1244b, 0x5, 0x40100003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0xffffff07, 0x8, 0x5, 0x3, 0xfffffff8]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 1m9.294036707s ago: executing program 33 (id=2277): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a580000000c0a010100000000000000008a0000060900020073797a310000000009000100ff797a31000000002c0003801c0000800c00018006000100d10300000c000440000000002df31a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000140)={0x48}) write$selinux_attr(r5, &(0x7f0000000440)='system_u:object_r:printer_device_t:s0\x00', 0x26) add_key(&(0x7f00000006c0)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff3}, {0x9, 0xffe0}}}, 0x24}}, 0x4c014) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x1, 0x0, 0x100067, 0xcc7, 0x3, 0x7, 0xa, 0x3, 0x1002, 0x5, 0x8, 0xfffffffd, 0x6, 0x140000, 0x5, 0x1244b, 0x5, 0x40100003, 0x89, 0x2, 0xf27, 0x20001e58, 0x6, 0xe69, 0xffffff07, 0x8, 0x5, 0x3, 0xfffffff8]}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 42.855732214s ago: executing program 6 (id=2312): unlink(&(0x7f0000000040)='./file1\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r6, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) 31.977306157s ago: executing program 6 (id=2312): unlink(&(0x7f0000000040)='./file1\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r6, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) 20.388195308s ago: executing program 6 (id=2312): unlink(&(0x7f0000000040)='./file1\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r6, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) 9.319393239s ago: executing program 1 (id=2462): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000325bd7000fedbdf252e0000000c009900020000002a0000001000b0001700000081ff0e00400000803000e3802c00000006000300000800000800020004000000060003000e0700000800020032d2000006000300082b00000800a0000200000004009300"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) pipe(&(0x7f00000000c0)) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x8, 0x280) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82882, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000003c0)={r6, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0xc, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) write$binfmt_misc(r6, &(0x7f0000000440)="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", 0xfa) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f00000001c0)=0x2, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="af", 0x1}, {&(0x7f0000000000)="52749ae6d21c09f76a0b337d586f786ec975e8f14c9b3529796ca700cc9d37baeac114c7376a68909366b4c62f928ae0a0b6211a3f7b7ae7f1691cee9f3444bbd26c2cbd81ba67ceb6ced08c8ff5596c72bbf050c23c047bff433bda7ac2c5b1c9436d95d838c40112fb", 0x6a}], 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000380)="89f2a0c402045cd534f025031a9404066d7f3964476ffb1ca378afd3aa6b3cc740245826848767a36fb745e2", 0x2c, r6}, 0x68) 8.632021894s ago: executing program 1 (id=2465): syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6000000000283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780010000000000000000000000000000000000001fe800000000000000000000000b3f2b1aa8efe5303c6a1935b4366a12daf372fdbc7e6cffd76d04d62e492673e32bf343b1d697986293860af6d8afddb56b188afcd87eaef30dc350100000000000000adb08a0300000014da220b34300f75de675dcae27d66ae00"/191], 0x0) 8.595029762s ago: executing program 6 (id=2312): unlink(&(0x7f0000000040)='./file1\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) gettid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r6, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) recvmsg(r4, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) 7.876229595s ago: executing program 1 (id=2466): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0xba1, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffdfffff9, 0x4031, 0xffffffffffffffff, 0xb7b56000) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) read$qrtrtun(r1, 0x0, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4001}, 0x80, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x81) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae0000002000000ee5b000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000010000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x70bd27, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) 7.454046079s ago: executing program 3 (id=2468): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bind$alg(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x2241c2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) syz_create_resource$binfmt(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(0x0, 0xfffffffffffffff7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x7, 0x0, &(0x7f0000000300)=[0xbfd, 0x6, 0x4, 0xc8, 0x9, 0x9, 0x7], 0x9b37}}, 0x30) pipe2$9p(0x0, 0x80080) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) setgid(0x0) 6.860193985s ago: executing program 5 (id=2470): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0xa000, 0x101, 0x4}) listen(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0}, 0x94) 6.161431297s ago: executing program 2 (id=2471): r0 = getpgrp(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000200)) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) 5.868019624s ago: executing program 3 (id=2472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r1, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, "4feda26323b172e0"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0xf}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x0, 0x3, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0xc000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x60000, 0xc000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x50000, 0x2000, 0xa, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x1000, 0x0, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x40000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x0, 0xf, 0x5, 0x28, 0x3, 0xa, 0x10, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0x8080000, [0x3, 0x401, 0x7, 0x4000000000000c1]}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xb, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 5.368433203s ago: executing program 1 (id=2473): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) connect(r1, &(0x7f00000001c0)=@caif=@dbg={0x25, 0x3, 0x7f}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.358879171s ago: executing program 5 (id=2474): futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x181, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048004) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x7ff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0xf23, 0x0, 0xc, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) 4.873379211s ago: executing program 3 (id=2475): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_open_dev$dri(0x0, 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x98f910, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040040) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000100)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa}, [{{0x254, 0x1, {{0x0, 0xfffffbbf}, 0x75, 0x7f, 0x2, 0x9, 0x14, 'syz0\x00', "0dc8c957e3a0354f1d556ca93a4f50e038f7d97fc2e1b11003f06d4c32fa400d", "3559a5860fe073b810f002afe1e5e01c98de66447358791e672ed3fbb5506dcc", [{0xfffc, 0xbd75, {0x3, 0x3b2e}}, {0x800, 0x2, {0x3, 0x3}}, {0xd, 0x2, {0x1, 0x6e4}}, {0x3ff, 0x2, {0x0, 0x1ff}}, {0x1, 0x8, {0x2, 0x7}}, {0x3, 0x7, {0x0, 0x80000000}}, {0x3, 0x0, {0x3, 0x1}}, {0x9, 0x74b, {0x1, 0x5}}, {0x9, 0x3, {0x2, 0x9}}, {0x800, 0x88e, {0x0, 0x1}}, {0x7, 0xea8d, {0x0, 0x5}}, {0x0, 0x6, {0xa7678e7f685eda2b, 0x48e}}, {0x5, 0x1, {0x0, 0xa}}, {0x8, 0x3, {0x2, 0x2}}, {0x1, 0x37, {0x2, 0xffffffb5}}, {0x2fe4, 0xf41, {0x0, 0x530}}, {0xdd9, 0x2, {0x2, 0x8}}, {0x5eb, 0x7, {0x3, 0x1}}, {0x400, 0x1ff, {0x1, 0x4}}, {0xff, 0xbe, {0x3, 0x6}}, {0x6, 0xa, {0x1, 0x80000001}}, {0x2, 0x5, {0x1, 0xa}}, {0x200, 0x0, {0x1, 0x200}}, {0x0, 0x200, {0x3, 0x8001}}, {0x3, 0x8, {0x1, 0x9}}, {0x7, 0x4, {0x0, 0x1}}, {0x2, 0x0, {0x3, 0x2}}, {0x3, 0x8000, {0x2, 0x9}}, {0x2, 0x4, {0x0, 0xc}}, {0x800, 0x8, {0x3, 0x5}}, {0x1, 0xab97, {0x3, 0x3}}, {0xcb, 0x7, {0x0, 0x3}}, {0x8, 0x5d55, {0x0, 0x7fffffff}}, {0x6, 0xf, {0x1, 0xffff}}, {0x8, 0x81, {0x1, 0x6}}, {0x400, 0x3ff, {0x1}}, {0x7, 0x5, {0x3, 0x74f}}, {0x2, 0xfff, {0x0, 0x9}}, {0x5d, 0x9, {0x4cbbfbc150c1a20d, 0x4}}, {0x6, 0x40, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x43b}, 0x2, 0x0, 0x6, 0xff8b, 0x28, 'syz1\x00', "3622fbd72701c8ca70212a71cddebf152a530d5294c2dadc885a07428a482cb3", "fab363d514db4d20c4c2d69c2963632a6301423fe48e70c50b3b416de25d2ff5", [{0xee8b, 0x80, {0x1, 0xcedd}}, {0x3, 0x0, {0x2, 0xff}}, {0x6, 0x100, {0x2, 0xc000}}, {0x0, 0x5, {0x1, 0x2cd}}, {0x5ed, 0x5, {0x0, 0x3}}, {0x80, 0xd0d, {0x2, 0x40009}}, {0x2, 0x1ff, {0x3, 0x80000000}}, {0x2, 0x101, {0x0, 0xfffffffd}}, {0x68b0, 0x4, {0x1, 0x5}}, {0x101, 0x5, {0x1, 0x7}}, {0x5, 0xfffc, {0x0, 0x2}}, {0x80, 0x38}, {0xffff, 0x3, {0x2, 0x1000}}, {0xfe00, 0xa, {0x1, 0xa}}, {0x5, 0x8, {0x2, 0x3}}, {0xd8, 0x2, {0x1, 0x93}}, {0x8, 0xbd, {0x0, 0x9e7}}, {0xbd, 0x7, {0x3, 0x3}}, {0x1, 0x8, {0x3, 0x4}}, {0x8, 0x9, {0x2, 0x2}}, {0x1, 0x4, {0x0, 0x8}}, {0x5, 0x0, {0x2, 0x8}}, {0x3, 0x0, {0x0, 0x400002}}, {0xf, 0x7, {0x2, 0x8}}, {0xc6, 0x12f, {0x0, 0x9}}, {0x2, 0x1}, {0x4, 0x7f, {0x2, 0xff}}, {0x2, 0x3, {0x2, 0x3}}, {0x3, 0x5, {0x2, 0x6}}, {0x3, 0x5, {0x2, 0x9}}, {0x9, 0x2, {0x3, 0x1fa7}}, {0x1, 0x7, {0x3, 0x6}}, {0x111f, 0x3, {0x0, 0xb}}, {0x3cd1, 0x722c, {0x0, 0x1}}, {0xf, 0x1, {0x1, 0x7ffc}}, {0x4, 0x4, {0x1, 0x9}}, {0x7, 0x5a, {0x0, 0x1ff}}, {0x6, 0x3ff, {0x2}}, {0x1000, 0x10, {0x2, 0x2}}, {0x3, 0xfffa, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x5, 0x9f, 0x8001, 0x0, 0x10, 'syz1\x00', "df4e92831ec65b5d2c5df6366ac9bd669ff5b0933b93ea0c5f272e7e35f68316", "759d4e002a359611d547ce4a12fcad7ed7bf0cdd98c36d131a29c4666c7b8866", [{0x2, 0x4, {0x0, 0x8}}, {0x9, 0x7, {0x2, 0xf}}, {0x9, 0x3, {0x0, 0x2f2e}}, {0xa, 0x5, {0x0, 0xfffff001}}, {0x7, 0x7, {0x2, 0x7f}}, {0x71d, 0x40, {0x1, 0xfffffffa}}, {0x4, 0x115, {0x2, 0x6}}, {0x8f24, 0xd, {0x0, 0x6}}, {0x3, 0xa, {0x3, 0x3}}, {0xfff7, 0x5e5a, {0x1, 0x7}}, {0x80, 0x7, {0x0, 0x2}}, {0x8, 0xb, {0x2}}, {0xb, 0x8, {0x2, 0xfffffffe}}, {0xfff, 0x9251, {0x0, 0x7}}, {0x16, 0x3, {0x0, 0xdc00}}, {0x2, 0x5, {0x0, 0x3}}, {0x8001, 0x9, {0x0, 0x7}}, {0xfa7b, 0x8, {0x3, 0x3}}, {0xffb6, 0x2, {0x0, 0x7}}, {0x4, 0x5, {0x1, 0x1}}, {0x1000, 0x8, {0x0, 0x1}}, {0x4, 0x4, {0x1, 0x399}}, {0x484, 0x0, {0x3, 0xcc}}, {0x4, 0xc43e, {0x3, 0x8}}, {0x800, 0x7, {0x2, 0xffff}}, {0x91f5, 0x6, {0x3, 0x979d}}, {0x100, 0x4, {0x0, 0x1}}, {0xe, 0x4, {0x1}}, {0x4, 0x65, {0x2, 0x6}}, {0x0, 0x7, {0x1, 0xffffffff}}, {0x7, 0xfff5, {0x3, 0x2}}, {0x57, 0x7, {0x1, 0x2}}, {0x7f, 0x53, {0x0, 0xd0b2}}, {0x8000, 0x8, {0x1, 0x2}}, {0x9, 0x4, {0x3, 0x5}}, {0x0, 0x2e93, {0x2, 0xa67d}}, {0x5, 0xde5f, {0x1, 0x3}}, {0xc2a, 0xab, {0x0, 0x241f}}, {0xd3, 0x6, {0x2, 0x2}}, {0x58, 0x5, {0x1, 0x9}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x50}, 0x40000) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',ws\x00no=', @ANYRESHEX=r5, @ANYBLOB=',version=9p2000,\x00']) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) 4.589526826s ago: executing program 1 (id=2476): r0 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000080), 0xf80, 0x5814c1) ioctl$LOOP_SET_STATUS(r1, 0xc01070ce, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f000014f000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x8800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000a80)=[{0x44, 0x0, [0x0, 0x1ff, 0x3, 0x6, 0x9, 0x7, 0x7, 0x0, 0x6, 0x2b7, 0x0, 0x3, 0x200, 0xb, 0x0, 0x9]}, {0x9, 0x0, [0x7ff, 0x3ff, 0x200, 0x6, 0x0, 0x9, 0x2, 0x5, 0xffe, 0x5, 0x4, 0x1000, 0xf7e1, 0x7, 0x1000, 0x7a44]}, {0x34, 0x0, [0x3, 0x20, 0x10, 0x7, 0x1, 0x3a3d1b24, 0x80000000, 0x5, 0x8, 0x998, 0x0, 0x5, 0x80, 0x7, 0x3ff, 0x1]}]}}, 0xfffffffffffffe9a) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x6d53, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000f50000008502000083000000bf09000000000000550901000000000095000000000000009500000000000000bf910000000000000000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x1, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640), &(0x7f0000000680)=[{0x1, 0x3, 0x9, 0xb}, {0x1, 0x1, 0x7, 0xa}, {0x3, 0x5, 0xa, 0x3}, {0x5, 0x4, 0x5, 0xf868ab85a9a917ae}, {0x3, 0x5, 0x10, 0x6}, {0x4, 0x2, 0x5, 0x7}], 0x10, 0x7}, 0x94) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) 4.380650718s ago: executing program 5 (id=2477): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)=""/167, 0xa7}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f00000004c0)=""/221, 0xdd}, {&(0x7f00000005c0)=""/61, 0x3d}, {&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/231, 0xe7}], 0x8}, 0x210}, {{&(0x7f0000000c00)=@qipcrtr, 0x80, &(0x7f0000000d00)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/123, 0x7b}, {&(0x7f0000000900)=""/7, 0x7}], 0x3}, 0xcc03}, {{&(0x7f0000000d40)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000dc0)=""/75, 0x4b}, {&(0x7f0000000e40)=""/237, 0xed}, {&(0x7f0000000f40)=""/27, 0x1b}, {&(0x7f0000000f80)=""/178, 0xb2}, {&(0x7f00000010c0)=""/250, 0xfa}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/105, 0x69}, {&(0x7f0000001240)=""/163, 0xa3}], 0x8}, 0x7}, {{&(0x7f0000001440)=@qipcrtr, 0x80, &(0x7f0000001040)=[{&(0x7f00000014c0)=""/252, 0xfc}], 0x1, &(0x7f00000015c0)=""/241, 0xf1}, 0x7}, {{&(0x7f00000016c0), 0x80, &(0x7f0000003880)=[{&(0x7f0000001740)=""/55, 0x37}, {&(0x7f0000001780)=""/171, 0xab}], 0x2, &(0x7f00000038c0)=""/77, 0x4d}, 0x6}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000080)={0x30, 0x0, 0x2000000, 0x0, 0x5, 0x400, 0x1, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) socket(0x2, 0x80805, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x459, 0x10, r3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.073056394s ago: executing program 2 (id=2478): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.985949744s ago: executing program 3 (id=2479): r0 = getpgrp(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) prctl$PR_SET_PTRACER(0x59616d61, r0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) 3.858885603s ago: executing program 5 (id=2480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20040001) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') read$char_usb(r5, &(0x7f0000000040)=""/179, 0xb3) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000019300)="c4a1651453720f20c035000004000f22c066b885000f00d0c442598c9cde1ad20000f436de7983480f6e5a9b400f07f2f30f07420f79aa0e000000", 0x3b}], 0x1, 0x55, 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) 2.922985756s ago: executing program 2 (id=2481): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$video4linux(&(0x7f0000000540), 0x5, 0x20800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x300e, 0x221e, 0xffffeff6, 0x1, 0xc8, 0x1}) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x37) 2.864619533s ago: executing program 3 (id=2482): getpid() madvise(&(0x7f0000bdd000/0x2000)=nil, 0x2000, 0x61) syz_open_dev$sndctrl(0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0xad62, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x1, 0x8000018, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x3) socket$kcm(0x10, 0x2, 0x0) unshare(0x8000280) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff07) 2.620349142s ago: executing program 2 (id=2483): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x99, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="82ab", 0x2}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r6, &(0x7f0000000140)="1b63cdcf93edb124fdec7a4e65b8096ad168f68bc503fee30242", 0x1a, 0x3b00, 0x0, 0x0) prlimit64(r2, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.374752632s ago: executing program 1 (id=2484): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x280) io_setup(0x19, &(0x7f00000009c0)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, &(0x7f0000000180)=@caif=@rfm={0x25, 0x107ff, "6798c48f000000ec00"}, 0x80) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r5, 0x0, 0x0) r6 = socket(0x0, 0x2, 0x3) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x9}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x0, 0x2, 0x0, 0xfffffffd, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x10, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) 1.501692134s ago: executing program 2 (id=2485): io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r0, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], 0x0) io_destroy(r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6d", 0x8}) 236.138386ms ago: executing program 5 (id=2486): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) connect(r1, &(0x7f00000001c0)=@caif=@dbg={0x25, 0x3, 0x7f}, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 144.677704ms ago: executing program 2 (id=2487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010026bd7000fedbdf250600000006000b0006"], 0x1c}, 0x1, 0x0, 0x0, 0x8008050}, 0x44890) 491.77µs ago: executing program 3 (id=2488): socket(0x3, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8825}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) gettid() bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1}, 0x20) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="a281fc9cba02d223a544302a4e9ce8a2d941bb065d9eb75e00f2cdb7daa364be06f598945d069799199fa33acb63e4defcbc87b0895d3c3d56c37b7e47ceb9fd725bbfc26820540130bcdd307ef50a6b0ec889150e476b1aa5dad753411d4565cde6ce624e1c3b91bb9ba0eae87d3be67c7e412dba03c3f3e4aa325e9a760d266f1221c0b604db69d38097b29cf8f73a8c570774e685e292921d0c6e2b54004c660918080a3dbdceff54ca9231bdd948bd7bb1c8", 0xb4}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="a8450bb7823587d628a8c7442b5e317ea83e5634790255754305d6f1350f609e4f0875e3dfd77af783aece787b97a86ddcba5f0fef44f6988e53583c50e194a1e3d3d04a439e09f1a955a8112c14b185bd23b422920fed14e3b010641931fc80495a528e2cfc9251ca488ddcc947afb62a465577c67bf99f55330c784adbcea153d470fd11d8f340498c073ca06d", 0x8e}, {&(0x7f0000000300)}, {&(0x7f0000000640)="5cf636d3cd2347cd6f3670c3973ed240d635e66a86be6394f208493005060cab6274cc1094ee17692bbcef3f978933b0bc5a27ae1132cf43413388b3e7ae76c4d1b7c692c1a644cff6f47b8b465aeee251931ba43afbee10b70c56d904411231f77836de31d79d8951e5c2cfb6d24b20eb7938899742e43d6ec01f20294930f435be1c04556ad68248ef511528da9df1ab8629c58864c68cf61079341ee7ba11dcd711064e8a22b4fe5d293a8be9298b63f0905da2a75c627a0eaf93f5ad6601071de7c76c5b1d4fdd2a638c0ab6942d25ebe7e3ed64", 0xd6}], 0x5, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0xa, 0x400) write$rfkill(r3, &(0x7f0000000340)={0x10006, 0x0, 0x3, 0x1, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=2489): r0 = getpgrp(0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000200)) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) kernel console output (not intermixed with test programs): usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.709694][ T5933] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 716.728016][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.741281][ T5933] usb 3-1: Product: syz [ 716.750101][ T5933] usb 3-1: Manufacturer: syz [ 716.760420][ T5933] usb 3-1: SerialNumber: syz [ 717.214340][ T5933] usb 3-1: 0:2 : does not exist [ 717.694168][ T5933] usb 3-1: USB disconnect, device number 61 [ 717.776194][T13019] udevd[13019]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.007050][T14331] trusted_key: encrypted_key: insufficient parameters specified [ 718.053057][T14331] 9pnet_fd: Insufficient options for proto=fd [ 718.066176][ T5933] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 718.315218][ T5933] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 718.325329][ T5933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.349817][ T5933] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 718.360177][ T5911] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 718.386182][ T5933] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 718.397037][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.406174][ T5933] usb 3-1: Product: syz [ 718.411204][T14337] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 718.421169][T14337] SELinux: failed to load policy [ 718.427738][ T5933] usb 3-1: Manufacturer: syz [ 718.433344][ T5933] usb 3-1: SerialNumber: syz [ 718.473680][ T5879] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 718.489118][ T30] kauditd_printk_skb: 285 callbacks suppressed [ 718.489145][ T30] audit: type=1400 audit(2000000415.194:8330): avc: denied { ioctl } for pid=14334 comm="syz.3.2218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 718.521393][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 718.549021][ T30] audit: type=1400 audit(2000000415.257:8331): avc: denied { ioctl } for pid=14298 comm="syz.2.2206" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 718.557227][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 718.608593][ T5879] usb 4-1: device descriptor read/64, error -71 [ 718.617835][T14337] batman_adv: batadv0: Adding interface: macvlan1 [ 718.619539][ T5911] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 718.633743][T14337] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.661192][ T30] audit: type=1400 audit(2000000415.267:8332): avc: denied { ioctl } for pid=14326 comm="syz.4.2214" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 718.661652][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.699788][ T30] audit: type=1400 audit(2000000415.351:8333): avc: denied { ioctl } for pid=14326 comm="syz.4.2214" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 718.712438][T14337] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 718.743253][ T30] audit: type=1400 audit(2000000415.456:8334): avc: denied { read write } for pid=5796 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.754109][ T5911] usb 5-1: Product: syz [ 718.776313][ T5911] usb 5-1: Manufacturer: syz [ 718.784318][ T5911] usb 5-1: SerialNumber: syz [ 718.854988][ T5879] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 718.993512][ T5911] usb 5-1: config 0 descriptor?? [ 719.013761][ T5933] usb 3-1: USB disconnect, device number 62 [ 719.035360][ T5879] usb 4-1: device descriptor read/64, error -71 [ 719.070743][ T30] audit: type=1400 audit(2000000415.456:8335): avc: denied { open } for pid=5796 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 719.105622][ T30] audit: type=1400 audit(2000000415.456:8336): avc: denied { ioctl } for pid=5796 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 719.137866][T14347] loop8: detected capacity change from 0 to 7 [ 719.144282][ T5879] usb usb4-port1: attempt power cycle [ 719.147330][T13019] udevd[13019]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 719.174845][ T30] audit: type=1400 audit(2000000415.530:8337): avc: denied { ioctl } for pid=14334 comm="syz.3.2218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 719.174916][T14347] Dev loop8: unable to read RDB block 7 [ 719.225029][ T30] audit: type=1400 audit(2000000415.624:8338): avc: denied { ioctl } for pid=14334 comm="syz.3.2218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 719.255728][ T30] audit: type=1400 audit(2000000415.635:8339): avc: denied { execmem } for pid=14341 comm="syz.2.2220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 719.304723][T14347] loop8: unable to read partition table [ 719.310539][T14347] loop8: partition table beyond EOD, truncated [ 719.336113][T14347] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 719.485899][ T5879] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 719.871695][ T5879] usb 4-1: device descriptor read/8, error -71 [ 719.895012][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 719.904510][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.007795][ T5933] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 720.036156][ T5911] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 720.043211][ T5911] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 720.188237][ T5879] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 720.217373][ T5879] usb 4-1: device descriptor read/8, error -71 [ 720.245006][ T5933] usb 2-1: Using ep0 maxpacket: 32 [ 720.253416][ T5933] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 720.267981][T14355] can: request_module (can-proto-3) failed. [ 720.274119][ T5933] usb 2-1: config 0 has no interface number 0 [ 720.280303][ T5933] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.291973][ T5933] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.302400][ T5933] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 720.311454][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.322341][ T5879] usb usb4-port1: unable to enumerate USB device [ 720.332981][ T5933] usb 2-1: config 0 descriptor?? [ 720.530215][ T5879] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 720.684435][ T5879] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 720.695316][ T5879] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 720.708295][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 720.714984][ T5879] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 720.724282][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.736323][ T5879] usb 3-1: config 0 descriptor?? [ 720.953159][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 721.090990][T14362] netlink: 'syz.2.2226': attribute type 38 has an invalid length. [ 721.172578][T14367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2227'. [ 721.229003][ T5933] usbhid 2-1:0.1: can't add hid device: -71 [ 721.249862][ T5933] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 721.314293][ T5933] usb 2-1: USB disconnect, device number 67 [ 721.395082][ T5911] usb 5-1: USB disconnect, device number 56 [ 721.519071][T14378] trusted_key: encrypted_key: insufficient parameters specified [ 721.573182][T14378] 9pnet_fd: Insufficient options for proto=fd [ 721.789259][ T5879] hid-rmi 0003:17EF:6085.0025: hidraw0: USB HID v0.04 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 721.853364][ T5879] usb 3-1: USB disconnect, device number 63 [ 722.328270][T14385] fido_id[14385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 722.570339][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 722.701737][ T5879] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 722.823815][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 722.975253][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.994033][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 723.007968][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 723.025067][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.044908][ T9] usb 5-1: config 0 descriptor?? [ 723.101159][ T5879] usb 4-1: device descriptor read/64, error -71 [ 723.114370][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 723.161923][T14403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2237'. [ 723.253988][ T30] kauditd_printk_skb: 271 callbacks suppressed [ 723.254004][ T30] audit: type=1400 audit(2000000420.204:8611): avc: denied { unlink } for pid=14404 comm="syz.2.2238" name="#51" dev="tmpfs" ino=2311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 723.339613][ T5879] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 723.342246][ T30] audit: type=1400 audit(2000000420.204:8612): avc: denied { ioctl } for pid=14405 comm="syz.5.2239" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 723.464983][ T30] audit: type=1400 audit(2000000420.235:8613): avc: denied { ioctl } for pid=14387 comm="syz.3.2233" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 723.503432][ T5879] usb 4-1: device descriptor read/64, error -71 [ 723.549087][ T30] audit: type=1400 audit(2000000420.235:8614): avc: denied { mount } for pid=14404 comm="syz.2.2238" name="/" dev="overlay" ino=2305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 723.590018][ T30] audit: type=1400 audit(2000000420.246:8615): avc: denied { read write } for pid=7469 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.610347][ T5879] usb usb4-port1: attempt power cycle [ 723.624799][ T30] audit: type=1400 audit(2000000420.246:8616): avc: denied { read write open } for pid=7469 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 723.675631][T14422] audit: audit_backlog=66 > audit_backlog_limit=64 [ 723.676070][ T7469] audit: audit_backlog=66 > audit_backlog_limit=64 [ 723.691794][ T7469] audit: audit_lost=17 audit_rate_limit=0 audit_backlog_limit=64 [ 723.701222][ T7469] audit: backlog limit exceeded [ 723.977980][ T5879] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 723.996644][ T5879] usb 4-1: device descriptor read/8, error -71 [ 724.271968][ T5879] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 724.302270][ T5879] usb 4-1: device descriptor read/8, error -71 [ 724.521107][ T5879] usb usb4-port1: unable to enumerate USB device [ 725.338539][ T9] usb 5-1: USB disconnect, device number 57 [ 725.369871][T14446] bond_slave_1: entered promiscuous mode [ 725.375617][T14446] bond_slave_1: left promiscuous mode [ 725.537427][ T1202] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 725.750532][ T1202] usb 2-1: Using ep0 maxpacket: 16 [ 725.768671][ T1202] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 725.825087][ T1202] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 725.877035][ T1202] usb 2-1: config 0 has no interface number 0 [ 725.906396][ T1202] usb 2-1: too many endpoints for config 0 interface 159 altsetting 116: 93, using maximum allowed: 30 [ 725.937785][ T1202] usb 2-1: config 0 interface 159 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 93 [ 726.002363][ T1202] usb 2-1: config 0 interface 159 has no altsetting 0 [ 726.028099][ T1202] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 726.185270][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.644141][ T1202] usb 2-1: config 0 descriptor?? [ 726.699920][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 727.320407][ T1202] usb 2-1: string descriptor 0 read error: -71 [ 727.330337][ T1202] usb 2-1: USB disconnect, device number 68 [ 727.461513][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 727.469481][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.481934][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 727.502372][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 727.567792][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.588696][ T9] usb 3-1: config 0 descriptor?? [ 728.074671][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 728.083857][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2258'. [ 728.093335][T14481] netlink: 'syz.2.2258': attribute type 6 has an invalid length. [ 728.109090][ T1202] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 728.122032][ T30] kauditd_printk_skb: 317 callbacks suppressed [ 728.122049][ T30] audit: type=1400 audit(2000000425.308:8914): avc: denied { read write } for pid=14480 comm="syz.5.2263" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 728.272083][ T30] audit: type=1400 audit(2000000425.308:8915): avc: denied { open } for pid=14480 comm="syz.5.2263" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 728.305064][ T30] audit: type=1400 audit(2000000425.308:8916): avc: denied { ioctl } for pid=14480 comm="syz.5.2263" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 728.307273][ T9] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 728.332124][ T30] audit: type=1400 audit(2000000425.424:8917): avc: denied { ioctl } for pid=14478 comm="syz.3.2262" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 728.391518][ T5879] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 728.473019][ T1202] usb 4-1: Using ep0 maxpacket: 8 [ 728.527662][ T1202] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 728.545791][ T1202] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 728.556355][ T9] microsoft 0003:045E:07DA.0026: unknown main item tag 0x7 [ 728.564769][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.576499][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 728.582796][ T1202] usb 4-1: Product: syz [ 728.585061][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 728.587128][ T9] HID 045e:07da: Invalid code 768 type 1 [ 728.597720][ T1202] usb 4-1: Manufacturer: syz [ 728.598743][ T5879] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 728.602353][ T1202] usb 4-1: SerialNumber: syz [ 728.614948][ T9] HID 045e:07da: Invalid code 769 type 1 [ 728.620596][ T9] HID 045e:07da: Invalid code 770 type 1 [ 728.628639][ T30] audit: type=1400 audit(2000000425.424:8918): avc: denied { ioctl } for pid=14478 comm="syz.3.2262" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 728.629523][ T9] HID 045e:07da: Invalid code 771 type 1 [ 728.659584][ T1202] usb 4-1: config 0 descriptor?? [ 728.692137][ T1202] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 728.704921][ T5879] usb 6-1: config 0 has no interface number 0 [ 728.715627][ T5879] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.739630][ T5879] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.748760][T14481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'. [ 728.751344][ T30] audit: type=1400 audit(2000000425.424:8919): avc: denied { ioctl } for pid=14478 comm="syz.3.2262" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 728.766264][ T9] HID 045e:07da: Invalid code 772 type 1 [ 728.794603][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2258'. [ 728.815704][ T5879] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 728.834092][T14481] netlink: 'syz.2.2258': attribute type 6 has an invalid length. [ 728.842086][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.885078][ T5879] usb 6-1: config 0 descriptor?? [ 728.899361][ T9] HID 045e:07da: Invalid code 773 type 1 [ 728.923628][ T9] HID 045e:07da: Invalid code 774 type 1 [ 728.937216][ T9] HID 045e:07da: Invalid code 775 type 1 [ 728.944973][ T9] HID 045e:07da: Invalid code 776 type 1 [ 728.950736][ T30] audit: type=1400 audit(2000000425.466:8920): avc: denied { ioctl } for pid=14480 comm="syz.5.2263" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.021882][ T30] audit: type=1400 audit(2000000425.476:8921): avc: denied { create } for pid=14462 comm="syz.2.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 729.093085][ T30] audit: type=1400 audit(2000000425.476:8922): avc: denied { write } for pid=14462 comm="syz.2.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 729.179923][ T30] audit: type=1400 audit(2000000425.476:8923): avc: denied { ioctl } for pid=14462 comm="syz.2.2258" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 729.356739][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0026/input/input51 [ 729.947828][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2263'. [ 730.164949][ T1202] gspca_zc3xx: reg_w_i err -71 [ 730.186145][ T9] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 730.247865][ T5879] usbhid 6-1:0.1: can't add hid device: -71 [ 730.254110][ T5879] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 730.254528][ T9] usb 3-1: USB disconnect, device number 64 [ 730.324255][ T5879] usb 6-1: USB disconnect, device number 50 [ 730.439920][T14492] fido_id[14492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 730.741285][T14496] input: syz1 as /devices/virtual/input/input52 [ 730.842019][ T1202] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 730.848372][ T1202] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 730.958527][ T1202] usb 4-1: USB disconnect, device number 71 [ 731.020953][T14501] rdma_rxe: rxe_newlink: failed to add syz_tun [ 731.201026][T14506] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 731.213012][ T5879] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 731.415314][ T5879] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 731.432135][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.468597][T14513] tc_dump_action: action bad kind [ 731.555844][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.584636][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 731.603699][ T5879] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 731.616687][ T5879] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 731.627163][ T5879] usb 6-1: Manufacturer: syz [ 731.805478][ T5879] usb 6-1: config 0 descriptor?? [ 732.271269][T14525] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 732.335886][T14527] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 732.356006][ T5911] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 732.365261][ T5879] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 732.386991][ T5879] appleir 0003:05AC:8243.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 732.556986][ T5914] usb 6-1: USB disconnect, device number 51 [ 732.612628][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 732.620015][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.655288][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.691257][ T5911] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 732.692397][T14530] fido_id[14530]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 732.724604][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.758706][ T5911] usb 2-1: config 0 descriptor?? [ 732.893163][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 732.893178][ T30] audit: type=1400 audit(2000000430.318:9119): avc: denied { prog_load } for pid=14533 comm="syz.3.2276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 733.050671][ T30] audit: type=1400 audit(2000000430.328:9120): avc: denied { perfmon } for pid=14533 comm="syz.3.2276" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 733.138720][T14536] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 733.466778][ T5911] zydacron 0003:13EC:0006.0028: item fetching failed at offset 0/2 [ 733.475933][ T5911] zydacron 0003:13EC:0006.0028: parse failed [ 733.482781][ T30] audit: type=1400 audit(2000000430.328:9121): avc: denied { bpf } for pid=14533 comm="syz.3.2276" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 733.504206][ T30] audit: type=1400 audit(2000000430.349:9122): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 733.528317][ T5911] zydacron 0003:13EC:0006.0028: probe with driver zydacron failed with error -22 [ 733.528907][ T30] audit: type=1400 audit(2000000430.517:9123): avc: denied { ioctl } for pid=14510 comm="syz.1.2261" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 733.586436][ T30] audit: type=1400 audit(2000000430.580:9124): avc: denied { relabelfrom } for pid=14533 comm="syz.3.2276" name="UNIX" dev="sockfs" ino=48219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 733.627370][ T30] audit: type=1400 audit(2000000430.591:9125): avc: denied { mac_admin } for pid=14533 comm="syz.3.2276" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 733.660964][ T30] audit: type=1400 audit(2000000430.601:9126): avc: denied { relabelto } for pid=14533 comm="syz.3.2276" name="UNIX" dev="sockfs" ino=48219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 734.012502][ T30] audit: type=1400 audit(2000000430.686:9127): avc: denied { read open } for pid=14533 comm="syz.3.2276" path="time:[4026533089]" dev="nsfs" ino=4026533089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 734.072945][ T5914] usb 2-1: USB disconnect, device number 69 [ 734.220525][ T30] audit: type=1400 audit(2000000430.686:9128): avc: denied { read write } for pid=14533 comm="syz.3.2276" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 734.897707][ T5933] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 734.993040][ T5914] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 735.143014][ T5933] usb 4-1: Using ep0 maxpacket: 32 [ 735.158519][ T5933] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 735.167215][ T5933] usb 4-1: config 0 has no interface number 0 [ 735.173703][ T5933] usb 4-1: config 0 interface 12 has no altsetting 0 [ 735.185225][ T5933] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 735.192703][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 735.202637][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.211472][ T5933] usb 4-1: Product: syz [ 735.225172][ T5933] usb 4-1: Manufacturer: syz [ 735.236413][ T5933] usb 4-1: SerialNumber: syz [ 735.377142][ T5933] usb 4-1: config 0 descriptor?? [ 735.635117][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.646215][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.656217][ T5914] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 735.687909][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.718056][ T5914] usb 6-1: config 0 descriptor?? [ 735.871063][T14561] rdma_rxe: rxe_newlink: failed to add syz_tun [ 736.109298][ T5933] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 736.114408][ T5914] usbhid 6-1:0.0: can't add hid device: -71 [ 736.128737][ T5933] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 736.137452][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 736.149569][ T5933] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 736.164310][ T5914] usb 6-1: USB disconnect, device number 52 [ 736.168462][ T5933] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 736.202099][ T5933] usb 4-1: USB disconnect, device number 72 [ 737.515023][T14577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2289'. [ 737.539175][T14577] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2289'. [ 737.923355][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 737.923371][ T30] audit: type=1400 audit(2000000435.611:9364): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 737.994780][T14580] FAULT_INJECTION: forcing a failure. [ 737.994780][T14580] name failslab, interval 1, probability 0, space 0, times 0 [ 738.007523][T14580] CPU: 0 UID: 0 PID: 14580 Comm: syz.3.2290 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.007550][T14580] Tainted: [L]=SOFTLOCKUP [ 738.007556][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 738.007567][T14580] Call Trace: [ 738.007573][T14580] [ 738.007580][T14580] dump_stack_lvl+0x100/0x190 [ 738.007616][T14580] should_fail_ex.cold+0x5/0xa [ 738.007638][T14580] should_failslab+0xc2/0x120 [ 738.007658][T14580] __kvmalloc_node_noprof+0xfa/0xa00 [ 738.007674][T14580] ? alloc_netdev_mqs+0xd7/0x14f0 [ 738.007704][T14580] ? __pfx_hsr_dev_setup+0x10/0x10 [ 738.007722][T14580] alloc_netdev_mqs+0xd7/0x14f0 [ 738.007750][T14580] rtnl_create_link+0xc13/0xf80 [ 738.007776][T14580] rtnl_newlink+0x13b8/0x2380 [ 738.007808][T14580] ? __pfx_rtnl_newlink+0x10/0x10 [ 738.007829][T14580] ? find_held_lock+0x2b/0x80 [ 738.007847][T14580] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 738.007875][T14580] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 738.007906][T14580] ? avc_has_perm_noaudit+0x145/0x3b0 [ 738.007956][T14580] ? find_held_lock+0x2b/0x80 [ 738.007973][T14580] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 738.007995][T14580] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 738.008020][T14580] ? __pfx_rtnl_newlink+0x10/0x10 [ 738.008044][T14580] rtnetlink_rcv_msg+0x95e/0xe90 [ 738.008070][T14580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 738.008100][T14580] ? ref_tracker_free+0x37e/0x6c0 [ 738.008123][T14580] netlink_rcv_skb+0x159/0x420 [ 738.008149][T14580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 738.008174][T14580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.008209][T14580] ? netlink_deliver_tap+0x1ae/0xcc0 [ 738.008239][T14580] netlink_unicast+0x5aa/0x870 [ 738.008269][T14580] ? __pfx_netlink_unicast+0x10/0x10 [ 738.008304][T14580] netlink_sendmsg+0x8b0/0xda0 [ 738.008334][T14580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.008357][T14580] ? __might_fault+0x10/0x140 [ 738.008392][T14580] ____sys_sendmsg+0xa54/0xc30 [ 738.008412][T14580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.008440][T14580] ___sys_sendmsg+0x190/0x1e0 [ 738.008460][T14580] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.008506][T14580] __sys_sendmsg+0x170/0x220 [ 738.008530][T14580] ? __pfx___sys_sendmsg+0x10/0x10 [ 738.008569][T14580] do_syscall_64+0x106/0xf80 [ 738.008597][T14580] ? clear_bhb_loop+0x40/0x90 [ 738.008619][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.008637][T14580] RIP: 0033:0x7f3b37d9bf79 [ 738.008652][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.008669][T14580] RSP: 002b:00007f3b35fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.008686][T14580] RAX: ffffffffffffffda RBX: 00007f3b38015fa0 RCX: 00007f3b37d9bf79 [ 738.008698][T14580] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 738.008709][T14580] RBP: 00007f3b35fee090 R08: 0000000000000000 R09: 0000000000000000 [ 738.008720][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.008730][T14580] R13: 00007f3b38016038 R14: 00007f3b38015fa0 R15: 00007ffdb858c158 [ 738.008756][T14580] [ 738.036364][ T30] audit: type=1400 audit(2000000435.643:9365): avc: denied { read write } for pid=5798 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 738.307804][T14586] random: crng reseeded on system resumption [ 738.459898][T14586] Restarting kernel threads ... [ 738.485626][T14588] tun0: tun_chr_ioctl cmd 1074025675 [ 738.525325][T14588] tun0: persist enabled [ 738.537949][T14586] Done restarting kernel threads. [ 738.610090][T14586] tun0: tun_chr_ioctl cmd 35108 [ 738.730491][T14589] audit: audit_backlog=65 > audit_backlog_limit=64 [ 738.737113][T14589] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 738.744882][T14589] audit: backlog limit exceeded [ 738.749807][T14589] audit: audit_backlog=65 > audit_backlog_limit=64 [ 738.761790][ T5797] audit: audit_backlog=65 > audit_backlog_limit=64 [ 738.761825][T14589] audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 [ 738.797766][ T30] audit: type=1400 audit(2000000435.643:9366): avc: denied { read write open } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 738.826517][ T5797] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 738.944108][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 739.079768][ T1202] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 739.106119][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 739.121084][ T9] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 739.149284][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 739.163047][ T5914] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 739.177992][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 739.188555][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 739.203309][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 739.224419][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.239659][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 739.248950][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.265650][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.277449][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.288710][ T1202] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 739.304399][ T1202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.334819][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 739.354179][ T1202] usb 2-1: config 0 descriptor?? [ 739.373535][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.398000][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.409144][ T5914] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 739.419405][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.465140][ T5914] usb 6-1: config 0 descriptor?? [ 739.518686][ T9] usb 4-1: usb_control_msg returned -32 [ 739.528681][ T9] usbtmc 4-1:16.0: can't read capabilities [ 739.774980][T14594] syz1: rxe_newlink: already configured on syz_tun [ 739.845336][ T1202] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 739.869611][ T1202] cp2112 0003:10C4:EA90.0029: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 739.886815][T14588] tun0: tun_chr_ioctl cmd 2149603441 [ 739.910021][ T5914] usbhid 6-1:0.0: can't add hid device: -71 [ 739.918629][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 739.946781][ T5914] usb 6-1: USB disconnect, device number 53 [ 740.026302][ T1202] cp2112 0003:10C4:EA90.0029: Part Number: 0x82 Device Version: 0xFE [ 740.316215][T14599] tun0: tun_chr_ioctl cmd 1074025675 [ 740.376035][T14599] tun0: persist enabled [ 741.077040][ T1202] usb 2-1: reset high-speed USB device number 70 using dummy_hcd [ 741.116527][T14608] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 741.414625][ T9] usb 4-1: USB disconnect, device number 73 [ 741.964411][ T5914] usb 2-1: USB disconnect, device number 70 [ 742.466988][ T5914] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 742.690198][ T30] kauditd_printk_skb: 366 callbacks suppressed [ 742.690213][ T30] audit: type=1400 audit(2000000440.611:9710): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.692604][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.702730][ T30] audit: type=1400 audit(2000000440.621:9711): avc: denied { ioctl } for pid=14614 comm="syz.1.2299" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.720362][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.735524][T14627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.758951][ T5914] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 742.788479][T14627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.806744][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.808428][ T30] audit: type=1400 audit(2000000440.632:9712): avc: denied { read write } for pid=14625 comm="syz.5.2302" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.855692][ T5914] usb 2-1: config 0 descriptor?? [ 742.874194][ T30] audit: type=1400 audit(2000000440.632:9713): avc: denied { read write open } for pid=14625 comm="syz.5.2302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.923949][ T30] audit: type=1400 audit(2000000440.663:9714): avc: denied { ioctl } for pid=14625 comm="syz.5.2302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.951216][ T30] audit: type=1400 audit(2000000440.663:9715): avc: denied { ioctl } for pid=14625 comm="syz.5.2302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 742.976905][ T30] audit: type=1400 audit(2000000440.705:9716): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.000463][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 743.009538][ T30] audit: type=1400 audit(2000000440.705:9717): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.034084][ T30] audit: type=1400 audit(2000000440.716:9718): avc: denied { ioctl } for pid=14625 comm="syz.5.2302" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 743.064051][ T30] audit: type=1400 audit(2000000440.716:9719): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.175760][ T9] usb 6-1: config 8 has an invalid interface number: 80 but max is 0 [ 743.195606][ T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 743.211109][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 743.223044][ T9] usb 6-1: config 8 has no interface number 0 [ 743.237241][ T9] usb 6-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 743.266104][ T9] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 743.288412][ T5914] pyra 0003:1E7D:2CF6.002A: item fetching failed at offset 5/7 [ 743.297013][ T5914] pyra 0003:1E7D:2CF6.002A: parse failed [ 743.305913][ T5914] pyra 0003:1E7D:2CF6.002A: probe with driver pyra failed with error -22 [ 743.316015][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.367808][ T9] usb 6-1: NFC: intf ffff888022ad3000 id ffffffff8f7b35a0 [ 743.554872][ T5911] usb 6-1: USB disconnect, device number 54 [ 743.572183][T14615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.603551][T14615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.681040][T14614] ALSA: mixer_oss: invalid OSS volume '' [ 743.688432][ T5879] usb 2-1: USB disconnect, device number 71 [ 746.293837][T14655] FAULT_INJECTION: forcing a failure. [ 746.293837][T14655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 746.316961][T14655] CPU: 0 UID: 0 PID: 14655 Comm: syz.3.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.316989][T14655] Tainted: [L]=SOFTLOCKUP [ 746.316995][T14655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 746.317006][T14655] Call Trace: [ 746.317012][T14655] [ 746.317019][T14655] dump_stack_lvl+0x100/0x190 [ 746.317049][T14655] should_fail_ex.cold+0x5/0xa [ 746.317067][T14655] ? prepare_alloc_pages+0x16d/0x5f0 [ 746.317092][T14655] should_fail_alloc_page+0xeb/0x140 [ 746.317113][T14655] prepare_alloc_pages+0x1f0/0x5f0 [ 746.317133][T14655] ? rcu_is_watching+0x12/0xc0 [ 746.317151][T14655] __alloc_frozen_pages_noprof+0x193/0x2410 [ 746.317188][T14655] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 746.317214][T14655] ? __lock_acquire+0x4a5/0x2630 [ 746.317244][T14655] ? __lock_acquire+0x4a5/0x2630 [ 746.317266][T14655] ? __lock_acquire+0x4a5/0x2630 [ 746.317288][T14655] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 746.317309][T14655] ? policy_nodemask+0xed/0x4f0 [ 746.317332][T14655] alloc_pages_mpol+0x1fb/0x550 [ 746.317352][T14655] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 746.317377][T14655] folio_alloc_mpol_noprof+0x36/0x340 [ 746.317400][T14655] vma_alloc_folio_noprof+0xed/0x1d0 [ 746.317420][T14655] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 746.317438][T14655] ? rcu_read_unlock+0x2d/0xb0 [ 746.317455][T14655] ? rcu_read_unlock+0x2d/0xb0 [ 746.317471][T14655] ? __lock_acquire+0x4a5/0x2630 [ 746.317488][T14655] do_wp_page+0xf09/0x4c10 [ 746.317506][T14655] ? __pfx_do_wp_page+0x10/0x10 [ 746.317527][T14655] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 746.317548][T14655] __handle_mm_fault+0x1ac0/0x2b50 [ 746.317569][T14655] ? __pfx___handle_mm_fault+0x10/0x10 [ 746.317586][T14655] ? pte_offset_map_lock+0x174/0x320 [ 746.317600][T14655] ? find_held_lock+0x2b/0x80 [ 746.317616][T14655] ? follow_page_pte+0x5b4/0x1410 [ 746.317632][T14655] handle_mm_fault+0x36d/0xa20 [ 746.317651][T14655] __get_user_pages+0xf9c/0x34d0 [ 746.317669][T14655] ? down_read_killable+0x30e/0x4c0 [ 746.317680][T14655] ? __lock_acquire+0x4a5/0x2630 [ 746.317694][T14655] ? __pfx___get_user_pages+0x10/0x10 [ 746.317712][T14655] __gup_longterm_locked+0x87d/0x16f0 [ 746.317730][T14655] ? __pfx___gup_longterm_locked+0x10/0x10 [ 746.317746][T14655] ? try_get_folio+0x262/0x750 [ 746.317758][T14655] ? find_held_lock+0x2b/0x80 [ 746.317770][T14655] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 746.317786][T14655] gup_fast_fallback+0x18c6/0x2460 [ 746.317809][T14655] ? __pfx_gup_fast_fallback+0x10/0x10 [ 746.317823][T14655] ? bpf_ksym_find+0x128/0x1c0 [ 746.317838][T14655] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 746.317851][T14655] ? is_bpf_text_address+0x94/0x1a0 [ 746.317864][T14655] ? kernel_text_address+0x8d/0x100 [ 746.317881][T14655] ? __kernel_text_address+0xd/0x30 [ 746.317900][T14655] pin_user_pages_fast+0xa7/0xf0 [ 746.317914][T14655] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 746.317929][T14655] ? iov_iter_advance+0xac/0x6d0 [ 746.317949][T14655] iov_iter_extract_pages+0xa0d/0x1ef0 [ 746.317971][T14655] ? sock_kmalloc+0x111/0x170 [ 746.317987][T14655] ? kasan_save_stack+0x3f/0x50 [ 746.317998][T14655] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 746.318015][T14655] ? __kmalloc_noprof+0x301/0x850 [ 746.318025][T14655] ? sock_kmalloc+0x111/0x170 [ 746.318040][T14655] ? af_alg_alloc_areq+0xbc/0x240 [ 746.318054][T14655] ? skcipher_recvmsg+0x314/0x1020 [ 746.318070][T14655] ? sock_recvmsg+0x1f9/0x250 [ 746.318086][T14655] ? ____sys_recvmsg+0x218/0x6b0 [ 746.318102][T14655] ? ___sys_recvmsg+0x16a/0x1a0 [ 746.318112][T14655] ? __sys_recvmsg+0x16d/0x220 [ 746.318126][T14655] ? do_syscall_64+0x106/0xf80 [ 746.318141][T14655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.318156][T14655] extract_iter_to_sg+0x638/0x21d0 [ 746.318177][T14655] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 746.318201][T14655] af_alg_get_rsgl+0x2b3/0x7f0 [ 746.318221][T14655] skcipher_recvmsg+0x375/0x1020 [ 746.318242][T14655] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 746.318262][T14655] sock_recvmsg+0x1f9/0x250 [ 746.318282][T14655] ____sys_recvmsg+0x218/0x6b0 [ 746.318302][T14655] ? __pfx_____sys_recvmsg+0x10/0x10 [ 746.318325][T14655] ? __lock_acquire+0x4a5/0x2630 [ 746.318342][T14655] ___sys_recvmsg+0x16a/0x1a0 [ 746.318354][T14655] ? __pfx____sys_recvmsg+0x10/0x10 [ 746.318376][T14655] __sys_recvmsg+0x16d/0x220 [ 746.318392][T14655] ? __pfx___sys_recvmsg+0x10/0x10 [ 746.318416][T14655] do_syscall_64+0x106/0xf80 [ 746.318430][T14655] ? clear_bhb_loop+0x40/0x90 [ 746.318444][T14655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.318455][T14655] RIP: 0033:0x7f3b37d9bf79 [ 746.318466][T14655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.318477][T14655] RSP: 002b:00007f3b35fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 746.318489][T14655] RAX: ffffffffffffffda RBX: 00007f3b38015fa0 RCX: 00007f3b37d9bf79 [ 746.318496][T14655] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 746.318503][T14655] RBP: 00007f3b35fee090 R08: 0000000000000000 R09: 0000000000000000 [ 746.318509][T14655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.318516][T14655] R13: 00007f3b38016038 R14: 00007f3b38015fa0 R15: 00007ffdb858c158 [ 746.318534][T14655] [ 747.484740][ T30] kauditd_printk_skb: 236 callbacks suppressed [ 747.484756][ T30] audit: type=1400 audit(2000000445.631:9956): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.850452][ T30] audit: type=1400 audit(2000000445.694:9957): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.915204][ T30] audit: type=1400 audit(2000000445.705:9958): avc: denied { setattr } for pid=5797 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.983037][ T30] audit: type=1400 audit(2000000446.135:9959): avc: denied { execmem } for pid=14657 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 748.037811][ T30] audit: type=1400 audit(2000000446.198:9960): avc: denied { read write } for pid=14658 comm="syz.3.2311" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 748.099476][ T6690] syz_tun (unregistering): left allmulticast mode [ 748.110348][T12342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.118896][ T6690] bond0: (slave syz_tun): Releasing backup interface [ 748.127822][T12342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.151164][T12342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.158825][ T30] audit: type=1400 audit(2000000446.198:9961): avc: denied { open } for pid=14658 comm="syz.3.2311" path="/dev/mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 748.184790][T12342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.206288][ T30] audit: type=1400 audit(2000000446.198:9962): avc: denied { read } for pid=14658 comm="syz.3.2311" dev="nsfs" ino=4026533224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 748.305094][T12342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 748.312151][ T30] audit: type=1400 audit(2000000446.198:9963): avc: denied { open } for pid=14658 comm="syz.3.2311" path="net:[4026533224]" dev="nsfs" ino=4026533224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 748.337472][ T30] audit: type=1400 audit(2000000446.198:9964): avc: denied { create } for pid=14658 comm="syz.3.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 748.357767][ T30] audit: type=1400 audit(2000000446.198:9965): avc: denied { create } for pid=14658 comm="syz.3.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 748.370886][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 748.395748][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 748.408703][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 748.421063][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 748.437595][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 748.585934][ T5888] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.635506][T14660] Failed to initialize the IGMP autojoin socket (err -2) [ 748.646603][ T1202] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 748.865376][ T1202] usb 4-1: Using ep0 maxpacket: 16 [ 748.901361][ T1202] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 749.224594][ T5888] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.243120][ T1202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 749.274045][ T1202] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 749.288322][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.307427][ T1202] usb 4-1: Product: syz [ 749.313340][ T1202] usb 4-1: Manufacturer: syz [ 749.318028][ T1202] usb 4-1: SerialNumber: syz [ 749.357959][ T1202] usb 4-1: config 0 descriptor?? [ 749.383809][ T1202] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 749.401385][ T1202] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 749.411317][ T5888] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.133115][ T5888] bond0: (slave netdevsim0): Releasing backup interface [ 750.154843][ T5888] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.437328][ T5811] Bluetooth: hci0: command tx timeout [ 750.613339][ T1202] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 751.100702][T14660] chnl_net:caif_netlink_parms(): no params data found [ 751.227616][ T5879] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 751.312495][ T5888] bridge_slave_1: left allmulticast mode [ 751.347506][ T5888] bridge_slave_1: left promiscuous mode [ 751.384461][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.408026][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 751.424049][ T5888] bridge_slave_0: left allmulticast mode [ 751.439061][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 751.454381][ T5888] bridge_slave_0: left promiscuous mode [ 751.472006][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.487459][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 751.497491][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 751.510662][ T5879] usb 3-1: SerialNumber: syz [ 751.653040][ T1202] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 751.673772][ T1202] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 751.683268][ T1202] em28xx 4-1:0.0: No AC97 audio processor [ 752.408157][ T5811] Bluetooth: hci0: command tx timeout [ 752.455671][ T30] kauditd_printk_skb: 224 callbacks suppressed [ 752.455684][ T30] audit: type=1400 audit(2000000450.872:10190): avc: denied { read } for pid=14707 comm="syz.5.2321" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 752.520530][ T30] audit: type=1400 audit(2000000450.872:10191): avc: denied { open } for pid=14707 comm="syz.5.2321" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 752.571909][ T24] usb 4-1: USB disconnect, device number 74 [ 752.579347][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 752.619958][ T30] audit: type=1400 audit(2000000450.914:10192): avc: denied { search } for pid=14693 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.834692][ T24] em28xx 4-1:0.0: Freeing device [ 753.025924][ T30] audit: type=1400 audit(2000000450.914:10193): avc: denied { search } for pid=14693 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.051751][ T5879] usb 3-1: 0:2 : does not exist [ 753.078452][ T5879] usb 3-1: unit 5: unexpected type 0x0b [ 753.105433][ T30] audit: type=1400 audit(2000000450.914:10194): avc: denied { search } for pid=14693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.209558][ T30] audit: type=1400 audit(2000000450.914:10195): avc: denied { append } for pid=14693 comm="dhcpcd-run-hook" name="resolv.conf.lapb6.link" dev="tmpfs" ino=10777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 753.278061][ T5879] usb 3-1: USB disconnect, device number 65 [ 753.307050][ T30] audit: type=1400 audit(2000000450.914:10196): avc: denied { append open } for pid=14693 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb6.link" dev="tmpfs" ino=10777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 753.386642][T13019] udevd[13019]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.407982][ T30] audit: type=1400 audit(2000000450.914:10197): avc: denied { search } for pid=14693 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.630409][ T30] audit: type=1400 audit(2000000450.914:10198): avc: denied { getattr } for pid=14693 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 753.740685][ T30] audit: type=1400 audit(2000000451.019:10199): avc: denied { read write } for pid=5798 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.802485][ T5888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.813592][ T5888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.832931][ T5888] bond0 (unregistering): Released all slaves [ 753.851075][ T5888] bond1 (unregistering): Released all slaves [ 753.868946][ T5888] bond2 (unregistering): Released all slaves [ 753.888893][ T5888] bond3 (unregistering): Released all slaves [ 754.189913][ T5888] tipc: Disabling bearer [ 754.203055][ T5888] tipc: Left network mode [ 754.342469][T14660] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.387538][ T5811] Bluetooth: hci0: command tx timeout [ 754.388487][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.784020][T14660] bridge_slave_0: entered allmulticast mode [ 754.798918][T14660] bridge_slave_0: entered promiscuous mode [ 754.892363][T14660] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.923968][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.950934][T14660] bridge_slave_1: entered allmulticast mode [ 754.975053][T14660] bridge_slave_1: entered promiscuous mode [ 755.534777][T14660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.634545][T14751] overlayfs: missing 'lowerdir' [ 756.998084][ T5811] Bluetooth: hci0: command tx timeout [ 757.342741][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 757.342757][ T30] audit: type=1400 audit(2000000456.008:10296): avc: denied { read } for pid=14758 comm="syz.2.2332" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 757.377352][ T30] audit: type=1400 audit(2000000456.050:10297): avc: denied { read open } for pid=14758 comm="syz.2.2332" path="net:[4026532952]" dev="nsfs" ino=4026532952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 757.461863][T14660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.470987][ T30] audit: type=1400 audit(2000000456.050:10298): avc: denied { create } for pid=14758 comm="syz.2.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 757.471029][ T30] audit: type=1400 audit(2000000456.092:10299): avc: denied { read write } for pid=5798 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.571149][ T30] audit: type=1400 audit(2000000456.092:10300): avc: denied { open } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.667236][ T5888] hsr_slave_0: left promiscuous mode [ 757.681691][ T5888] hsr_slave_1: left promiscuous mode [ 757.696703][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.711705][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.728918][ T30] audit: type=1400 audit(2000000456.092:10301): avc: denied { ioctl } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.766875][ T30] audit: type=1400 audit(2000000456.092:10302): avc: denied { read } for pid=14759 comm="syz.1.2333" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 757.789857][ T5879] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 757.798291][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.806330][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.837812][ T30] audit: type=1400 audit(2000000456.092:10303): avc: denied { open } for pid=14759 comm="syz.1.2333" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 757.875604][ T5888] veth1_macvtap: left promiscuous mode [ 757.881812][ T5888] veth0_macvtap: left promiscuous mode [ 757.892409][ T30] audit: type=1400 audit(2000000456.092:10304): avc: denied { write } for pid=14758 comm="syz.2.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 757.892530][ T5888] veth1_vlan: left promiscuous mode [ 757.920678][ T5888] veth0_vlan: left promiscuous mode [ 757.938783][ T5933] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 757.957853][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 757.966185][ T5879] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 757.976160][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.994419][ T30] audit: type=1400 audit(2000000456.092:10305): avc: denied { read } for pid=14758 comm="syz.2.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 758.024453][ T5879] usb 4-1: Product: syz [ 758.028873][ T5879] usb 4-1: Manufacturer: syz [ 758.033514][ T5879] usb 4-1: SerialNumber: syz [ 758.065155][ T5879] usb 4-1: config 0 descriptor?? [ 758.095507][ T5879] gspca_main: se401-2.14.0 probing 047d:5003 [ 758.101646][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 758.111935][ T5933] usb 3-1: unable to get BOS descriptor or descriptor too short [ 758.152500][ T5933] usb 3-1: config 1 has an invalid interface number: 206 but max is 0 [ 758.168045][ T5933] usb 3-1: config 1 has no interface number 0 [ 758.193542][ T5933] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 758.214454][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.242416][ T5933] usb 3-1: Product: syz [ 758.262858][ T5933] usb 3-1: Manufacturer: syz [ 758.276813][ T5933] usb 3-1: SerialNumber: syz [ 758.483389][ T5879] gspca_se401: Bayer format not supported! [ 758.790157][ T5888] team0 (unregistering): Port device team_slave_1 removed [ 758.826033][ T5888] team0 (unregistering): Port device team_slave_0 removed [ 759.185443][ T5933] uvcvideo 3-1:1.206: probe with driver uvcvideo failed with error -22 [ 759.189212][ T1202] lo speed is unknown, defaulting to 1000 [ 759.207443][T14610] usb 4-1: USB disconnect, device number 75 [ 759.217922][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 759.237216][ T1202] syz0: Port: 1 Link DOWN [ 759.282191][ T5933] usb 3-1: USB disconnect, device number 66 [ 759.362915][T14660] team0: Port device team_slave_0 added [ 759.401086][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.428918][T14660] team0: Port device team_slave_1 added [ 759.431984][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.455526][ T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 759.475687][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.536983][T14660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.547680][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.617193][T14660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.647370][ T9] usb 6-1: config 0 descriptor?? [ 759.658130][T14660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.667838][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.694653][T14660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.112417][ T9] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 760.161355][ T9] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 760.302569][ T9] cp2112 0003:10C4:EA90.002B: Part Number: 0x82 Device Version: 0xFE [ 760.394808][ T5888] IPVS: stop unused estimator thread 0... [ 760.403931][T14660] hsr_slave_0: entered promiscuous mode [ 760.439708][T14660] hsr_slave_1: entered promiscuous mode [ 760.463035][T14660] debugfs: 'hsr0' already exists in 'hsr' [ 760.488432][T14660] Cannot create hsr debugfs directory [ 761.454174][ T5933] usb 6-1: USB disconnect, device number 55 [ 762.060529][T14660] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 762.097918][T14660] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 762.109992][ T30] kauditd_printk_skb: 255 callbacks suppressed [ 762.110007][ T30] audit: type=1400 audit(2000000461.018:10561): avc: denied { search } for pid=5466 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.143713][T14812] overlayfs: missing 'lowerdir' [ 762.165100][T14660] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 762.183603][ T30] audit: type=1400 audit(2000000461.018:10562): avc: denied { search } for pid=5466 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.207810][ T30] audit: type=1400 audit(2000000461.018:10563): avc: denied { search } for pid=5466 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.228121][T14660] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 762.230530][ T30] audit: type=1400 audit(2000000461.050:10564): avc: denied { mounton } for pid=14811 comm="syz.5.2343" path="/397/bus" dev="tmpfs" ino=2159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 762.259513][ T30] audit: type=1400 audit(2000000461.060:10565): avc: denied { read } for pid=5466 comm="dhcpcd" name="n1" dev="tmpfs" ino=1164 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 762.455776][ T30] audit: type=1400 audit(2000000461.060:10566): avc: denied { open } for pid=5466 comm="dhcpcd" path="/run/udev/data/n1" dev="tmpfs" ino=1164 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 762.593097][ T5466] audit: audit_backlog=65 > audit_backlog_limit=64 [ 762.610769][T14820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 762.617340][T14820] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 762.625097][T14820] audit: backlog limit exceeded [ 764.364437][T14660] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.765177][T14853] comedi: valid board names for 8255 driver are: [ 764.771609][T14853] 8255 [ 764.774388][T14853] comedi: valid board names for vmk80xx driver are: [ 764.781022][T14853] vmk80xx [ 764.784058][T14853] comedi: valid board names for usbduxsigma driver are: [ 764.791067][T14853] usbduxsigma [ 764.794466][T14853] comedi: valid board names for usbduxfast driver are: [ 764.801320][T14853] usbduxfast [ 764.804668][T14853] comedi: valid board names for usbdux driver are: [ 764.811196][T14853] usbdux [ 764.814201][T14853] comedi: valid board names for ni6501 driver are: [ 764.820715][T14853] ni6501 [ 764.823724][T14853] comedi: valid board names for dt9812 driver are: [ 764.830234][T14853] dt9812 [ 764.833221][T14853] comedi: valid board names for ni_labpc_cs driver are: [ 764.840163][T14853] ni_labpc_cs [ 764.843594][T14853] comedi: valid board names for ni_daq_700 driver are: [ 764.850449][T14853] ni_daq_700 [ 764.854114][T14853] comedi: valid board names for labpc_pci driver are: [ 764.860943][T14853] labpc_pci [ 764.864155][T14853] comedi: valid board names for adl_pci9118 driver are: [ 764.871139][T14853] pci9118dg [ 764.874347][T14853] pci9118hg [ 764.877554][T14853] pci9118hr [ 764.880827][T14853] comedi: valid board names for 8255_pci driver are: [ 764.887521][T14853] 8255_pci [ 764.890683][T14853] comedi: valid board names for s526 driver are: [ 764.897025][T14853] s526 [ 764.899854][T14853] comedi: valid board names for multiq3 driver are: [ 764.906447][T14853] multiq3 [ 764.909543][T14853] comedi: valid board names for pcmuio driver are: [ 764.916053][T14853] pcmuio48 [ 764.919210][T14853] pcmuio96 [ 764.922330][T14853] comedi: valid board names for pcmmio driver are: [ 764.928885][T14853] pcmmio [ 764.931832][T14853] comedi: valid board names for pcmda12 driver are: [ 764.938475][T14853] pcmda12 [ 764.941510][T14853] comedi: valid board names for pcmad driver are: [ 764.948080][T14853] pcmad12 [ 764.951125][T14853] pcmad16 [ 764.954160][T14853] comedi: valid board names for ni_labpc driver are: [ 764.960916][T14853] lab-pc-1200 [ 764.964297][T14853] lab-pc-1200ai [ 764.967883][T14853] lab-pc+ [ 764.970920][T14853] comedi: valid board names for atmio16 driver are: [ 764.977624][T14853] atmio16 [ 764.980658][T14853] atmio16d [ 764.983780][T14853] comedi: valid board names for ni_at_ao driver are: [ 764.990507][T14853] at-ao-6 [ 764.993539][T14853] at-ao-10 [ 764.996707][T14853] comedi: valid board names for ni_at_a2150 driver are: [ 765.003670][T14853] ni_at_a2150 [ 765.007052][T14853] comedi: valid board names for adq12b driver are: [ 765.013603][T14853] adq12b [ 765.016548][T14853] comedi: valid board names for mpc624 driver are: [ 765.023086][T14853] mpc624 [ 765.026036][T14853] comedi: valid board names for c6xdigio driver are: [ 765.032752][T14853] c6xdigio [ 765.035871][T14853] comedi: valid board names for aio_iiro_16 driver are: [ 765.155919][T14853] aio_iiro_16 [ 765.159350][T14853] comedi: valid board names for aio_aio12_8 driver are: [ 765.166360][T14853] aio_aio12_8 [ 765.169739][T14853] aio_ai12_8 [ 765.173035][T14853] aio_ao12_4 [ 765.176360][T14853] comedi: valid board names for fl512 driver are: [ 765.182792][T14853] fl512 [ 765.185712][T14853] comedi: valid board names for dmm32at driver are: [ 765.192620][T14853] dmm32at [ 765.195694][T14853] comedi: valid board names for dt282x driver are: [ 765.202208][T14853] dt2821 [ 765.205252][T14853] dt2821-f [ 765.208359][T14853] dt2821-g [ 765.211483][T14853] dt2823 [ 765.214481][T14853] dt2824-pgh [ 765.217775][T14853] dt2824-pgl [ 765.221070][T14853] dt2825 [ 765.224067][T14853] dt2827 [ 765.227020][T14853] dt2828 [ 765.229966][T14853] dt2829 [ 765.232963][T14853] dt21-ez [ 765.236001][T14853] dt23-ez [ 765.239040][T14853] dt24-ez [ 765.242111][T14853] dt24-ez-pgl [ 765.245492][T14853] comedi: valid board names for dt2817 driver are: [ 765.357659][T14853] dt2817 [ 765.360613][T14853] comedi: valid board names for dt2815 driver are: [ 765.367100][T14853] dt2815 [ 765.370008][T14853] comedi: valid board names for dt2814 driver are: [ 765.376525][T14853] dt2814 [ 765.379430][T14853] comedi: valid board names for dt2811 driver are: [ 765.441559][T14853] dt2811-pgh [ 765.444869][T14853] dt2811-pgl [ 765.448141][T14853] comedi: valid board names for dt2801 driver are: [ 765.454772][T14853] dt2801 [ 765.457696][T14853] comedi: valid board names for das6402 driver are: [ 765.464299][T14853] das6402-12 [ 765.467571][T14853] das6402-16 [ 765.470894][T14853] comedi: valid board names for das1800 driver are: [ 765.477484][T14853] das-1701st [ 765.480793][T14853] das-1701st-da [ 765.484331][T14853] das-1702st [ 765.487601][T14853] das-1702st-da [ 765.491288][T14853] das-1702hr [ 765.494558][T14853] das-1702hr-da [ 765.498093][T14853] das-1701ao [ 765.501420][T14853] das-1702ao [ 765.504691][T14853] das-1801st [ 765.507957][T14853] das-1801st-da [ 765.511516][T14853] das-1802st [ 765.514786][T14853] das-1802st-da [ 765.518336][T14853] das-1802hr [ 765.521606][T14853] das-1802hr-da [ 765.525139][T14853] das-1801hc [ 765.528461][T14853] das-1802hc [ 765.531737][T14853] das-1801ao [ 765.535008][T14853] das-1802ao [ 765.538319][T14853] comedi: valid board names for das800 driver are: [ 765.544803][T14853] das-800 [ 765.547836][T14853] cio-das800 [ 765.551108][T14853] das-801 [ 765.554119][T14853] cio-das801 [ 765.557442][T14853] das-802 [ 765.560465][T14853] cio-das802 [ 765.563733][T14853] cio-das802/16 [ 765.567311][T14853] comedi: valid board names for isa-das08 driver are: [ 765.574058][T14853] isa-das08 [ 765.577257][T14853] das08-pgm [ 765.580445][T14853] das08-pgh [ 765.583628][T14853] das08-pgl [ 765.586882][T14853] das08-aoh [ 765.590064][T14853] das08-aol [ 765.593247][T14853] das08-aom [ 765.596468][T14853] das08/jr-ao [ 765.599823][T14853] das08jr-16-ao [ 765.603384][T14853] pc104-das08 [ 765.606742][T14853] das08jr/16 [ 765.610016][T14853] comedi: valid board names for das16m1 driver are: [ 765.616621][T14853] das16m1 [ 765.619631][T14853] comedi: valid board names for dac02 driver are: [ 765.626058][T14853] dac02 [ 765.628894][T14853] comedi: valid board names for rti802 driver are: [ 765.635392][T14853] rti802 [ 765.638316][T14853] comedi: valid board names for rti800 driver are: [ 765.644847][T14853] rti800 [ 765.647768][T14853] rti815 [ 765.650690][T14853] comedi: valid board names for pcm3724 driver are: [ 765.657317][T14853] pcm3724 [ 765.660361][T14853] comedi: valid board names for pcl818 driver are: [ 765.666846][T14853] pcl818l [ 765.669858][T14853] pcl818h [ 765.672915][T14853] pcl818hd [ 765.676012][T14853] pcl818hg [ 765.679105][T14853] pcl818 [ 765.682067][T14853] pcl718 [ 765.685009][T14853] pcm3718 [ 765.688581][T14853] comedi: valid board names for pcl816 driver are: [ 765.695122][T14853] pcl816 [ 765.698049][T14853] pcl814b [ 765.701109][T14853] comedi: valid board names for pcl812 driver are: [ 765.707600][T14853] pcl812 [ 765.710639][T14853] pcl812pg [ 765.713734][T14853] acl8112pg [ 765.716916][T14853] acl8112dg [ 765.720132][T14853] acl8112hg [ 765.723314][T14853] a821pgl [ 765.726324][T14853] a821pglnda [ 765.729650][T14853] a821pgh [ 765.732657][T14853] a822pgl [ 765.735663][T14853] a822pgh [ 765.738732][T14853] a823pgl [ 765.741743][T14853] a823pgh [ 765.744751][T14853] pcl813 [ 765.747707][T14853] pcl813b [ 765.750714][T14853] acl8113 [ 765.753722][T14853] iso813 [ 765.756679][T14853] acl8216 [ 765.759687][T14853] a826pg [ 765.762608][T14853] comedi: valid board names for pcl730 driver are: [ 765.769137][T14853] pcl730 [ 765.772058][T14853] iso730 [ 765.775027][T14853] acl7130 [ 765.778036][T14853] pcm3730 [ 765.781045][T14853] pcl725 [ 765.783967][T14853] p8r8dio [ 765.787022][T14853] acl7225b [ 765.790117][T14853] p16r16dio [ 765.793305][T14853] pcl733 [ 765.796286][T14853] pcl734 [ 765.799207][T14853] opmm-1616-xt [ 765.802647][T14853] pearl-mm-p [ 765.805942][T14853] ir104-pbf [ 765.809127][T14853] comedi: valid board names for pcl726 driver are: [ 765.815666][T14853] pcl726 [ 765.818589][T14853] pcl727 [ 765.821517][T14853] pcl728 [ 765.824482][T14853] acl6126 [ 765.827492][T14853] acl6128 [ 765.830501][T14853] comedi: valid board names for pcl724 driver are: [ 765.837031][T14853] pcl724 [ 765.839953][T14853] pcl722 [ 765.842912][T14853] pcl731 [ 765.845833][T14853] acl7122 [ 765.848839][T14853] acl7124 [ 765.851879][T14853] pet48dio [ 765.854976][T14853] pcmio48 [ 765.857988][T14853] onyx-mm-dio [ 765.861383][T14853] comedi: valid board names for pcl711 driver are: [ 765.867865][T14853] pcl711 [ 765.870820][T14853] pcl711b [ 765.873828][T14853] acl8112hg [ 765.877014][T14853] acl8112dg [ 765.880233][T14853] comedi: valid board names for amplc_pc263 driver are: [ 765.887150][T14853] pc263 [ 765.890030][T14853] comedi: valid board names for amplc_pc236 driver are: [ 765.896947][T14853] pc36at [ 765.899901][T14853] comedi: valid board names for amplc_dio200 driver are: [ 765.906906][T14853] pc212e [ 765.909868][T14853] pc214e [ 765.912789][T14853] pc215e [ 765.915712][T14853] pc218e [ 765.918671][T14853] pc272e [ 765.921592][T14853] comedi: valid board names for comedi_parport driver are: [ 765.928807][T14853] comedi_parport [ 765.932425][T14853] comedi: valid board names for comedi_test driver are: [ 765.939380][T14853] comedi_test [ 765.942744][T14853] comedi: valid board names for comedi_bond driver are: [ 765.949692][T14853] comedi_bond [ 766.134703][T14846] veth1_macvtap: left promiscuous mode [ 766.135843][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'. [ 766.169173][T14846] macsec0: entered promiscuous mode [ 766.404952][T14851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.424603][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.431751][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.579430][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.586523][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.711882][T14851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.816852][ T5914] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 767.009542][ T30] kauditd_printk_skb: 381 callbacks suppressed [ 767.009558][ T30] audit: type=1400 audit(2000000466.154:10886): avc: denied { read write } for pid=7469 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 767.088280][ T30] audit: type=1400 audit(2000000466.154:10887): avc: denied { open } for pid=7469 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 767.113110][ T30] audit: type=1400 audit(2000000466.154:10888): avc: denied { ioctl } for pid=7469 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 767.141437][T14851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.222778][ T30] audit: type=1400 audit(2000000466.249:10889): avc: denied { ioctl } for pid=14857 comm="syz.1.2352" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 767.250657][ T30] audit: type=1400 audit(2000000466.270:10890): avc: denied { ioctl } for pid=14857 comm="syz.1.2352" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 767.277078][ T30] audit: type=1400 audit(2000000466.301:10891): avc: denied { search } for pid=5466 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.327351][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.338437][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.359915][ T5914] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 767.450817][ T30] audit: type=1400 audit(2000000466.301:10892): avc: denied { search } for pid=5466 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.920705][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.936806][T14851] bond0: (slave netdevsim0): Releasing backup interface [ 767.945134][T14851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.964696][ T30] audit: type=1400 audit(2000000466.301:10893): avc: denied { search } for pid=5466 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 767.967166][ T5914] usb 2-1: config 0 descriptor?? [ 768.005954][ T30] audit: type=1400 audit(2000000466.301:10894): avc: denied { read } for pid=5466 comm="dhcpcd" name="n31" dev="tmpfs" ino=1195 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 768.055616][ T30] audit: type=1400 audit(2000000466.301:10895): avc: denied { open } for pid=5466 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1195 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 768.229701][T11633] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.251823][T11633] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.313382][T11633] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.360290][T12429] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.565773][ T5914] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 768.593593][ T5914] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 769.012429][ T5914] cp2112 0003:10C4:EA90.002C: Part Number: 0x82 Device Version: 0xFE [ 769.487017][T14660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.545197][ T5879] usb 2-1: USB disconnect, device number 72 [ 771.155641][T14897] : renamed from wg2 (while UP) [ 771.460744][T14660] veth0_vlan: entered promiscuous mode [ 771.729769][T14660] veth1_vlan: entered promiscuous mode [ 771.822095][ T30] kauditd_printk_skb: 509 callbacks suppressed [ 771.822107][ T30] audit: type=1400 audit(2000000471.049:11405): avc: denied { write } for pid=14902 comm="syz.5.2358" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 771.936655][ T30] audit: type=1400 audit(2000000471.049:11406): avc: denied { open } for pid=14902 comm="syz.5.2358" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 772.007010][ T30] audit: type=1400 audit(2000000471.070:11407): avc: denied { write } for pid=14902 comm="syz.5.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 772.161660][ T30] audit: type=1400 audit(2000000471.280:11408): avc: denied { read } for pid=5466 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 772.193895][T14911] audit: audit_backlog=65 > audit_backlog_limit=64 [ 772.201047][ T5466] audit: audit_backlog=65 > audit_backlog_limit=64 [ 772.239856][T14913] audit: audit_backlog=65 > audit_backlog_limit=64 [ 772.246778][ T5466] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 772.246815][T14913] audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 [ 772.287687][ T30] audit: type=1400 audit(2000000471.280:11409): avc: denied { search } for pid=5466 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.348115][T14915] ALSA: seq fatal error: cannot create timer (-16) [ 772.383502][T14660] veth0_macvtap: entered promiscuous mode [ 772.470552][T14660] veth1_macvtap: entered promiscuous mode [ 772.706312][T14610] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 772.859227][T14610] usb 4-1: Using ep0 maxpacket: 32 [ 772.880206][T14660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.880717][T14610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.922917][T14610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.960793][T14610] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 772.981307][T14610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.025196][T14610] usb 4-1: config 0 descriptor?? [ 773.090527][T14660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.226161][T14660] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 773.302729][T14660] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 773.337302][T14660] wireguard: wg0: Could not create IPv4 socket [ 773.370084][T14660] wireguard: wg1: Could not create IPv4 socket [ 773.400065][T14660] wireguard: wg2: Could not create IPv4 socket [ 773.669891][T14610] usbhid 4-1:0.0: can't add hid device: -71 [ 773.675906][T14610] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 773.726074][T14610] usb 4-1: USB disconnect, device number 76 [ 774.602307][T12342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 774.612376][T12342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.622216][T12342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.630843][T12342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.638285][T12342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.795223][T14932] Failed to initialize the IGMP autojoin socket (err -2) [ 775.976759][T14949] mkiss: ax0: crc mode is auto. [ 776.132476][T14953] binder: 14952:14953 ioctl c0306201 2000000003c0 returned -14 [ 776.641662][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2372'. [ 776.652074][ T30] kauditd_printk_skb: 730 callbacks suppressed [ 776.652090][ T30] audit: type=1400 audit(2000000476.237:12103): avc: denied { prog_load } for pid=14956 comm="syz.1.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 776.706846][ T5811] Bluetooth: hci0: command tx timeout [ 776.757767][ T30] audit: type=1400 audit(2000000476.237:12104): avc: denied { bpf } for pid=14956 comm="syz.1.2372" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 776.801755][ T30] audit: type=1400 audit(2000000476.237:12105): avc: denied { perfmon } for pid=14956 comm="syz.1.2372" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 776.885780][ T30] audit: type=1400 audit(2000000476.258:12106): avc: denied { prog_run } for pid=14956 comm="syz.1.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 776.906193][ T30] audit: type=1400 audit(2000000476.395:12107): avc: denied { read } for pid=5466 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 776.928010][ T30] audit: type=1400 audit(2000000476.468:12108): avc: denied { execmem } for pid=14959 comm="syz.3.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 777.012795][ T30] audit: type=1400 audit(2000000476.668:12109): avc: denied { read } for pid=5466 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 777.134336][ T30] audit: type=1400 audit(2000000476.783:12110): avc: denied { read } for pid=5466 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 777.194685][ T30] audit: type=1400 audit(2000000476.857:12111): avc: denied { read } for pid=5466 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 777.310904][ T30] audit: type=1400 audit(2000000476.972:12112): avc: denied { create } for pid=14932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 777.320813][T14932] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 777.407315][T14932] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 777.463616][T14932] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 777.509924][T14932] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 777.723474][ T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 778.474863][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 778.482338][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 778.505626][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.520639][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 778.743205][ T5811] Bluetooth: hci0: command tx timeout [ 778.785889][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 778.795130][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.803214][ T10] usb 6-1: Product: syz [ 778.807401][ T10] usb 6-1: Manufacturer: syz [ 778.813291][ T10] usb 6-1: SerialNumber: syz [ 778.828426][ T10] usb 6-1: config 0 descriptor?? [ 779.049359][T14610] usb 6-1: USB disconnect, device number 56 [ 779.131902][T14990] lo speed is unknown, defaulting to 1000 [ 779.138090][T14990] lo speed is unknown, defaulting to 1000 [ 779.150749][T14990] lo speed is unknown, defaulting to 1000 [ 779.191332][T14990] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 779.455676][T14990] lo speed is unknown, defaulting to 1000 [ 779.464382][T14990] lo speed is unknown, defaulting to 1000 [ 779.471607][T14990] lo speed is unknown, defaulting to 1000 [ 779.478791][T14990] lo speed is unknown, defaulting to 1000 [ 779.514585][T14960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2373'. [ 779.533414][T14960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2373'. [ 779.894539][T14610] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 780.075077][T14610] usb 6-1: Using ep0 maxpacket: 8 [ 780.141982][T14610] usb 6-1: unable to get BOS descriptor or descriptor too short [ 780.193673][T14610] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 780.208659][T14610] usb 6-1: can't read configurations, error -61 [ 780.351196][T14610] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 780.665524][ T5811] Bluetooth: hci0: command tx timeout [ 781.452880][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 781.452891][ T30] audit: type=1400 audit(2000000481.331:12336): avc: denied { search } for pid=15004 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.567466][T14932] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 781.617658][ T30] audit: type=1400 audit(2000000481.331:12337): avc: denied { search } for pid=15004 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.832159][T15033] trusted_key: encrypted_key: insufficient parameters specified [ 781.845664][ T30] audit: type=1400 audit(2000000481.331:12338): avc: denied { search } for pid=15004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.848104][T15033] 9pnet_fd: Insufficient options for proto=fd [ 782.017731][T14932] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 782.467301][ T30] audit: type=1400 audit(2000000481.331:12339): avc: denied { search } for pid=15004 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.533334][T14932] wireguard: wg0: Could not create IPv4 socket [ 782.574634][T14932] wireguard: wg1: Could not create IPv4 socket [ 782.610470][ T30] audit: type=1400 audit(2000000481.331:12340): avc: denied { search } for pid=15004 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.712616][ T5811] Bluetooth: hci0: command tx timeout [ 782.724600][T14932] wireguard: wg2: Could not create IPv4 socket [ 782.788853][ T30] audit: type=1400 audit(2000000481.331:12341): avc: denied { search } for pid=15004 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.078563][ T30] audit: type=1400 audit(2000000481.331:12342): avc: denied { getattr } for pid=15004 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.131895][ T30] audit: type=1400 audit(2000000481.331:12343): avc: denied { add_name } for pid=15004 comm="dhcpcd-run-hook" name="resolv.conf.vcan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.157779][T15043] audit: audit_backlog=65 > audit_backlog_limit=64 [ 783.195949][T15043] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 783.287985][T15048] 9p: Bad value for 'rfdno' [ 783.904152][T15060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2391'. [ 784.209973][ T10] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 784.302802][T14610] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 784.378921][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 784.387268][ T10] usb 6-1: config 0 has an invalid interface number: 39 but max is 0 [ 784.407534][ T10] usb 6-1: config 0 has no interface number 0 [ 784.421905][ T10] usb 6-1: config 0 interface 39 has no altsetting 0 [ 784.439630][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=c2.68 [ 784.455216][T14610] usb 2-1: device descriptor read/64, error -71 [ 784.464576][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.476475][ T10] usb 6-1: Product: syz [ 784.491496][ T10] usb 6-1: Manufacturer: syz [ 784.498473][ T10] usb 6-1: SerialNumber: syz [ 784.536919][ T10] usb 6-1: config 0 descriptor?? [ 784.799797][T14610] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 784.977992][T15063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.087353][T15063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.136832][T14610] usb 2-1: device descriptor read/64, error -71 [ 786.236600][ T30] kauditd_printk_skb: 416 callbacks suppressed [ 786.236618][ T30] audit: type=1400 audit(2000000486.362:12702): avc: denied { read write } for pid=15061 comm="syz.5.2393" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.237545][T15063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.242834][ T30] audit: type=1400 audit(2000000486.362:12703): avc: denied { read write open } for pid=15061 comm="syz.5.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.371300][T14610] usb usb2-port1: attempt power cycle [ 786.408459][T15063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.465638][ T30] audit: type=1400 audit(2000000486.362:12704): avc: denied { ioctl } for pid=15061 comm="syz.5.2393" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.522036][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 786.543708][ T30] audit: type=1400 audit(2000000486.425:12705): avc: denied { search } for pid=15091 comm="sed" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.551607][ T10] gspca_sq930x: reg_r 001f failed -71 [ 786.664223][ T30] audit: type=1400 audit(2000000486.425:12706): avc: denied { read } for pid=15091 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 786.673997][ T10] sq930x 6-1:0.39: probe with driver sq930x failed with error -71 [ 786.726022][T14610] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 786.742602][ T10] usb 6-1: USB disconnect, device number 59 [ 786.773343][ T30] audit: type=1400 audit(2000000486.425:12708): avc: denied { read write } for pid=5796 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.829969][ T30] audit: type=1400 audit(2000000486.425:12709): avc: denied { open } for pid=5796 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.878460][ T30] audit: type=1400 audit(2000000486.425:12710): avc: denied { ioctl } for pid=5796 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.934244][T12342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 786.936473][ T30] audit: type=1400 audit(2000000486.425:12707): avc: denied { open } for pid=15091 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 786.949300][T14610] usb 2-1: device not accepting address 75, error -71 [ 786.972923][ T30] audit: type=1400 audit(2000000486.435:12711): avc: denied { getattr } for pid=15091 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 786.983819][T12342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 787.008981][T12342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 787.026803][T12342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 787.040390][T12342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 787.106285][T15101] Failed to initialize the IGMP autojoin socket (err -2) [ 788.733342][T15136] siw: device registration error -23 [ 789.052255][ T5811] Bluetooth: hci0: command tx timeout [ 790.338372][T15101] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 790.403734][T15101] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 790.466651][T15101] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 790.528408][T15101] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 791.021976][ T30] kauditd_printk_skb: 417 callbacks suppressed [ 791.021994][ T30] audit: type=1400 audit(2000000491.340:13129): avc: denied { read } for pid=15164 comm="syz.5.2409" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 791.024929][ T5811] Bluetooth: hci0: command tx timeout [ 791.034359][ T30] audit: type=1400 audit(2000000491.340:13130): avc: denied { open } for pid=15164 comm="syz.5.2409" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 791.276977][ T30] audit: type=1400 audit(2000000491.393:13131): avc: denied { ioctl } for pid=15164 comm="syz.5.2409" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 791.891850][ T30] audit: type=1400 audit(2000000491.445:13132): avc: denied { module_request } for pid=15101 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 792.000583][ T30] audit: type=1400 audit(2000000491.487:13133): avc: denied { search } for pid=15168 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.074813][ T7469] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.079907][T15182] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.081336][ T7469] audit: audit_lost=91 audit_rate_limit=0 audit_backlog_limit=64 [ 792.089650][T15186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.110167][ T30] audit: type=1400 audit(2000000491.487:13134): avc: denied { read write } for pid=7469 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 792.329132][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 792.637958][T15195] bond1: (slave geneve3): Opening slave failed [ 793.164442][ T5811] Bluetooth: hci0: command tx timeout [ 793.233295][T15101] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 793.353276][T15101] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 793.445570][T15101] wireguard: wg0: Could not create IPv4 socket [ 793.727914][T15101] wireguard: wg1: Could not create IPv4 socket [ 793.787759][T15101] wireguard: wg2: Could not create IPv4 socket [ 794.004558][T15237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2417'. [ 795.097474][T15263] netlink: 'syz.5.2423': attribute type 10 has an invalid length. [ 795.110378][T15263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.123244][T15263] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 796.005361][ T30] kauditd_printk_skb: 506 callbacks suppressed [ 796.005410][ T30] audit: type=1400 audit(2000000496.067:13594): avc: denied { read } for pid=15266 comm="syz.1.2424" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 796.371752][ T30] audit: type=1400 audit(2000000496.067:13595): avc: denied { open } for pid=15266 comm="syz.1.2424" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 796.446254][ T30] audit: type=1400 audit(2000000496.077:13596): avc: denied { search } for pid=15271 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.525177][ T30] audit: type=1400 audit(2000000496.077:13597): avc: denied { search } for pid=15271 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.732700][ T30] audit: type=1400 audit(2000000496.077:13598): avc: denied { search } for pid=15271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.899323][ T30] audit: type=1400 audit(2000000496.077:13599): avc: denied { search } for pid=15271 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.975451][ T30] audit: type=1400 audit(2000000496.203:13600): avc: denied { mounton } for pid=15267 comm="syz.5.2425" path="/419/bus" dev="tmpfs" ino=2275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 797.058481][ T30] audit: type=1400 audit(2000000496.214:13601): avc: denied { unlink } for pid=15267 comm="syz.5.2425" name="#59" dev="tmpfs" ino=2281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 797.107099][ T30] audit: type=1400 audit(2000000496.224:13602): avc: denied { mount } for pid=15267 comm="syz.5.2425" name="/" dev="overlay" ino=2276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 797.187560][ T30] audit: type=1400 audit(2000000496.319:13603): avc: denied { execute } for pid=15267 comm="syz.5.2425" path="/419/bus/file1" dev="overlay" ino=2283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 797.792517][T12342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.804492][T12342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.816632][T12342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.826176][T12342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.833912][T12342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.868581][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.885694][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.893011][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.907127][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.914870][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 798.002605][T15297] Failed to initialize the IGMP autojoin socket (err -2) [ 798.867990][T15308] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 798.897990][T15308] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 800.806353][T15355] FAULT_INJECTION: forcing a failure. [ 800.806353][T15355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.819531][T15355] CPU: 0 UID: 0 PID: 15355 Comm: syz.5.2439 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.819559][T15355] Tainted: [L]=SOFTLOCKUP [ 800.819566][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 800.819576][T15355] Call Trace: [ 800.819586][T15355] [ 800.819593][T15355] dump_stack_lvl+0x100/0x190 [ 800.819625][T15355] should_fail_ex.cold+0x5/0xa [ 800.819648][T15355] _copy_from_user+0x2e/0xd0 [ 800.819678][T15355] sg_write+0x2af/0xdb0 [ 800.819709][T15355] ? __pfx_sg_write+0x10/0x10 [ 800.819730][T15355] ? _kstrtoull+0x13c/0x1f0 [ 800.819753][T15355] ? rcu_is_watching+0x12/0xc0 [ 800.819791][T15355] ? bpf_lsm_file_permission+0x9/0x10 [ 800.819811][T15355] ? security_file_permission+0x76/0x210 [ 800.819837][T15355] ? rw_verify_area+0xce/0x6d0 [ 800.819866][T15355] ? __pfx_sg_write+0x10/0x10 [ 800.819885][T15355] vfs_writev+0x5ea/0xe10 [ 800.819910][T15355] ? kvm_sched_clock_read+0x11/0x20 [ 800.819940][T15355] ? __pfx_vfs_writev+0x10/0x10 [ 800.819968][T15355] ? find_held_lock+0x2b/0x80 [ 800.820001][T15355] ? __fget_files+0x21f/0x3d0 [ 800.820027][T15355] ? do_writev+0x13e/0x340 [ 800.820052][T15355] do_writev+0x13e/0x340 [ 800.820079][T15355] ? __pfx_do_writev+0x10/0x10 [ 800.820112][T15355] do_syscall_64+0x106/0xf80 [ 800.820135][T15355] ? clear_bhb_loop+0x40/0x90 [ 800.820157][T15355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.820176][T15355] RIP: 0033:0x7f9dc4b9bf79 [ 800.820191][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.820208][T15355] RSP: 002b:00007f9dc5a4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 800.820226][T15355] RAX: ffffffffffffffda RBX: 00007f9dc4e16180 RCX: 00007f9dc4b9bf79 [ 800.820237][T15355] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000007 [ 800.820248][T15355] RBP: 00007f9dc5a4e090 R08: 0000000000000000 R09: 0000000000000000 [ 800.820259][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.820269][T15355] R13: 00007f9dc4e16218 R14: 00007f9dc4e16180 R15: 00007ffd6a8e3d28 [ 800.820293][T15355] [ 801.199622][ T30] kauditd_printk_skb: 326 callbacks suppressed [ 801.209590][ T30] audit: type=1400 audit(2000000501.644:13930): avc: denied { write } for pid=15349 comm="syz.5.2439" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 801.374192][ T30] audit: type=1400 audit(2000000501.644:13931): avc: denied { open } for pid=15349 comm="syz.5.2439" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 801.457023][ T30] audit: type=1400 audit(2000000501.644:13932): avc: denied { ioctl } for pid=15349 comm="syz.5.2439" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 801.851732][ T5905] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 802.163284][ T30] audit: type=1400 audit(2000000502.074:13933): avc: denied { read } for pid=5466 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 802.207351][ T30] audit: type=1400 audit(2000000502.169:13934): avc: denied { mounton } for pid=15348 comm="syz.3.2440" path="/525/file0" dev="tmpfs" ino=2904 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 802.249634][ T30] audit: type=1400 audit(2000000502.169:13935): avc: denied { search } for pid=15358 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 802.272185][ T30] audit: type=1400 audit(2000000502.179:13936): avc: denied { write } for pid=15348 comm="syz.3.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 802.326652][T15368] audit: audit_backlog=65 > audit_backlog_limit=64 [ 802.343528][T15346] audit: audit_backlog=65 > audit_backlog_limit=64 [ 802.351843][ T5798] audit: audit_backlog=65 > audit_backlog_limit=64 [ 802.402554][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.415108][T15297] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 802.453188][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 802.484280][T15297] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 802.621430][T14610] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 802.792456][ T5905] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 802.801504][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 802.859641][ T5905] usb 3-1: SerialNumber: syz [ 802.866834][T15297] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 802.926998][T15297] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 802.985088][T14610] usb 6-1: device descriptor read/64, error -71 [ 803.109468][ T5905] usb 3-1: 0:2 : does not exist [ 803.114404][ T5905] usb 3-1: unit 5: unexpected type 0x09 [ 803.231146][ T5879] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 803.249544][T14610] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 803.307363][ T5905] usb 3-1: USB disconnect, device number 67 [ 803.364739][ T5879] usb 4-1: device descriptor read/64, error -71 [ 803.421151][T14610] usb 6-1: device descriptor read/64, error -71 [ 803.467380][T14735] udevd[14735]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 803.582807][T14610] usb usb6-port1: attempt power cycle [ 803.640267][ T5879] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 803.821211][ T5879] usb 4-1: device descriptor read/64, error -71 [ 803.941111][ T5879] usb usb4-port1: attempt power cycle [ 803.983309][T14610] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 804.034181][T14610] usb 6-1: device descriptor read/8, error -71 [ 804.298765][ T5879] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 804.307047][T14610] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 804.345815][T14610] usb 6-1: device descriptor read/8, error -71 [ 804.352366][ T5879] usb 4-1: device descriptor read/8, error -71 [ 804.455082][T14610] usb usb6-port1: unable to enumerate USB device [ 804.631997][ T5879] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 804.803928][ T5879] usb 4-1: device descriptor read/8, error -71 [ 804.964380][ T5879] usb usb4-port1: unable to enumerate USB device [ 805.956218][T15297] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 805.999469][ T30] kauditd_printk_skb: 395 callbacks suppressed [ 805.999482][ T30] audit: type=1400 audit(2000000507.105:14278): avc: denied { read write } for pid=5798 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.163693][ T30] audit: type=1400 audit(2000000507.105:14279): avc: denied { open } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.201068][ T30] audit: type=1400 audit(2000000507.105:14280): avc: denied { ioctl } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 806.226846][T15297] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 806.266355][T15297] wireguard: wg0: Could not create IPv4 socket [ 806.288168][T15297] wireguard: wg1: Could not create IPv4 socket [ 806.300322][ T30] audit: type=1400 audit(2000000507.189:14281): avc: denied { execmem } for pid=15443 comm="syz.3.2456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 806.330716][T15297] wireguard: wg2: Could not create IPv4 socket [ 806.521092][ T30] audit: type=1400 audit(2000000507.368:14282): avc: denied { watch } for pid=15443 comm="syz.3.2456" path="/530/file1" dev="tmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 806.972270][ T30] audit: type=1400 audit(2000000507.368:14283): avc: denied { watch_sb watch_reads } for pid=15443 comm="syz.3.2456" path="/530/file1" dev="tmpfs" ino=2931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 807.231086][ T30] audit: type=1400 audit(2000000507.462:14284): avc: denied { create } for pid=15441 comm="syz.2.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 807.352441][ T30] audit: type=1400 audit(2000000507.473:14285): avc: denied { read } for pid=15441 comm="syz.2.2455" name="comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 807.454116][ T30] audit: type=1400 audit(2000000507.473:14286): avc: denied { open } for pid=15441 comm="syz.2.2455" path="/dev/comedi1" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 807.492165][T15466] audit: audit_backlog=65 > audit_backlog_limit=64 [ 807.753938][T15470] loop4: detected capacity change from 0 to 7 [ 807.772783][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 807.783877][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.792941][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.827231][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.855850][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.865613][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.874995][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.876956][T14610] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 807.883367][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.905765][T15470] ldm_validate_partition_table(): Disk read failed. [ 807.912531][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.921137][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.933064][T15470] Buffer I/O error on dev loop4, logical block 0, async page read [ 807.941427][T15470] Dev loop4: unable to read RDB block 0 [ 807.972988][T15470] loop4: unable to read partition table [ 807.977757][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.981890][T15470] loop4: partition table beyond EOD, truncated [ 807.996946][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 808.015811][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0032, bcdDevice= 0.00 [ 808.034888][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.039759][T15470] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 808.045126][T14610] usb 3-1: device descriptor read/64, error -71 [ 808.087929][ T10] usb 4-1: config 0 descriptor?? [ 808.333608][T14610] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 808.478080][T14610] usb 3-1: device descriptor read/64, error -71 [ 808.518972][ T10] wacom 0003:056A:0032.002D: ignoring exceeding usage max [ 808.591291][T14610] usb usb3-port1: attempt power cycle [ 808.820391][ T5911] usb 4-1: USB disconnect, device number 81 [ 808.924318][T14610] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 808.963217][T14610] usb 3-1: device descriptor read/8, error -71 [ 809.151041][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 809.164454][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 809.181938][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 809.206159][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 809.219784][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 809.220087][T14610] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 809.263071][T15504] Failed to initialize the IGMP autojoin socket (err -2) [ 809.329941][T14610] usb 3-1: device descriptor read/8, error -71 [ 809.459185][T14610] usb usb3-port1: unable to enumerate USB device [ 810.912546][ T30] kauditd_printk_skb: 630 callbacks suppressed [ 810.912561][ T30] audit: type=1400 audit(2000000512.262:14732): avc: denied { search } for pid=15539 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.997381][ T30] audit: type=1400 audit(2000000512.262:14733): avc: denied { read } for pid=15539 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 811.106877][ T30] audit: type=1400 audit(2000000512.262:14734): avc: denied { open } for pid=15539 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 811.168984][ T30] audit: type=1400 audit(2000000512.262:14735): avc: denied { getattr } for pid=15539 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 811.213242][ T5811] Bluetooth: hci0: command tx timeout [ 811.244338][ T30] audit: type=1400 audit(2000000512.315:14736): avc: denied { create } for pid=15537 comm="syz.2.2471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 811.296175][ T30] audit: type=1400 audit(2000000512.315:14737): avc: denied { read write } for pid=5798 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 811.330759][T15544] mkiss: ax0: crc mode is auto. [ 811.350584][ T30] audit: type=1400 audit(2000000512.315:14738): avc: denied { open } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 811.417220][ T30] audit: type=1400 audit(2000000512.325:14739): avc: denied { ioctl } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 811.509933][T15551] audit: audit_backlog=65 > audit_backlog_limit=64 [ 811.517951][T15552] audit: audit_backlog=65 > audit_backlog_limit=64 [ 811.908922][T15504] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 812.302691][T15563] trusted_key: encrypted_key: insufficient parameters specified [ 812.534589][T15504] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 812.674871][T15562] 9pnet_fd: Insufficient options for proto=fd [ 812.830214][T15504] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 812.896049][T15504] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 813.646540][ T5811] Bluetooth: hci0: command tx timeout [ 813.799371][T15582] 9p: Bad value for 'wfdno' [ 814.028774][T14610] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 814.200277][T14610] usb 6-1: Using ep0 maxpacket: 16 [ 814.228345][T14610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.270067][T14610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.301210][T14610] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 814.341725][T14610] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 814.360745][T14610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.402748][T14610] usb 6-1: config 0 descriptor?? [ 815.635811][ T5811] Bluetooth: hci0: command tx timeout [ 815.679242][ T30] kauditd_printk_skb: 364 callbacks suppressed [ 815.679259][ T30] audit: type=1400 audit(2000000517.272:15100): avc: denied { sys_module } for pid=15504 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 815.709270][T14610] usbhid 6-1:0.0: can't add hid device: -71 [ 815.740228][T14610] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 815.790459][T14610] usb 6-1: USB disconnect, device number 64 [ 815.814674][ T30] audit: type=1400 audit(2000000517.272:15101): avc: denied { module_request } for pid=15504 comm="syz-executor" kmod="netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 815.911746][ T30] audit: type=1400 audit(2000000517.377:15102): avc: denied { search } for pid=15616 comm="sed" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.980918][ T30] audit: type=1400 audit(2000000517.377:15103): avc: denied { read } for pid=15616 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 816.131891][ T30] audit: type=1400 audit(2000000517.377:15104): avc: denied { open } for pid=15616 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 816.308691][T15504] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 816.590358][ T30] audit: type=1400 audit(2000000517.377:15105): avc: denied { getattr } for pid=15616 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1878 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 816.651038][T15504] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 816.705666][ T30] audit: type=1400 audit(2000000517.419:15106): avc: denied { read write } for pid=5798 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.706379][T15504] wireguard: wg0: Could not create IPv4 socket [ 816.831627][T15504] wireguard: wg1: Could not create IPv4 socket [ 816.841176][T15504] wireguard: wg2: Could not create IPv4 socket [ 816.876856][ T30] audit: type=1400 audit(2000000517.419:15107): avc: denied { open } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.943313][ T30] audit: type=1400 audit(2000000517.419:15108): avc: denied { ioctl } for pid=5798 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 816.986049][T15639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 817.607608][ C1] ------------[ cut here ]------------ [ 817.613343][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 817.620004][ C1] WARNING: kernel/workqueue.c:2270 at __queue_work+0xcbb/0x10f0, CPU#1: udevd/5171 [ 817.629305][ C1] Modules linked in: [ 817.633375][ C1] CPU: 1 UID: 0 PID: 5171 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 817.643772][ C1] Tainted: [L]=SOFTLOCKUP [ 817.648066][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 817.658091][ C1] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 817.663441][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d d5 ad 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 62 73 38 00 90 0f 0b 90 e9 ff f5 [ 817.683040][ C1] RSP: 0018:ffffc90000a08bf0 EFLAGS: 00010046 [ 817.689095][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100f7d6951 [ 817.697049][ C1] RDX: ffff888052549178 RSI: ffffffff8a74ecb0 RDI: ffffffff90db48a0 [ 817.704999][ C1] RBP: ffff88807beb4a70 R08: 0000000000000005 R09: 0000000000000000 [ 817.712948][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888052549000 [ 817.720913][ C1] R13: 1ffff9200014118f R14: ffffffff81ceabd0 R15: 0000000000000001 [ 817.728895][ C1] FS: 00007f14cbbaf880(0000) GS:ffff88812449d000(0000) knlGS:0000000000000000 [ 817.737817][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.744384][ C1] CR2: 0000200000007000 CR3: 0000000027c7e000 CR4: 00000000003526f0 [ 817.752341][ C1] Call Trace: [ 817.755601][ C1] [ 817.758430][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 817.763620][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 817.769428][ C1] call_timer_fn+0x19a/0x590 [ 817.774000][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 817.779094][ C1] ? __run_timers+0x560/0xac0 [ 817.783751][ C1] ? __run_timers+0x560/0xac0 [ 817.788416][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 817.794223][ C1] __run_timers+0x570/0xac0 [ 817.798712][ C1] ? __pfx___run_timers+0x10/0x10 [ 817.803733][ C1] run_timer_base+0x114/0x190 [ 817.808391][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 817.813576][ C1] run_timer_softirq+0x1a/0x50 [ 817.818321][ C1] handle_softirqs+0x1ea/0x910 [ 817.823068][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 817.828337][ C1] __irq_exit_rcu+0xef/0x150 [ 817.832907][ C1] irq_exit_rcu+0x9/0x30 [ 817.837130][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 817.842751][ C1] [ 817.845663][ C1] [ 817.848572][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 817.854535][ C1] RIP: 0010:finish_task_switch.isra.0+0x20e/0xb80 [ 817.860936][ C1] Code: 9a 03 0f 48 85 d2 0f 85 84 06 00 00 85 c0 0f 85 a7 01 00 00 48 89 df e8 20 e5 ff ff e8 9b 10 3a 00 fb 49 8d bc 24 20 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 817.880549][ C1] RSP: 0018:ffffc90003287858 EFLAGS: 00000202 [ 817.886597][ C1] RAX: 00000000009c2601 RBX: ffff8880b853af40 RCX: 0000000000000080 [ 817.894551][ C1] RDX: 0000000000000000 RSI: ffffffff8de617e9 RDI: ffff88807b66baa0 [ 817.902501][ C1] RBP: ffffc900032878a0 R08: 0000000000000001 R09: 0000000000000000 [ 817.910453][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807b66a480 [ 817.918404][ C1] R13: ffff88802e67a480 R14: ffff88802e67a480 R15: ffff8880b853bd70 [ 817.926364][ C1] ? finish_task_switch.isra.0+0x205/0xb80 [ 817.932155][ C1] __schedule+0x102b/0x6000 [ 817.936652][ C1] ? __pfx___schedule+0x10/0x10 [ 817.941488][ C1] ? mark_held_locks+0x40/0x70 [ 817.946235][ C1] preempt_schedule_irq+0x50/0x90 [ 817.951246][ C1] irqentry_exit+0x17b/0x670 [ 817.955821][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 817.961260][ C1] RIP: 0010:qlist_free_all+0x25/0xe0 [ 817.966531][ C1] Code: 90 90 90 90 90 41 56 49 89 fe 41 55 49 89 f5 41 54 55 53 48 8b 1f 48 85 db 75 39 e9 b1 00 00 00 48 63 85 b8 00 00 00 4c 8b 23 <48> 89 ef 48 29 c3 48 89 de e8 7d ec ff ff 66 90 48 89 de 48 89 ef [ 817.986119][ C1] RSP: 0018:ffffc90003287b10 EFLAGS: 00000246 [ 817.992164][ C1] RAX: 0000000000000000 RBX: ffff888086b47000 RCX: ffffea00021ad100 [ 818.000115][ C1] RDX: 0000000000000001 RSI: ffffffff81b8a808 RDI: ffff88807b66a480 [ 818.008064][ C1] RBP: ffff88813fe4c140 R08: 0000000000000007 R09: 0000000000000000 [ 818.016011][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807b6e2dc0 [ 818.023963][ C1] R13: 0000000000000000 R14: ffffc90003287b40 R15: 0000000000001000 [ 818.031925][ C1] ? __phys_addr+0xe8/0x180 [ 818.036416][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 818.041856][ C1] __kasan_slab_alloc+0x69/0x90 [ 818.046687][ C1] __kvmalloc_node_noprof+0x316/0xa00 [ 818.052040][ C1] ? seq_read_iter+0x819/0x1270 [ 818.056875][ C1] seq_read_iter+0x819/0x1270 [ 818.061529][ C1] ? selinux_file_permission+0x1cd/0x6d0 [ 818.067162][ C1] ? selinux_file_permission+0x209/0x6d0 [ 818.072787][ C1] kernfs_fop_read_iter+0x46c/0x610 [ 818.077966][ C1] ? rw_verify_area+0xce/0x6d0 [ 818.082713][ C1] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 818.088415][ C1] vfs_read+0x825/0xb30 [ 818.092556][ C1] ? __pfx_vfs_read+0x10/0x10 [ 818.097225][ C1] ksys_read+0x12a/0x250 [ 818.101460][ C1] ? __pfx_ksys_read+0x10/0x10 [ 818.106200][ C1] ? trace_irq_enable.constprop.0+0x2d/0x110 [ 818.112164][ C1] do_syscall_64+0x106/0xf80 [ 818.116737][ C1] ? clear_bhb_loop+0x40/0x90 [ 818.121396][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.127265][ C1] RIP: 0033:0x7f14cb4a7407 [ 818.131668][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 818.151255][ C1] RSP: 002b:00007fff479f6f90 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 818.159648][ C1] RAX: ffffffffffffffda RBX: 00007f14cbbaf880 RCX: 00007f14cb4a7407 [ 818.167597][ C1] RDX: 0000000000001000 RSI: 00005563d87589c0 RDI: 000000000000000c [ 818.175547][ C1] RBP: 00007f14cb5efff0 R08: 0000000000000000 R09: 0000000000000000 [ 818.183495][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 818.191458][ C1] R13: 00007f14cb5efea0 R14: 0000000000000000 R15: 00005563d87515c0 [ 818.199424][ C1] [ 818.202425][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 818.209687][ C1] CPU: 1 UID: 0 PID: 5171 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 818.220080][ C1] Tainted: [L]=SOFTLOCKUP [ 818.224380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 818.234421][ C1] Call Trace: [ 818.237678][ C1] [ 818.240503][ C1] dump_stack_lvl+0x100/0x190 [ 818.245174][ C1] vpanic+0x20d/0x630 [ 818.249138][ C1] panic+0xd1/0xd1 [ 818.252836][ C1] ? __pfx_panic+0x10/0x10 [ 818.257237][ C1] ? check_panic_on_warn+0x1f/0x90 [ 818.262332][ C1] check_panic_on_warn.cold+0x19/0x34 [ 818.267683][ C1] ? __queue_work+0xcbb/0x10f0 [ 818.272431][ C1] __warn.cold+0x191/0x2f8 [ 818.276827][ C1] __report_bug+0x296/0x3d0 [ 818.281311][ C1] ? __queue_work+0xcbb/0x10f0 [ 818.286062][ C1] ? __pfx___report_bug+0x10/0x10 [ 818.291069][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 818.296340][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 818.301703][ C1] ? look_up_lock_class+0x55/0x120 [ 818.306803][ C1] report_bug_entry+0xe1/0x290 [ 818.311551][ C1] ? __queue_work+0xcbf/0x10f0 [ 818.316298][ C1] handle_bug+0x1c9/0x2a0 [ 818.320618][ C1] exc_invalid_op+0x17/0x50 [ 818.325097][ C1] asm_exc_invalid_op+0x1a/0x20 [ 818.329927][ C1] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 818.335282][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d d5 ad 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 62 73 38 00 90 0f 0b 90 e9 ff f5 [ 818.354869][ C1] RSP: 0018:ffffc90000a08bf0 EFLAGS: 00010046 [ 818.360914][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100f7d6951 [ 818.368866][ C1] RDX: ffff888052549178 RSI: ffffffff8a74ecb0 RDI: ffffffff90db48a0 [ 818.376814][ C1] RBP: ffff88807beb4a70 R08: 0000000000000005 R09: 0000000000000000 [ 818.384762][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888052549000 [ 818.392710][ C1] R13: 1ffff9200014118f R14: ffffffff81ceabd0 R15: 0000000000000001 [ 818.400661][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 818.406458][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 818.411730][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 818.416917][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 818.422710][ C1] call_timer_fn+0x19a/0x590 [ 818.427280][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 818.432376][ C1] ? __run_timers+0x560/0xac0 [ 818.437032][ C1] ? __run_timers+0x560/0xac0 [ 818.441693][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 818.447483][ C1] __run_timers+0x570/0xac0 [ 818.451979][ C1] ? __pfx___run_timers+0x10/0x10 [ 818.456998][ C1] run_timer_base+0x114/0x190 [ 818.461655][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 818.466836][ C1] run_timer_softirq+0x1a/0x50 [ 818.471580][ C1] handle_softirqs+0x1ea/0x910 [ 818.476324][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 818.481593][ C1] __irq_exit_rcu+0xef/0x150 [ 818.486160][ C1] irq_exit_rcu+0x9/0x30 [ 818.490392][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 818.496029][ C1] [ 818.498953][ C1] [ 818.501869][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 818.507836][ C1] RIP: 0010:finish_task_switch.isra.0+0x20e/0xb80 [ 818.514234][ C1] Code: 9a 03 0f 48 85 d2 0f 85 84 06 00 00 85 c0 0f 85 a7 01 00 00 48 89 df e8 20 e5 ff ff e8 9b 10 3a 00 fb 49 8d bc 24 20 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 818.533822][ C1] RSP: 0018:ffffc90003287858 EFLAGS: 00000202 [ 818.539872][ C1] RAX: 00000000009c2601 RBX: ffff8880b853af40 RCX: 0000000000000080 [ 818.547822][ C1] RDX: 0000000000000000 RSI: ffffffff8de617e9 RDI: ffff88807b66baa0 [ 818.555787][ C1] RBP: ffffc900032878a0 R08: 0000000000000001 R09: 0000000000000000 [ 818.563738][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88807b66a480 [ 818.571687][ C1] R13: ffff88802e67a480 R14: ffff88802e67a480 R15: ffff8880b853bd70 [ 818.579648][ C1] ? finish_task_switch.isra.0+0x205/0xb80 [ 818.585442][ C1] __schedule+0x102b/0x6000 [ 818.589943][ C1] ? __pfx___schedule+0x10/0x10 [ 818.594776][ C1] ? mark_held_locks+0x40/0x70 [ 818.599524][ C1] preempt_schedule_irq+0x50/0x90 [ 818.604539][ C1] irqentry_exit+0x17b/0x670 [ 818.609118][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 818.614571][ C1] RIP: 0010:qlist_free_all+0x25/0xe0 [ 818.619844][ C1] Code: 90 90 90 90 90 41 56 49 89 fe 41 55 49 89 f5 41 54 55 53 48 8b 1f 48 85 db 75 39 e9 b1 00 00 00 48 63 85 b8 00 00 00 4c 8b 23 <48> 89 ef 48 29 c3 48 89 de e8 7d ec ff ff 66 90 48 89 de 48 89 ef [ 818.639433][ C1] RSP: 0018:ffffc90003287b10 EFLAGS: 00000246 [ 818.645479][ C1] RAX: 0000000000000000 RBX: ffff888086b47000 RCX: ffffea00021ad100 [ 818.653429][ C1] RDX: 0000000000000001 RSI: ffffffff81b8a808 RDI: ffff88807b66a480 [ 818.661378][ C1] RBP: ffff88813fe4c140 R08: 0000000000000007 R09: 0000000000000000 [ 818.669327][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807b6e2dc0 [ 818.677279][ C1] R13: 0000000000000000 R14: ffffc90003287b40 R15: 0000000000001000 [ 818.685249][ C1] ? __phys_addr+0xe8/0x180 [ 818.689742][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 818.695180][ C1] __kasan_slab_alloc+0x69/0x90 [ 818.700011][ C1] __kvmalloc_node_noprof+0x316/0xa00 [ 818.705364][ C1] ? seq_read_iter+0x819/0x1270 [ 818.710198][ C1] seq_read_iter+0x819/0x1270 [ 818.714856][ C1] ? selinux_file_permission+0x1cd/0x6d0 [ 818.720472][ C1] ? selinux_file_permission+0x209/0x6d0 [ 818.726094][ C1] kernfs_fop_read_iter+0x46c/0x610 [ 818.731287][ C1] ? rw_verify_area+0xce/0x6d0 [ 818.736036][ C1] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 818.741737][ C1] vfs_read+0x825/0xb30 [ 818.745890][ C1] ? __pfx_vfs_read+0x10/0x10 [ 818.750590][ C1] ksys_read+0x12a/0x250 [ 818.754830][ C1] ? __pfx_ksys_read+0x10/0x10 [ 818.759580][ C1] ? trace_irq_enable.constprop.0+0x2d/0x110 [ 818.765550][ C1] do_syscall_64+0x106/0xf80 [ 818.770132][ C1] ? clear_bhb_loop+0x40/0x90 [ 818.774795][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.780669][ C1] RIP: 0033:0x7f14cb4a7407 [ 818.785065][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 818.804650][ C1] RSP: 002b:00007fff479f6f90 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 818.813040][ C1] RAX: ffffffffffffffda RBX: 00007f14cbbaf880 RCX: 00007f14cb4a7407 [ 818.820991][ C1] RDX: 0000000000001000 RSI: 00005563d87589c0 RDI: 000000000000000c [ 818.828940][ C1] RBP: 00007f14cb5efff0 R08: 0000000000000000 R09: 0000000000000000 [ 818.836890][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 818.844849][ C1] R13: 00007f14cb5efea0 R14: 0000000000000000 R15: 00005563d87515c0 [ 818.852810][ C1] [ 818.856067][ C1] Kernel Offset: disabled [ 818.860364][ C1] Rebooting in 86400 seconds..