last executing test programs: 11.353818741s ago: executing program 3 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_open_dev$mouse(0x0, 0x6, 0x6ac000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0xfffffffffffffffc, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000540)={0x1, @sliced={0x6, [0x3, 0x4, 0x401, 0xc, 0x9, 0x4, 0xffff, 0x8, 0xf, 0x800, 0x3ff, 0xb72, 0x40, 0x101, 0xd, 0x3, 0xa, 0x9, 0x1, 0x8, 0x9, 0xfffd, 0x3795, 0x3, 0xb6c1, 0x6, 0x1080, 0x0, 0x3, 0x1, 0x9, 0x3d55, 0x0, 0x3, 0x0, 0xfff, 0x8, 0x0, 0x7, 0x7f45, 0x30b, 0x3c, 0x2, 0x5, 0xbe6, 0x800, 0x1000, 0xd], 0xce7}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.617534352s ago: executing program 2 (id=421): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 7.85196325s ago: executing program 1 (id=427): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, 0x0, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0xffff) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.851535731s ago: executing program 3 (id=428): socket$inet6_sctp(0xa, 0x5, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x400000006}) syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2667, 0x40, 0x3, 0x217}, &(0x7f0000000240), &(0x7f0000000080), &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) ioctl$FIBMAP(0xffffffffffffffff, 0x5381, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42242, 0x73) 7.734845208s ago: executing program 2 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27", 0x16) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420df6fda) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc95a, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x7, 0x89d2, 0x9, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x7, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x3, 0x0, 0x84, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0xd, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x5a865000, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x1], [0x7, 0x408, 0x8004, 0x6, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x4, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x123, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x42c2, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x7, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x45, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{r0, 0x4609}, {0xffffffffffffffff, 0x300}], 0x2, 0x0, 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x28) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a00000005000100070000000500040000000000"], 0x5c}}, 0x20084884) syz_emit_vhci(&(0x7f0000004040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_def_err_data_reporting={{0x58}, {0x7f, 0x73}}}}, 0x8) socket$nl_audit(0x10, 0x3, 0x9) 7.418551719s ago: executing program 4 (id=431): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) socket$can_j1939(0x1d, 0x2, 0x7) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r3, 0x107, 0x15, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000180)={0xfffd, 0xfffb, 0xc, 0x1000, 0x8, "020004044134cfe1"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004780), 0x80, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) fanotify_init(0x4000, 0x0) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x921000, 0x0) syz_usb_connect$uac1(0x0, 0x92, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4159, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x7, 0x40, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x2a}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x0, 0x4, 0x3, 0x5}, @processing_unit={0x7, 0x24, 0x7, 0x6, 0x4, 0x2}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0x4], 0x13}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7e, 0x0, 0x98, {0x7, 0x25, 0x1, 0x6, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc4, 0x8, 0xe, {0x7, 0x25, 0x1, 0x8, 0x4, 0x401}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netstat\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x5, 0xf1, {0xf1, 0x7, "bc773c60d348496a917720b44e2883a030c7b2ab2d66db3a0bf8927208292286d393b7b87cbff265f841184ffaedb4a90d637d01a7536f0b1acfded7be8dfe0da731c2f70fd5c37cf3434e58220e23a078960a6a154107ee86cb5f59430d7fc408eba7c970a8d5d06d110d366a53fee579f9a8d86a3be66ba99f23161c83e2fa9f49196ff714418ab2df85896140dc38351b3014420ff4abd06efb2a7dd3836237d10a3bca87fa1f000e15e073b02d464f153721a82ed28ecf678f376b2cf4c361854513447b2c0295ed72eea2aeeece32a386ac9024a6a34be7f0f094ef2ee245bdb887540dd3c9610bc126d9ab36"}}, &(0x7f00000001c0)=ANY=[], &(0x7f00000009c0)=ANY=[@ANYBLOB="b90f1c000000050f1c000203100b05000000889bffff3cba81784a2f6b7b", @ANYRES32=r4], &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x4, 0x5, "e22a32d1", "e6b5b000"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x4a, 0x6, 0x5, 0xbb5}}}, &(0x7f0000000900)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="403161000000287e97593bbcc4389fe82346b90053ae50ae3c879ada53375fe0f1845ee2335056f437841bf50f2789a69afe174338734bf7ae931c1ff2bd7fdb064dec65323c153dd7bdad44b756fc77dd77b42f38b2dbc15542d8ab4d97fa147cd3f530e03802e528bacbf91a9d8c8239e0c4e790f374a3f2c1e70eff7175d6e7d28125c66ccb850262aca01742f0e73a8c054e5c31207ddbd0f1"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f0000000d80)=ANY=[], &(0x7f0000000600)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xc4}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "da4e"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x43bd}, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x19, 0x2, "12ef"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x24}, 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000b0601020000000000000000050000070500010007000000040007800900020073797a31000000003daef80834f808b98c870448950bdfb8b3edb61cd23ed563fc3a1baeafd0e06a13af756e052d9364"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) r8 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r8, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3", 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6.935075325s ago: executing program 3 (id=432): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) mount$9p_unix(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000380), 0x200000, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x7}}]}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ipvlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r5, &(0x7f0000000040), 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1fb}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000001c0)={{0x0, 0x3, 0xcc}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000f00)={0x24, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) read$msr(r6, &(0x7f0000000080)=""/125, 0x7d) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) 6.742443822s ago: executing program 2 (id=433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0xac, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) 6.598907721s ago: executing program 0 (id=434): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) accept4$bt_l2cap(r3, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900"], 0x16) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060a63e57fd1b9", 0x9, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1f2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) 5.953147012s ago: executing program 1 (id=435): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0xfffffffffffffe57}}], 0x1, 0x20040810) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_ASSOCIATE(r1, 0x0, 0x5) setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)="701717bd844829b237f3ef0ac8baae007086d5b0539d0b2b9a95424959a39da05ffe773054b97953065d14dbc66d14c430281260", 0x34, 0x1) sendmmsg$alg(r3, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000004}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000e00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) splice(r7, 0x0, r8, 0x0, 0x9b2, 0xf) 5.805266648s ago: executing program 2 (id=436): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x1e8, 0x98, 0x0, 0x1e8, 0x150, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd14bdc4, {0x8}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x70}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'syzkaller0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)={0x1, 0x0, [{0x70000, 0xe9, &(0x7f0000000400)=""/233}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) r7 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000080)=0xf0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') 5.014694556s ago: executing program 1 (id=437): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xff, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x101, 0x2, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @rand_addr=0x640100fe}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_pauseparam={0x1b, 0x4, 0x62, 0x5}}) r5 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)=@random={'security.', 'sit0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x7c, 0x3f, 0x9, 0x70bd29, 0x0, {0x3}, [@generic="aa56ff28a4d1ca3340e119e4544214c0fbfaefeaf539438c78adb097354307eb8af44109e18e4d42c5c057ca4980375e1290d59ef247ff9ccb9680c579e051babf1c388dc4bd2939240b5489f7d85f", @typed={0x15, 0x9, 0x0, 0x0, @binary="615e262f100d02a8e253a834e1263a7f1f"}]}, 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 5.014338792s ago: executing program 0 (id=438): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x191, 0x240, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaa0500000000000800000000400002000001069078ac250018e0f7ff0107024414db22fbfffffffffffff0ac1414aa00008001000000000000d087b883f797b9937178e1ebf9e9741f1e6e4203562429ebb7558b57d807b71d6ecf85084635abd4b83dd19b0f28c93af5cdcb66c3f5e2b4511bc8fd6653fd8d34dd2891183b17f74a3ddc98f116b008fe8700c46559808a91c1d5437b5423fdf4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) 5.011760691s ago: executing program 4 (id=439): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc701000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741b0665bb33be6f0e742213d0bf5528a601b5934b867f39f7d776ac06a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd777791232d5db32d14bc1c3d000000000000000000000016a1049b6f094e504c28d7daa2f61b2a7c14d2343b4308b36e6b141371c958406e212b3accb45f87aef8bd5e2181fd7826b9e5cb2f6a63f113491239dca17e4fb33e670daf1cd7a99015ae9e1ca32b4e64dc38b55d525bd10971b0898be9d6e6154dfc99b20622b604b87ba03524c2fed51056d672b1b966657de5c86ab09195fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xe4e9d491f1d177a3, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="aadd85ede5d506c878ff0e9f7435aad2bc2875c9c2d84641974a995f09419a32ea1abcd2665c37f7ee823fd837bde27aeb867cf3da00"/63, 0x3f}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r4 = fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) fanotify_mark(r4, 0x459, 0x10, r3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 4.3869962s ago: executing program 3 (id=440): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3.865626278s ago: executing program 0 (id=441): r0 = syz_open_dev$usbmon(&(0x7f0000000200), 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) r1 = dup3(r0, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bf000/0x3000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240040c4) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3, 0x0, r2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = signalfd(r3, &(0x7f0000000100)={[0x5]}, 0x8) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f00009ad000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=""/36, 0x24}, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r6}) lseek(0xffffffffffffffff, 0x2, 0x2) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.806565985s ago: executing program 4 (id=442): bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x5}, {0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, [@offload={0xc}]}, 0xc4}}, 0x0) write$UHID_INPUT(r8, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 3.164151788s ago: executing program 1 (id=443): clock_nanosleep(0x1, 0x1, &(0x7f0000000240), 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000807000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000109000/0x1000)=nil, &(0x7f000049c000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000037a000/0x4000)=nil, &(0x7f0000a8f000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00009be000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x24004040) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) syz_io_uring_setup(0x70ee, 0x0, &(0x7f0000010080), &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425", @ANYRES32=0x0, @ANYBLOB="030000000000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_clone3(&(0x7f0000000200)={0x4004c380, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x10}, &(0x7f0000000100)=""/67, 0x43, &(0x7f0000000180)=""/5, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}]}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x6, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2c, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93d, 0x6, 0x1000006, 0x0, 0xb9, 0xfffffffa, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x2, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000280)={{r4}, 0x7, &(0x7f0000000080)=[0x4, 0xa8c, 0x14b, 0x8, 0x2, 0x4, 0xffffffffffffffff], 0x71c}) 2.967486327s ago: executing program 3 (id=444): r0 = dup(0xffffffffffffffff) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r4, 0x8940, &(0x7f0000000000)=@buf={0x2, &(0x7f0000000080)="ce6c"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x5139c2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000040}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x50}}, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0), 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0xc1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r7 = userfaultfd(0x80001) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x2, 'syz0\x00', 0x79}, 0x0, [0x0, 0x200000a, 0x1000, 0x0, 0xb3d, 0x7fffffff, 0x6, 0x0, 0xbc0, 0x7, 0x15c, 0x7, 0x5944, 0x5, 0x7, 0x8004a7, 0x9, 0x5, 0xb, 0x3, 0x2c, 0x5, 0x2000040, 0x10000000, 0x7, 0x80000000, 0x2, 0x800, 0x3, 0x3, 0x4, 0x400006, 0x6, 0xff, 0x8, 0x1, 0x5, 0x3, 0x5, 0x6, 0x3, 0x8001, 0xffff8007, 0xe, 0xe, 0x0, 0x2, 0x5, 0xe, 0x4, 0x9, 0x80000001, 0x400, 0x1fb, 0xfffffff8, 0xfffff647, 0x408, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x8, 0x3, 0xbe, 0xfff, 0xa, 0x7, 0x81, 0x81, 0x6, 0x2, 0x80000001, 0x69e, 0xb, 0x7000000, 0x1, 0x8, 0xd, 0x7, 0x0, 0x1, 0x3, 0x6, 0xffff, 0x6, 0x8, 0x7fb, 0x4, 0xc9, 0xfd, 0x6, 0x3, 0xfff, 0x58a0, 0x1, 0x7, 0x895, 0x20008, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0xe0b2, 0x9, 0xfffff561, 0x13, 0x3, 0x800003, 0xfffffffa, 0x3, 0x3, 0x1, 0x2ba, 0x1, 0x80e, 0x5, 0x8, 0x2, 0x1, 0x4, 0x1ff, 0x7, 0xfffffffe, 0x7, 0x6, 0x3]}) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) 2.840857987s ago: executing program 1 (id=445): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2, 0x4001, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) io_setup(0xffff, 0x0) io_submit(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) getrandom(0xfffffffffffffffe, 0x0, 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190015000400000007fd17c4e30f11c061852a5d301b", 0x36}], 0x1) close(0x3) close(r0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x3, &(0x7f0000000000)="259a53f271a76d2688a84c6588a8", 0x0, 0xe, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, 0x0, 0x0) ioctl$BLKSSZGET(r4, 0x1268, &(0x7f0000000040)) r6 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000887000/0x4000)=nil, 0x4000, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(r7, 0x0, 0x6e8a) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000008f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc1, 0x0, 0x0, 0x10, 0x6}, 0x94) 2.793415315s ago: executing program 4 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0xac, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) 2.777445996s ago: executing program 2 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) syz_emit_ethernet(0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa89060bb48abec7b800d4f907529fde715b0fa588f4840afcae6e14"], 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) 2.654872283s ago: executing program 0 (id=448): openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) alarm(0x5) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002300)={0x1, &(0x7f0000000140)=[{0x6, 0x24, 0x4, 0x775a}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.619260076s ago: executing program 4 (id=449): syz_usb_disconnect(0xffffffffffffffff) rt_sigprocmask(0x1, 0x0, &(0x7f00000005c0), 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000005) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setregid(0x0, 0x0) setfsuid(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x1, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) write$sndseq(r1, &(0x7f0000000100)=[{0x6, 0x7, 0x2a, 0x9, @time={0x0, 0x4}, {0x8, 0x33}, {0x8, 0x81}, @raw8={"777d08a1fcc378b9768e58d9"}}, {0x4, 0x5, 0x8, 0x1, @tick=0x1000, {0x9f, 0x1}, {0x7, 0x3}, @addr={0x9, 0x3}}], 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0x4, @pix_mp={0xf0000002, 0xf, 0x31363553, 0x7, 0x8, [{0x9, 0x5}, {0x22955b83, 0x7f68}, {0x9, 0x4}, {0xb, 0x3}, {0x6, 0x5}, {0x800, 0x3}, {0x5, 0xb33b}, {0x3, 0x4}], 0x42, 0x6, 0x1, 0x2, 0x6}}, 0x8}) close(r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x5000) 1.603979457s ago: executing program 0 (id=450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x8, 0x1, "0e"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x73, 0x1, '('}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x8}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3ffffe, 0x14, "3eccd8000000000000000010000000040100"}) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b8423580) 1.3307781s ago: executing program 1 (id=451): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x13, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000700)={0x1, {{0xa, 0x4e1f, 0x8, @mcast1, 0xe5}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x800a807, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}]}, 0x110) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49d, 0x0, 0x0, 0x0, 0x0) io_getevents(0x0, 0xffffffff, 0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 603.763734ms ago: executing program 2 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r5, 0x331}, 0x14}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0xc880) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x539ef252}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 556.471766ms ago: executing program 4 (id=453): r0 = userfaultfd(0x80001) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x7, 0x8, 0x0, 0x1}, 0x50) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0x12) recvmmsg$unix(r3, &(0x7f0000002ec0)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000300)=""/201, 0xc9}, {0x0}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x3, &(0x7f0000001b00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001b80)=""/75, 0x4b}, {&(0x7f0000001c00)=""/62, 0x3e}, {&(0x7f0000001c40)=""/136, 0x88}, {&(0x7f0000001d00)=""/154, 0x9a}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/126, 0x7e}], 0x6}}], 0x2, 0x40002000, &(0x7f0000002f40)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000e0000007d1e2cd89b4af8d700120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x400000000002, 0x42ece3) writev(r4, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000400)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x117, 0x200000200009, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000, 0xf4}) 388.763505ms ago: executing program 0 (id=454): syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 0s ago: executing program 3 (id=455): socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpgid(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x200}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x4008084) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000012000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001301400000011000100000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000200)={0x8fffa, [0x1000000, 0x2], 0x2}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.295915][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.306366][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.312264][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.391194][ T5803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 50.468258][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.676361][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.687602][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.261960][ T50] Bluetooth: hci4: command tx timeout [ 51.267432][ T5611] Bluetooth: hci0: command tx timeout [ 51.278277][ T5804] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 51.292513][ T5804] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 51.309402][ T5804] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 51.320054][ T5804] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.330294][ T5804] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.572108][ T50] Bluetooth: hci2: command tx timeout [ 51.577528][ T5623] Bluetooth: hci3: command tx timeout [ 51.988180][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.988467][ T5611] Bluetooth: hci1: command tx timeout [ 52.007569][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.135454][ T5820] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 52.143766][ T5820] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 52.154166][ T5820] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 52.945289][ T5826] syz.4.8 (5826): drop_caches: 2 [ 53.092102][ T5727] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 53.331979][ T50] Bluetooth: hci4: command tx timeout [ 53.337493][ T5611] Bluetooth: hci0: command tx timeout [ 53.803026][ T5727] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 53.816299][ T5727] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 53.835847][ T5727] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 53.974124][ T5839] ceph: No mds server is up or the cluster is laggy [ 54.011890][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 54.011916][ T29] audit: type=1400 audit(1782023792.509:202): avc: denied { shutdown } for pid=5833 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.023365][ T5611] Bluetooth: hci2: command tx timeout [ 54.023416][ T5611] Bluetooth: hci3: command tx timeout [ 54.120445][ T50] Bluetooth: hci1: command tx timeout [ 54.155395][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.169439][ T5343] libceph: connect (1)[c::]:6789 error -101 [ 54.195028][ T5343] libceph: mon0 (1)[c::]:6789 connect error [ 54.203560][ T29] audit: type=1400 audit(1782023792.809:203): avc: denied { getopt } for pid=5829 comm="syz.4.10" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.204736][ T5846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10'. [ 54.235914][ T5817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.248442][ T5727] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 54.282121][ T5846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10'. [ 54.642904][ T29] audit: type=1400 audit(1782023793.239:204): avc: denied { create } for pid=5816 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.684427][ T29] audit: type=1326 audit(1782023793.289:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee919ce59 code=0x7ffc0000 [ 54.710976][ T29] audit: type=1326 audit(1782023793.289:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee919ce59 code=0x7ffc0000 [ 54.738063][ T29] audit: type=1326 audit(1782023793.289:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7faee919ce59 code=0x7ffc0000 [ 54.796527][ T29] audit: type=1326 audit(1782023793.299:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee919ce59 code=0x7ffc0000 [ 54.825227][ T29] audit: type=1326 audit(1782023793.299:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee919ce59 code=0x7ffc0000 [ 54.901237][ T29] audit: type=1326 audit(1782023793.299:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faee919ce59 code=0x7ffc0000 [ 55.013877][ T29] audit: type=1326 audit(1782023793.299:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.2.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee919ce59 code=0x7ffc0000 [ 55.433533][ T5699] usb 4-1: USB disconnect, device number 2 [ 56.247155][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 56.721179][ T5877] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 56.882079][ T5881] Zero length message leads to an empty skb [ 57.490167][ T5890] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 58.028464][ T5888] orangefs_mount: mount request failed with -4 [ 59.111929][ T5893] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 59.122111][ T5893] veth0_vlan: left promiscuous mode [ 59.127813][ T5893] veth0_vlan: entered promiscuous mode [ 59.134308][ T5893] team0: Device veth0_vlan failed to register rx_handler [ 59.164239][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 59.164253][ T29] audit: type=1400 audit(1782023797.769:268): avc: denied { setopt } for pid=5900 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.228742][ T29] audit: type=1400 audit(1782023797.829:269): avc: denied { execute } for pid=5900 comm="syz.1.20" name="file0" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.254171][ T5906] process 'syz.1.20' launched './file0' with NULL argv: empty string added [ 59.273857][ T5699] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 59.305912][ T29] audit: type=1400 audit(1782023797.889:270): avc: denied { read } for pid=5892 comm="syz.0.18" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.329172][ T803] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.452382][ T29] audit: type=1400 audit(1782023797.889:271): avc: denied { open } for pid=5892 comm="syz.0.18" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.477225][ T5699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.746878][ T5915] hfs: can't find a HFS filesystem on dev nullb0 [ 59.831871][ T803] usb 5-1: Using ep0 maxpacket: 8 [ 59.837849][ T5699] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 59.847068][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 59.855250][ T5699] usb 4-1: SerialNumber: syz [ 59.861224][ T803] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.878165][ T803] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.894315][ T5699] cdc_ether 4-1:1.0: skipping garbage [ 59.901882][ T29] audit: type=1400 audit(1782023797.889:272): avc: denied { ioctl } for pid=5892 comm="syz.0.18" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 59.926286][ T5699] cdc_ether 4-1:1.0: GUID doesn't match [ 59.932060][ T803] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 59.942386][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 59.956364][ T803] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 59.965510][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.973579][ T803] usb 5-1: Product: syz [ 59.978247][ T803] usb 5-1: Manufacturer: syz [ 59.978509][ T29] audit: type=1400 audit(1782023797.949:273): avc: denied { execute_no_trans } for pid=5900 comm="syz.1.20" path="/4/file0" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.982870][ T803] usb 5-1: SerialNumber: syz [ 60.042259][ T29] audit: type=1400 audit(1782023797.949:274): avc: denied { read } for pid=5907 comm="syz.2.23" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.079219][ T29] audit: type=1400 audit(1782023797.949:275): avc: denied { ioctl } for pid=5907 comm="syz.2.23" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 60.183463][ T29] audit: type=1400 audit(1782023798.039:276): avc: denied { create } for pid=5907 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.214543][ T29] audit: type=1400 audit(1782023798.349:277): avc: denied { mounton } for pid=5909 comm="syz.0.24" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 60.336357][ T5921] sg_write: data in/out 28/14 bytes for SCSI command 0x2-- guessing data in; [ 60.336357][ T5921] program syz.3.21 not setting count and/or reply_len properly [ 60.649042][ T9] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 60.687236][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.705323][ T803] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 60.745330][ T9] usb 2-1: config 0 has no interface number 0 [ 60.770011][ T9] usb 2-1: config 0 interface 205 has no altsetting 0 [ 60.780524][ T803] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 60.806738][ T9] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 60.828379][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.848767][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.862582][ T9] usb 2-1: Product: syz [ 60.880526][ T9] usb 2-1: Manufacturer: syz [ 60.907487][ T9] usb 2-1: SerialNumber: syz [ 60.928039][ T9] usb 2-1: config 0 descriptor?? [ 60.958300][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 60.997550][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 61.032663][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 61.062777][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 61.118237][ T9] usb 2-1: media controller created [ 61.138269][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 61.181766][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 61.204426][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 61.265630][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 61.352766][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 61.524754][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 61.553342][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.619449][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.631835][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 61.739181][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 62.064951][ T5343] usb 4-1: USB disconnect, device number 3 [ 62.077666][ T5611] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 62.115128][ T5720] dvb-usb: error while querying for an remote control event. [ 62.281888][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 62.364413][ T5936] overlayfs: overlapping lowerdir path [ 63.227824][ T5720] dvb-usb: error while querying for an remote control event. [ 63.232392][ T5343] usb 5-1: USB disconnect, device number 2 [ 63.690771][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 63.696617][ T9] dvb-usb: error while querying for an remote control event. [ 64.175590][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 64.181403][ T9] dvb-usb: error while querying for an remote control event. [ 64.220239][ T9] usb 2-1: USB disconnect, device number 2 [ 64.244319][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 64.264353][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 64.264365][ T29] audit: type=1400 audit(1782023802.869:298): avc: denied { bind } for pid=5943 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.297488][ T29] audit: type=1400 audit(1782023802.869:299): avc: denied { getopt } for pid=5943 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.534786][ T29] audit: type=1400 audit(1782023803.129:300): avc: denied { execute } for pid=5950 comm="syz.0.31" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.606746][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.31'. [ 64.649448][ T29] audit: type=1400 audit(1782023803.129:301): avc: denied { execute_no_trans } for pid=5950 comm="syz.0.31" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.745822][ T29] audit: type=1400 audit(1782023803.289:302): avc: denied { write } for pid=5952 comm="syz.2.32" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.767986][ T29] audit: type=1400 audit(1782023803.369:303): avc: denied { setopt } for pid=5950 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.768250][ T5951] netlink: 'syz.0.31': attribute type 21 has an invalid length. [ 64.899183][ T29] audit: type=1400 audit(1782023803.489:304): avc: denied { write } for pid=5952 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 64.961273][ T5957] tc_dump_action: action bad kind [ 65.143405][ T29] audit: type=1400 audit(1782023803.559:305): avc: denied { accept } for pid=5952 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 65.165309][ T29] audit: type=1400 audit(1782023803.769:306): avc: denied { remount } for pid=5950 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.285021][ T29] audit: type=1400 audit(1782023803.889:307): avc: denied { map } for pid=5959 comm="syz.3.33" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.311952][ T5960] netlink: 'syz.3.33': attribute type 11 has an invalid length. [ 65.998382][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.071991][ T5343] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 66.732291][ T5343] usb 4-1: Using ep0 maxpacket: 8 [ 66.741045][ T5343] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 66.753275][ T5343] usb 4-1: config 2 has no interface number 0 [ 66.765327][ T5343] usb 4-1: config 2 interface 31 has no altsetting 0 [ 66.774236][ T5343] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 66.783583][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.791689][ T5343] usb 4-1: Product: syz [ 66.796158][ T5343] usb 4-1: Manufacturer: syz [ 66.800803][ T5343] usb 4-1: SerialNumber: syz [ 68.430338][ T5343] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 68.508461][ T5986] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 68.526147][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 68.534932][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 69.529504][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 69.529549][ T29] audit: type=1400 audit(1782023808.119:318): avc: denied { search } for pid=5990 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.675699][ T5997] overlayfs: missing 'lowerdir' [ 69.711119][ T5999] futex_wake_op: syz.2.42 tries to shift op by -1; fix this program [ 69.954947][ T29] audit: type=1400 audit(1782023808.119:319): avc: denied { search } for pid=5990 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.979720][ T29] audit: type=1400 audit(1782023808.119:320): avc: denied { search } for pid=5990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.375467][ T6007] netlink: 'syz.4.43': attribute type 13 has an invalid length. [ 70.388720][ T29] audit: type=1400 audit(1782023808.119:321): avc: denied { search } for pid=5990 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.444909][ T5343] usb 4-1: USB disconnect, device number 4 [ 70.608634][ T29] audit: type=1400 audit(1782023808.329:322): avc: denied { read } for pid=5998 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.773702][ T29] audit: type=1400 audit(1782023808.329:323): avc: denied { read open } for pid=5998 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.902113][ T29] audit: type=1400 audit(1782023808.339:324): avc: denied { getattr } for pid=5998 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.207172][ T29] audit: type=1400 audit(1782023808.349:325): avc: denied { getattr } for pid=5998 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1807 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.269821][ T29] audit: type=1400 audit(1782023808.389:326): avc: denied { mmap_zero } for pid=5996 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 71.328321][ T29] audit: type=1400 audit(1782023808.989:327): avc: denied { read } for pid=6004 comm="syz.2.44" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 72.578918][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 72.589218][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.596385][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.297982][ T803] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.605825][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 73.615832][ T803] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 73.631154][ T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 73.663085][ T803] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 73.717826][ T803] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 73.788919][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.803190][ T803] usb 1-1: config 0 descriptor?? [ 73.834554][ T5343] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.928391][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 73.996701][ T6083] kAFS: unable to lookup cell '' [ 74.027194][ T5343] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 74.234502][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 74.378737][ T803] hdpvr 1-1:0.0: firmware version 0x8 dated 5 [ 74.380231][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.400815][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.413997][ T5343] usb 3-1: Product: syz [ 74.418646][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.431310][ T5343] usb 3-1: Manufacturer: syz [ 74.439052][ T5343] usb 3-1: SerialNumber: syz [ 74.451942][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 74.483460][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 74.492917][ T24] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 74.501009][ T24] usb 2-1: Manufacturer: syz [ 74.510053][ T24] usb 2-1: config 0 descriptor?? [ 74.580426][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 74.580441][ T29] audit: type=1400 audit(1782023813.179:358): avc: denied { read write } for pid=6048 comm="syz.0.51" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 74.628005][ T803] hdpvr 1-1:0.0: device init failed [ 74.638682][ T803] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 74.654526][ T803] usb 1-1: USB disconnect, device number 2 [ 74.756566][ T29] audit: type=1400 audit(1782023813.219:359): avc: denied { open } for pid=6048 comm="syz.0.51" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 74.858436][ T6104] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 74.882452][ T29] audit: type=1400 audit(1782023813.219:360): avc: denied { setopt } for pid=6048 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 74.938920][ T29] audit: type=1400 audit(1782023813.519:361): avc: denied { map } for pid=6102 comm="syz.4.56" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.941274][ T24] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 74.980478][ T29] audit: type=1400 audit(1782023813.579:362): avc: denied { write } for pid=6096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.064786][ T24] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 75.144535][ T29] audit: type=1400 audit(1782023813.749:363): avc: denied { write } for pid=6111 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.276378][ T5343] rtl8150 3-1:1.0: couldn't reset the device [ 75.317828][ T5343] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 75.369984][ T5343] usb 3-1: USB disconnect, device number 2 [ 75.481356][ T29] audit: type=1400 audit(1782023814.069:364): avc: denied { read write } for pid=6115 comm="syz.0.57" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.731512][ T29] audit: type=1400 audit(1782023814.069:365): avc: denied { open } for pid=6115 comm="syz.0.57" path="/dev/nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.878540][ T6069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.191968][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 76.202678][ T29] audit: type=1400 audit(1782023814.079:366): avc: denied { ioctl } for pid=6115 comm="syz.0.57" path="/dev/nbd0" dev="devtmpfs" ino=679 ioctlcmd=0xab0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.333249][ T29] audit: type=1400 audit(1782023814.079:367): avc: denied { create } for pid=6068 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.413476][ T803] usb 2-1: USB disconnect, device number 3 [ 76.430689][ T1226] cfg80211: failed to load regulatory.db [ 76.445658][ T9] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 76.504955][ T9] usb 4-1: config 127 has no interface number 0 [ 76.571223][ T9] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 76.634635][ T9] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 76.651195][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.682199][ T9] usb 4-1: Product: syz [ 76.699750][ T9] usb 4-1: Manufacturer: syz [ 76.726602][ T9] usb 4-1: SerialNumber: syz [ 76.755588][ T6125] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.199820][ T6125] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 77.274072][ T6154] netlink: 60 bytes leftover after parsing attributes in process `syz.1.61'. [ 77.316443][ T6154] unsupported nlmsg_type 40 [ 77.440041][ T6125] capability: warning: `syz.3.58' uses deprecated v2 capabilities in a way that may be insecure [ 77.457592][ T9] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 77.531401][ T9] asix 4-1:127.57: probe with driver asix failed with error -71 [ 77.633569][ T9] usb 4-1: USB disconnect, device number 5 [ 78.078312][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 78.100813][ T6171] netlink: 'syz.4.63': attribute type 10 has an invalid length. [ 78.197314][ T6171] veth0_vlan: left promiscuous mode [ 78.238647][ T6171] veth0_vlan: entered promiscuous mode [ 78.379312][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 78.401705][ T6171] team0: Device veth0_vlan failed to register rx_handler [ 78.507534][ T6182] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.514573][ T6182] overlayfs: failed to set xattr on upper [ 78.520306][ T6182] overlayfs: ...falling back to redirect_dir=nofollow. [ 78.527177][ T6182] overlayfs: ...falling back to index=off. [ 78.533098][ T6182] overlayfs: ...falling back to uuid=null. [ 78.596923][ T6182] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 78.732369][ T5699] syz0: Port: 1 Link DOWN [ 78.736893][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.0.66'. [ 78.792731][ T6183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.130705][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 80.241868][ T803] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.393652][ T803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.504616][ T803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40 [ 80.641029][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.837562][ T803] usb 3-1: SerialNumber: syz [ 81.061487][ T803] cdc_ether 3-1:1.0: skipping garbage [ 81.086024][ T803] cdc_ether 3-1:1.0: GUID doesn't match [ 81.231851][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 81.231878][ T29] audit: type=1400 audit(1782023819.769:389): avc: denied { create } for pid=6200 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.466867][ T5699] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.494057][ T29] audit: type=1400 audit(1782023819.769:390): avc: denied { getopt } for pid=6200 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.578431][ T6207] sg_write: data in/out 28/14 bytes for SCSI command 0x2-- guessing data in; [ 81.578431][ T6207] program syz.2.70 not setting count and/or reply_len properly [ 81.873363][ T5699] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 81.891948][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.902869][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.912657][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.928032][ T5699] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 82.011890][ T5699] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 82.036986][ T5699] usb 4-1: Manufacturer: syz [ 82.252040][ T6215] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 82.980084][ T6213] orangefs_mount: mount request failed with -4 [ 83.008554][ T5699] usb 4-1: config 0 descriptor?? [ 83.033320][ T5700] usb 3-1: USB disconnect, device number 3 [ 83.331640][ T29] audit: type=1400 audit(1782023821.929:391): avc: denied { mount } for pid=6217 comm="syz.2.75" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 83.388948][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.75'. [ 83.548795][ T29] audit: type=1400 audit(1782023822.079:392): avc: denied { getopt } for pid=6210 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.791611][ T29] audit: type=1400 audit(1782023822.389:393): avc: denied { unmount } for pid=5618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 83.899808][ T5699] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 83.913168][ T6229] lo speed is unknown, defaulting to 1000 [ 83.919014][ T6229] lo speed is unknown, defaulting to 1000 [ 83.926083][ T6229] lo speed is unknown, defaulting to 1000 [ 83.933797][ T6229] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 83.948048][ T6229] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 83.968168][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 83.991681][ T6229] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 84.021283][ T6229] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.086528][ T6232] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 84.115580][ T6229] lo speed is unknown, defaulting to 1000 [ 84.126398][ T6229] lo speed is unknown, defaulting to 1000 [ 84.135738][ T6229] lo speed is unknown, defaulting to 1000 [ 84.143944][ T5699] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 84.155849][ T6229] lo speed is unknown, defaulting to 1000 [ 84.164906][ T6229] lo speed is unknown, defaulting to 1000 [ 84.865943][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.882621][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 86.378041][ T5700] usb 4-1: USB disconnect, device number 6 [ 86.490784][ T6256] netlink: 44 bytes leftover after parsing attributes in process `syz.1.85'. [ 86.501189][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.508511][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.800071][ T29] audit: type=1400 audit(1782023825.399:394): avc: denied { read } for pid=6255 comm="syz.3.86" name="usbmon7" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.065877][ T29] audit: type=1400 audit(1782023825.399:395): avc: denied { open } for pid=6255 comm="syz.3.86" path="/dev/usbmon7" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.113596][ T29] audit: type=1400 audit(1782023825.649:396): avc: denied { write } for pid=6258 comm="syz.2.87" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.138748][ T29] audit: type=1400 audit(1782023825.649:397): avc: denied { ioctl } for pid=6258 comm="syz.2.87" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 88.164428][ T29] audit: type=1400 audit(1782023825.659:398): avc: denied { create } for pid=6258 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.706425][ T29] audit: type=1400 audit(1782023827.309:399): avc: denied { ioctl } for pid=6265 comm="syz.4.88" path="socket:[9177]" dev="sockfs" ino=9177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.860758][ T29] audit: type=1400 audit(1782023827.459:400): avc: denied { sqpoll } for pid=6268 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.904366][ T6282] lo speed is unknown, defaulting to 1000 [ 88.943979][ T29] audit: type=1400 audit(1782023827.459:401): avc: denied { map } for pid=6268 comm="syz.2.89" path="/dev/video5" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 89.137840][ T29] audit: type=1400 audit(1782023827.739:402): avc: denied { create } for pid=6275 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.341084][ T6291] netlink: 76 bytes leftover after parsing attributes in process `syz.2.94'. [ 89.411834][ T29] audit: type=1400 audit(1782023827.759:403): avc: denied { connect } for pid=6275 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.513856][ T6288] smbdirect: ib_dev[syz2] removed [ 91.336328][ T6319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.422541][ T1226] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.583336][ T1226] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.597663][ T1226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.632299][ T1226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.699849][ T1226] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.716096][ T1226] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.725750][ T1226] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.734371][ T1226] usb 5-1: Manufacturer: syz [ 91.746199][ T1226] usb 5-1: config 0 descriptor?? [ 91.842209][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 91.842224][ T29] audit: type=1326 audit(1782023830.449:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6312 comm="syz.3.98" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43d639ce59 code=0x0 [ 91.993740][ T6326] batadv_slave_0: entered promiscuous mode [ 92.005217][ T6326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.101'. [ 92.019101][ T29] audit: type=1400 audit(1782023830.599:413): avc: denied { setopt } for pid=6324 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.051592][ T29] audit: type=1400 audit(1782023830.649:414): avc: denied { nlmsg_write } for pid=6324 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 92.073476][ T6326] batadv_slave_0: left promiscuous mode [ 92.097253][ T29] audit: type=1400 audit(1782023830.689:415): avc: denied { create } for pid=6324 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.285737][ T1226] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 93.268366][ T6336] tc_dump_action: action bad kind [ 93.566968][ T6338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.788488][ T1226] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 94.143740][ T6347] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 94.210816][ T6349] tmpfs: Unknown parameter 'mpo' [ 94.234638][ T29] audit: type=1400 audit(1782023832.839:416): avc: denied { connect } for pid=6344 comm="syz.3.105" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.526186][ T9] usb 5-1: USB disconnect, device number 3 [ 95.791814][ T6360] SET target dimension over the limit! [ 96.044006][ T29] audit: type=1400 audit(1782023834.649:417): avc: denied { ioctl } for pid=6361 comm="syz.4.109" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 96.192040][ T29] audit: type=1400 audit(1782023834.799:418): avc: denied { getopt } for pid=6366 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.572818][ T29] audit: type=1400 audit(1782023835.179:419): avc: denied { watch } for pid=6363 comm="syz.1.110" path="/22/file1" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.597167][ T29] audit: type=1400 audit(1782023835.179:420): avc: denied { watch_sb watch_reads } for pid=6363 comm="syz.1.110" path="/22/file1" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.728336][ T6371] mmap: syz.2.111 (6371) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.760596][ T6371] overlayfs: missing 'lowerdir' [ 97.414760][ T6389] trusted_key: encrypted_key: key user:syz not found [ 97.454270][ T29] audit: type=1400 audit(1782023836.049:421): avc: denied { ioctl } for pid=6382 comm="syz.2.115" path="socket:[10741]" dev="sockfs" ino=10741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.515626][ T6387] program syz.4.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.803974][ T6402] tmpfs: Unknown parameter 'mpo' [ 100.319024][ T6413] Set syz1 is full, maxelem 65536 reached [ 100.740813][ T6411] syz.2.122 (6411): drop_caches: 2 [ 101.329445][ T29] audit: type=1400 audit(1782023839.689:422): avc: denied { getopt } for pid=6417 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.392496][ T6419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.123'. [ 101.402186][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.409347][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.057365][ T29] audit: type=1400 audit(1782023840.659:423): avc: denied { create } for pid=6428 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.179615][ T6430] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.191109][ T6430] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 102.625632][ T6437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6437 comm=syz.3.128 [ 102.648599][ T29] audit: type=1400 audit(1782023841.229:424): avc: denied { read write } for pid=6431 comm="syz.3.128" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.678484][ T29] audit: type=1400 audit(1782023841.229:425): avc: denied { open } for pid=6431 comm="syz.3.128" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.707284][ T29] audit: type=1400 audit(1782023841.249:426): avc: denied { ioctl } for pid=6431 comm="syz.3.128" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.868681][ T29] audit: type=1400 audit(1782023841.469:427): avc: denied { write } for pid=6428 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.929527][ T29] audit: type=1400 audit(1782023841.469:428): avc: denied { listen } for pid=6428 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.968465][ T6446] SET target dimension over the limit! [ 102.983177][ T6446] gfs2: path_lookup on  returned error -2 [ 103.000611][ T6447] netlink: 'syz.4.130': attribute type 1 has an invalid length. [ 103.008339][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 103.613931][ T29] audit: type=1400 audit(1782023842.209:429): avc: denied { create } for pid=6440 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 104.316948][ T1226] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.804173][ T1226] usb 1-1: unable to get BOS descriptor or descriptor too short [ 104.818266][ T1226] usb 1-1: not running at top speed; connect to a high speed hub [ 104.837323][ T1226] usb 1-1: config 8 has no interfaces? [ 104.852515][ T1226] usb 1-1: string descriptor 0 read error: -22 [ 104.869748][ T1226] usb 1-1: New USB device found, idVendor=3731, idProduct=0113, bcdDevice=dd.b4 [ 104.891829][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.131719][ T803] usb 1-1: USB disconnect, device number 3 [ 105.151530][ T29] audit: type=1400 audit(1782023843.749:430): avc: denied { append } for pid=6474 comm="syz.3.136" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.175363][ T29] audit: type=1400 audit(1782023843.779:431): avc: denied { load_policy } for pid=6474 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.175657][ T6475] SELinux: policydb magic number 0xcd040f04 does not match expected magic number 0xf97cff8c [ 105.206440][ T6475] SELinux: failed to load policy [ 105.221605][ T29] audit: type=1400 audit(1782023843.819:432): avc: denied { setcurrent } for pid=6474 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 105.241172][ T29] audit: type=1401 audit(1782023843.819:433): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 105.676530][ T1226] IPVS: starting estimator thread 0... [ 105.781930][ T6486] IPVS: using max 125 ests per chain, 300000 per kthread [ 106.294951][ T6494] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.140'. [ 106.304277][ T6494] openvswitch: netlink: Message has 512 unknown bytes. [ 107.201874][ T5720] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.226306][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 107.238628][ T6509] hsr_slave_1 (unregistering): left promiscuous mode [ 107.404657][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 107.784853][ T6517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.146'. [ 107.994592][ T5720] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 108.008023][ T5720] usb 2-1: config 0 has no interface number 0 [ 108.024253][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.083737][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 108.095906][ T5720] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.107976][ T5720] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 108.132161][ T5720] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 108.142352][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.203926][ T5720] usb 2-1: config 0 descriptor?? [ 108.218416][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 108.412741][ T5720] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 108.598814][ T6528] openvswitch: netlink: Key type 38 is out of range max 32 [ 108.763370][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 108.763393][ T29] audit: type=1400 audit(1782023847.359:439): avc: denied { accept } for pid=6525 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.862108][ T29] audit: type=1400 audit(1782023847.459:440): avc: denied { mounton } for pid=6504 comm="syz.1.143" path="/26/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.893263][ T29] audit: type=1400 audit(1782023847.499:441): avc: denied { write } for pid=6520 comm="syz.4.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.899066][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.149'. [ 109.611817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 109.634245][ T5611] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 109.647355][ T5611] Bluetooth: hci2: Injecting HCI hardware error event [ 109.664784][ T5611] Bluetooth: hci2: hardware error 0x00 [ 109.874712][ T29] audit: type=1400 audit(1782023848.059:442): avc: denied { bind } for pid=6532 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 109.941837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.011827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.071811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.151806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.191814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 110.525111][ T5720] usb 2-1: USB disconnect, device number 4 [ 110.530979][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 110.566537][ T5720] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 110.756449][ T6553] overlayfs: missing 'lowerdir' [ 112.534316][ T5611] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 112.534607][ T803] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.760924][ T29] audit: type=1400 audit(1782023851.359:443): avc: denied { connect } for pid=6580 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.913827][ T803] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 112.955635][ T29] audit: type=1400 audit(1782023851.409:444): avc: denied { read } for pid=6580 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.976009][ T803] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 112.996883][ T803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.015368][ T6584] loop5: detected capacity change from 0 to 7 [ 113.025776][ T29] audit: type=1400 audit(1782023851.619:445): avc: denied { append } for pid=6580 comm="syz.0.161" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.050254][ T803] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.073099][ T803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 113.084463][ T6584] Dev loop5: unable to read RDB block 7 [ 113.092622][ T803] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.114118][ T6584] loop5: AHDI p2 [ 113.120769][ T803] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.124304][ T6587] [U] [ 113.138519][ T803] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.152371][ T803] usb 4-1: Product: syz [ 113.532005][ T803] usb 4-1: Manufacturer: syz [ 113.581896][ T6591] warning: `syz.4.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.786134][ T6571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.793417][ T6587] [U] [ 113.796612][ T6587] [U] DDp% [ 113.800307][ T6587] [U]  [ 113.819703][ T803] cdc_wdm 4-1:1.0: skipping garbage [ 113.825028][ T6584] loop5: partition table partially beyond EOD, truncated [ 113.828178][ T6587] [U]  [ 113.834916][ T6587] [U] [ 113.837601][ T6587] [U] [ 113.842987][ T803] cdc_wdm 4-1:1.0: skipping garbage [ 113.854791][ T803] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 113.875356][ T803] cdc_wdm 4-1:1.0: Unknown control protocol [ 113.918865][ T6587] [U] [ 113.921580][ T6587] [U] [ 113.924240][ T6587] [U] [ 113.926916][ T6587] [U] [ 114.061802][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.068430][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.074699][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.081280][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.087621][ T29] audit: type=1400 audit(1782023852.659:446): avc: denied { read write } for pid=6568 comm="syz.3.158" name="cdc-wdm0" dev="devtmpfs" ino=2877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 114.111400][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.111415][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.118107][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.118122][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.124284][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.124296][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.130937][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.130947][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.137219][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.137236][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.143862][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.143873][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.149929][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.149938][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.156519][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 114.156530][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 114.253780][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 114.312764][ T6587] [U] [ 114.315484][ T6587] [U] [ 114.318168][ T6587] [U] [ 114.320851][ T6587] [U] [ 114.334200][ T6587] [U] [ 114.336913][ T6587] [U] [ 114.339600][ T6587] [U] [ 114.342288][ T6587] [U] [ 114.343349][ T5700] usb 4-1: USB disconnect, device number 7 [ 114.346217][ T6587] [U] [ 114.353414][ T6587] [U] [ 114.356094][ T6587] [U] [ 114.358775][ T6587] [U] [ 114.364083][ T29] audit: type=1400 audit(1782023852.659:447): avc: denied { open } for pid=6568 comm="syz.3.158" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 114.446996][ T6596] trusted_key: encrypted_key: insufficient parameters specified [ 114.458011][ T6596] netlink: 'syz.1.166': attribute type 40 has an invalid length. [ 114.473139][ T6596] Bluetooth: MGMT ver 1.23 [ 114.684116][ T6587] [U] [ 114.763583][ T29] audit: type=1400 audit(1782023853.289:448): avc: denied { append } for pid=6597 comm="syz.4.165" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 115.872170][ T6612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.180'. [ 115.918225][ T6612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.180'. [ 116.006233][ T6619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.170'. [ 116.085398][ T6618] ubi16: attaching mtd0 [ 116.093645][ T6618] ubi16: scanning is finished [ 116.098458][ T6618] ubi16: empty MTD device detected [ 116.204970][ T6621] use of bytesused == 0 is deprecated and will be removed in the future, [ 116.213609][ T6621] use the actual size instead. [ 116.443030][ T6619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.550486][ T6618] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 116.605251][ T6618] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 116.614001][ T6618] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 116.623301][ T6618] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 116.631594][ T6618] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 116.647054][ T6618] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 116.657271][ T6618] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3258998266 [ 116.669071][ T6618] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 116.681046][ T6624] ubi16: background thread "ubi_bgt16d" started, PID 6624 [ 116.987776][ T6628] netlink: 'syz.3.172': attribute type 4 has an invalid length. [ 117.649933][ T29] audit: type=1400 audit(1782023856.239:449): avc: denied { create } for pid=6637 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 117.671303][ T6638] Unsupported ieee802154 address type: 0 [ 117.813610][ T29] audit: type=1400 audit(1782023856.269:450): avc: denied { bind } for pid=6637 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.195874][ T6642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.174'. [ 118.205063][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.212239][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.295497][ T29] audit: type=1400 audit(1782023856.309:451): avc: denied { create } for pid=6640 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.303995][ T29] audit: type=1400 audit(1782023857.909:452): avc: denied { getopt } for pid=6664 comm="syz.4.181" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.374270][ T6668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.178'. [ 119.740822][ T29] audit: type=1400 audit(1782023858.249:453): avc: denied { read write } for pid=6671 comm="syz.1.183" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 119.845792][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 120.122674][ T29] audit: type=1400 audit(1782023858.249:454): avc: denied { open } for pid=6671 comm="syz.1.183" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 120.208590][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.215693][ T6665] bridge0: port 2(bridge_slave_1) entered listening state [ 120.222870][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.229887][ T6665] bridge0: port 1(bridge_slave_0) entered listening state [ 120.322291][ T6665] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 120.604532][ T6686] netlink: 96 bytes leftover after parsing attributes in process `syz.0.186'. [ 121.237896][ T5720] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.442178][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 121.687497][ T29] audit: type=1400 audit(1782023860.119:455): avc: denied { connect } for pid=6696 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.759296][ T5720] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 121.768366][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.805749][ T5720] usb 2-1: config 0 descriptor?? [ 121.829316][ T5720] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 122.075874][ T6703] tmpfs: Unknown parameter 'mpo' [ 122.100146][ T29] audit: type=1400 audit(1782023860.679:456): avc: denied { mounton } for pid=6700 comm="syz.4.190" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 122.532095][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.547777][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.648097][ T1157] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.659793][ T1157] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.669352][ T1157] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.679543][ T1157] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.928811][ T6724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.191'. [ 123.320607][ T6724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.350843][ T6731] netlink: 'syz.3.193': attribute type 10 has an invalid length. [ 123.391721][ T29] audit: type=1400 audit(1782023861.989:457): avc: denied { ioctl } for pid=6717 comm="syz.2.192" path="socket:[13396]" dev="sockfs" ino=13396 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.475166][ T29] audit: type=1400 audit(1782023861.989:458): avc: denied { shutdown } for pid=6717 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.532234][ T29] audit: type=1400 audit(1782023862.019:459): avc: denied { connect } for pid=6717 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.763787][ T6712] usb 2-1: USB disconnect, device number 5 [ 124.081368][ T6734] netlink: 84 bytes leftover after parsing attributes in process `syz.3.194'. [ 124.098393][ T6734] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 124.470919][ T6742] syz.3.196 (6742): drop_caches: 2 [ 125.505126][ T5611] Bluetooth: hci4: command 0x0405 tx timeout [ 125.871931][ T5699] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.977751][ T6755] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 125.993152][ T6755] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 126.017376][ T6755] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 126.097804][ T6755] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.143525][ T5699] usb 4-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 126.820888][ T5699] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 126.832087][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.840097][ T5699] usb 4-1: Product: syz [ 126.845264][ T5699] usb 4-1: Manufacturer: syz [ 126.851033][ T5699] usb 4-1: SerialNumber: syz [ 127.065783][ T5720] IPVS: starting estimator thread 0... [ 127.224796][ T6766] can0: slcan on ttyS3. [ 127.232277][ T6759] IPVS: using max 62 ests per chain, 148800 per kthread [ 127.237056][ T29] audit: type=1400 audit(1782023865.669:460): avc: denied { read write } for pid=6757 comm="syz.0.200" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.323955][ T6770] tmpfs: Unknown parameter 'mpo' [ 127.620546][ T6771] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 127.651241][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.679882][ T29] audit: type=1400 audit(1782023865.679:461): avc: denied { ioctl open } for pid=6757 comm="syz.0.200" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 127.871268][ T29] audit: type=1400 audit(1782023865.679:462): avc: denied { module_request } for pid=6757 comm="syz.0.200" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 127.894868][ T6766] can0 (unregistered): slcan off ttyS3. [ 127.912072][ T6758] IPVS: lc: FWM 3 0x00000003 - no destination available [ 128.258185][ T29] audit: type=1400 audit(1782023866.859:463): avc: denied { write } for pid=6775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.281888][ T6794] ======================================================= [ 128.281888][ T6794] WARNING: The mand mount option has been deprecated and [ 128.281888][ T6794] and is ignored by this kernel. Remove the mand [ 128.281888][ T6794] option from the mount to silence this warning. [ 128.281888][ T6794] ======================================================= [ 128.324257][ T6794] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.334735][ T29] audit: type=1400 audit(1782023866.919:464): avc: denied { mount } for pid=6789 comm="syz.4.207" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 128.337770][ T5699] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 128.371279][ T6794] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 128.381204][ T6794] overlayfs: failed to look up (tracing) for ino (-66) [ 128.388139][ T6706] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.403581][ T5699] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.414021][ T6711] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.415410][ T6796] netlink: 'syz.1.206': attribute type 10 has an invalid length. [ 128.446040][ T6796] veth0_vlan: left promiscuous mode [ 128.451453][ T5699] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 128.456255][ T29] audit: type=1400 audit(1782023866.929:465): avc: denied { mounton } for pid=6789 comm="syz.4.207" path="/44/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 128.467309][ T5699] usb 4-1: media controller created [ 128.482552][ T6796] veth0_vlan: entered promiscuous mode [ 128.509526][ T6796] team0: Device veth0_vlan failed to register rx_handler [ 128.521662][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.522066][ T29] audit: type=1400 audit(1782023867.049:466): avc: denied { write } for pid=6798 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.544656][ T6706] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 128.605850][ T6711] usb 3-1: Using ep0 maxpacket: 32 [ 128.619096][ T6706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.619994][ T6711] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 128.635888][ T6711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.646213][ T6711] usb 3-1: config 0 has no interface number 0 [ 128.663824][ T5699] usb 4-1: USB disconnect, device number 8 [ 128.666735][ T6711] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 128.689420][ T6706] usb 1-1: Product: syz [ 128.701183][ T6711] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 128.710786][ T6711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.719846][ T6706] usb 1-1: Manufacturer: syz [ 128.728256][ T6711] usb 3-1: Product: syz [ 128.729067][ T6706] usb 1-1: SerialNumber: syz [ 128.743904][ T6711] usb 3-1: Manufacturer: syz [ 128.748651][ T6711] usb 3-1: SerialNumber: syz [ 128.756942][ T6711] usb 3-1: config 0 descriptor?? [ 128.768049][ T6711] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 128.776147][ T6711] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 128.977873][ T29] audit: type=1400 audit(1782023867.579:467): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 129.001034][ T6782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.015964][ T6782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.300205][ T29] audit: type=1400 audit(1782023867.899:468): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 129.336917][ T6711] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 129.410042][ T6711] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 129.433446][ T29] audit: type=1400 audit(1782023868.009:469): avc: denied { write } for pid=6802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.459499][ T6711] usb 3-1: USB disconnect, device number 4 [ 129.845382][ T6824] netlink: 'syz.4.208': attribute type 4 has an invalid length. [ 130.974673][ T6706] rtl8150 1-1:1.0: couldn't reset the device [ 131.005221][ T6706] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 131.093886][ T6706] usb 1-1: USB disconnect, device number 4 [ 131.558996][ T6840] binder: 6834:6840 ioctl 40084504 200000000280 returned -22 [ 131.992339][ T6856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.213'. [ 132.297964][ T6706] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.416418][ T6856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.471839][ T6706] usb 3-1: Using ep0 maxpacket: 16 [ 132.505828][ T6706] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.536993][ T6706] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.570887][ T6706] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 132.582944][ T6706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.598143][ T6706] usb 3-1: Product: syz [ 132.606476][ T6706] usb 3-1: Manufacturer: syz [ 132.619945][ T6706] usb 3-1: SerialNumber: syz [ 132.619995][ T6855] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 132.646406][ T6706] usb 3-1: config 0 descriptor?? [ 132.743003][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 132.890655][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 132.898677][ T6706] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 132.919844][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 132.919856][ T29] audit: type=1400 audit(1782023871.519:478): avc: denied { read } for pid=4961 comm="acpid" name="mouse1" dev="devtmpfs" ino=2908 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.952073][ T6706] imon:send_packet: packet tx failed (-71) [ 132.981843][ T6706] imon 3-1:0.0: panel buttons/knobs setup failed [ 132.993525][ T29] audit: type=1400 audit(1782023871.519:479): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2908 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.038809][ T29] audit: type=1400 audit(1782023871.519:480): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2908 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.103159][ T6706] rc_core: IR keymap rc-imon-pad not found [ 133.111271][ T6706] Registered IR keymap rc-empty [ 133.118037][ T6706] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 133.133424][ T6706] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 133.147094][ T6706] imon:send_packet: packet tx failed (-71) [ 133.171914][ T6706] imon 3-1:0.0: remote input dev register failed [ 133.179212][ T6706] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 133.193613][ T6706] imon 3-1:0.0: unable to initialize intf0, err 0 [ 133.201010][ T6706] imon:imon_probe: failed to initialize context! [ 133.207398][ T6706] imon 3-1:0.0: unable to register, err -19 [ 133.229574][ T6706] usb 3-1: USB disconnect, device number 5 [ 133.531866][ T6706] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.691904][ T6706] usb 3-1: Using ep0 maxpacket: 16 [ 133.698545][ T6706] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.709435][ T6706] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.718034][ T6706] usb 3-1: string descriptor 0 read error: -22 [ 133.724262][ T6706] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 133.733298][ T6706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.742048][ T6706] usb 3-1: config 0 descriptor?? [ 133.749349][ T6706] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 134.031833][ T6706] rc_core: IR keymap rc-imon-pad not found [ 134.037739][ T6706] Registered IR keymap rc-empty [ 134.043307][ T6706] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 134.053493][ T6706] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 134.182107][ T6706] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 134.192596][ T6706] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 134.203841][ T6706] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:6> initialized [ 134.390709][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 134.397823][ T6706] usb 3-1: USB disconnect, device number 6 [ 135.065788][ T6874] overlayfs: missing 'lowerdir' [ 135.338119][ T6876] tmpfs: Unknown parameter 'mpo' [ 135.361402][ T6712] IPVS: starting estimator thread 0... [ 135.571851][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 135.578982][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 135.821195][ T6883] comedi comedi0: pcl726: I/O base address not correctly aligned [ 135.887304][ T6879] overlayfs: missing 'lowerdir' [ 135.949641][ T6884] pim6reg1: tun_chr_ioctl cmd 1074025678 [ 135.957137][ T6884] pim6reg1: group set to 0 [ 135.961927][ T6877] IPVS: using max 125 ests per chain, 300000 per kthread [ 136.442116][ T6894] FAT-fs (nbd2): unable to read boot sector [ 136.927973][ T6895] syz.4.225 uses obsolete (PF_INET,SOCK_PACKET) [ 137.004099][ T6893] Bluetooth: MGMT ver 1.23 [ 137.449670][ T6907] netlink: 'syz.0.224': attribute type 10 has an invalid length. [ 137.475361][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 137.509797][ T29] audit: type=1400 audit(1782023876.099:481): avc: denied { create } for pid=6903 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.553120][ T6907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.633974][ T29] audit: type=1400 audit(1782023876.139:482): avc: denied { setopt } for pid=6903 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.655257][ T6919] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 137.666684][ T6920] netlink: 'syz.0.224': attribute type 10 has an invalid length. [ 137.683788][ T29] audit: type=1400 audit(1782023876.289:483): avc: denied { lock } for pid=6904 comm="syz.1.237" path="socket:[13659]" dev="sockfs" ino=13659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.759394][ T6923] random: crng reseeded on system resumption [ 137.937096][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 138.002706][ T6925] netlink: 104 bytes leftover after parsing attributes in process `syz.3.229'. [ 138.029258][ T6907] team0: Port device netdevsim1 added [ 138.108378][ T29] audit: type=1400 audit(1782023876.359:484): avc: denied { write } for pid=6915 comm="syz.3.229" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.131939][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 138.165152][ T6920] team0: Port device netdevsim1 removed [ 138.173439][ T29] audit: type=1400 audit(1782023876.359:485): avc: denied { open } for pid=6915 comm="syz.3.229" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 138.210090][ T6920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 138.233892][ T6920] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 138.245285][ T29] audit: type=1400 audit(1782023876.619:486): avc: denied { lock } for pid=6904 comm="syz.1.237" path="socket:[12757]" dev="sockfs" ino=12757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.391085][ T9] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 138.418768][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.440462][ T6907] netlink: 100 bytes leftover after parsing attributes in process `syz.0.224'. [ 138.469038][ T9] usb 5-1: config 0 has no interface number 0 [ 138.501708][ T9] usb 5-1: config 0 interface 205 has no altsetting 0 [ 138.568219][ T9] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 138.601873][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.630045][ T9] usb 5-1: Product: syz [ 138.643443][ T9] usb 5-1: Manufacturer: syz [ 138.655309][ T9] usb 5-1: SerialNumber: syz [ 138.671352][ T9] usb 5-1: config 0 descriptor?? [ 138.700297][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 138.775208][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 138.843098][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.892357][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 138.941724][ T9] usb 5-1: media controller created [ 138.950501][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.063393][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.077837][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.104305][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 139.118001][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 139.131946][ T29] audit: type=1400 audit(1782023877.689:487): avc: denied { setopt } for pid=6933 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.171132][ T6935] jfs: Unknown parameter 'd NGrdg.`8k0-6m7 [ 210.993395][ T50] dump_stack_lvl+0x100/0x190 [ 210.993424][ T50] sysfs_warn_dup.cold+0x1c/0x28 [ 210.993452][ T50] sysfs_create_dir_ns+0x24b/0x2b0 [ 210.993479][ T50] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 210.993504][ T50] ? kobject_add_internal+0x25f/0x930 [ 210.993530][ T50] ? lock_release+0x24d/0x310 [ 210.993550][ T50] ? do_raw_spin_unlock+0x145/0x1e0 [ 210.993573][ T50] kobject_add_internal+0x2c8/0x930 [ 210.993600][ T50] kobject_add+0x16a/0x1e0 [ 210.993623][ T50] ? __pfx_kobject_add+0x10/0x10 [ 210.993645][ T50] ? preempt_schedule_thunk+0x16/0x40 [ 210.993665][ T50] ? kobject_put+0xb9/0x640 [ 210.993689][ T50] ? _raw_spin_unlock+0x3e/0x50 [ 210.993716][ T50] device_add+0x294/0x1970 [ 210.993742][ T50] ? __pfx_device_add+0x10/0x10 [ 210.993767][ T50] ? kobject_set_name_vargs+0xfe/0x140 [ 210.993791][ T50] hci_conn_add_sysfs+0x1a3/0x260 [ 210.993814][ T50] le_conn_complete_evt+0x11eb/0x1f60 [ 210.993835][ T50] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 210.993855][ T50] hci_le_conn_complete_evt+0x23c/0x3a0 [ 210.993874][ T50] ? skb_pull_data+0x15f/0x1e0 [ 210.993902][ T50] hci_le_meta_evt+0x34a/0x5f0 [ 210.993921][ T50] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 210.993941][ T50] hci_event_packet+0x51c/0xcd0 [ 210.993958][ T50] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 210.993977][ T50] ? __pfx_hci_event_packet+0x10/0x10 [ 210.993993][ T50] ? finish_task_switch.isra.0+0x14c/0x1010 [ 210.994016][ T50] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 210.994039][ T50] ? kcov_remote_start+0x374/0x660 [ 210.994058][ T50] ? kcov_remote_start+0x384/0x660 [ 210.994078][ T50] hci_rx_work+0x451/0xfc0 [ 210.994096][ T50] process_one_work+0xa23/0x1940 [ 210.994118][ T50] ? __pfx_process_one_work+0x10/0x10 [ 210.994138][ T50] ? __pfx_hci_rx_work+0x10/0x10 [ 210.994155][ T50] worker_thread+0x5ef/0xe50 [ 210.994174][ T50] ? kthread+0x13a/0x450 [ 210.994198][ T50] ? __pfx_worker_thread+0x10/0x10 [ 210.994213][ T50] kthread+0x370/0x450 [ 210.994238][ T50] ? __pfx_kthread+0x10/0x10 [ 210.994264][ T50] ret_from_fork+0x72b/0xd50 [ 210.994287][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 210.994309][ T50] ? __switch_to+0x800/0x10f0 [ 210.994337][ T50] ? __pfx_kthread+0x10/0x10 [ 210.994363][ T50] ret_from_fork_asm+0x1a/0x30 [ 210.994393][ T50] [ 210.994501][ T50] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 211.038030][ T6711] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 211.046852][ T50] Bluetooth: hci1: failed to register connection device [ 211.095790][ T29] audit: type=1400 audit(1782023949.529:588): avc: denied { listen } for pid=7803 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.361322][ T29] audit: type=1400 audit(1782023949.779:589): avc: denied { read } for pid=7797 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.383009][ T6706] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 211.408962][ T6706] snd_usb_podhd 5-1:1.0: Line 6 POD HD500X found [ 211.420556][ T6706] usb 5-1: selecting invalid altsetting 1 [ 211.434663][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.451076][ T6706] snd_usb_podhd 5-1:1.0: set_interface failed [ 211.457364][ T6706] snd_usb_podhd 5-1:1.0: Line 6 POD HD500X now disconnected [ 211.470182][ T6706] snd_usb_podhd 5-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 211.485577][ T6706] usb 5-1: USB disconnect, device number 6 [ 211.492681][ T6711] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 211.503640][ T6711] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 211.515493][ T6711] usb 4-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config [ 211.541125][ T6711] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 211.550403][ T6711] usb 4-1: config 1 has no interface number 0 [ 211.557749][ T6711] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 211.566998][ T6711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.828135][ T6711] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 212.007236][ T7818] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 212.096478][ T6711] snd_usb_pod 4-1:1.1: set_interface failed [ 212.123944][ T6711] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 212.173096][ T6711] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 212.273567][ T6711] usb 4-1: USB disconnect, device number 15 [ 212.659054][ T29] audit: type=1400 audit(1782023951.189:590): avc: denied { read } for pid=7822 comm="syz.0.438" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 212.825186][ T7833] netlink: 'syz.1.437': attribute type 10 has an invalid length. [ 212.842488][ T7833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.855580][ T7833] team0: Port device netdevsim1 added [ 212.883734][ T7834] netlink: 'syz.1.437': attribute type 10 has an invalid length. [ 212.913986][ T7834] team0: Port device netdevsim1 removed [ 212.923434][ T7834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.954232][ T7834] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 213.171970][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 213.583942][ T29] audit: type=1326 audit(1782023952.189:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 213.753340][ T29] audit: type=1326 audit(1782023952.209:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 214.112632][ T29] audit: type=1326 audit(1782023952.299:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 214.113807][ T7842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.192235][ T29] audit: type=1326 audit(1782023952.309:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 214.237252][ T7849] netlink: 48 bytes leftover after parsing attributes in process `syz.1.443'. [ 214.249190][ T7849] netlink: 48 bytes leftover after parsing attributes in process `syz.1.443'. [ 214.253633][ T29] audit: type=1326 audit(1782023952.309:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 214.318525][ T29] audit: type=1326 audit(1782023952.709:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 214.352375][ T29] audit: type=1326 audit(1782023952.709:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 214.386421][ T29] audit: type=1326 audit(1782023952.709:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 214.419865][ T29] audit: type=1326 audit(1782023952.719:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7840 comm="syz.0.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fcbcdd9ce59 code=0x7ffc0000 [ 214.567030][ T35] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 214.823198][ T7869] sctp: [Deprecated]: syz.2.447 (pid 7869) Use of int in max_burst socket option. [ 214.823198][ T7869] Use struct sctp_assoc_value instead [ 215.251934][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 216.021269][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.033344][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.416712][ T7883] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 218.424984][ T7883] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 218.451867][ C1] ------------[ cut here ]------------ [ 218.457332][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 218.463990][ C1] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#1: syz.3.455/7905 [ 218.473592][ C1] Modules linked in: [ 218.477469][ C1] CPU: 1 UID: 0 PID: 7905 Comm: syz.3.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.488196][ C1] Tainted: [L]=SOFTLOCKUP [ 218.492488][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.502515][ C1] RIP: 0010:__queue_work+0xd31/0x12b0 [ 218.507871][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 03 95 0e 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 218.527459][ C1] RSP: 0018:ffffc90000a08be0 EFLAGS: 00010046 [ 218.533504][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100fbc794e [ 218.541446][ C1] RDX: ffff88807d921970 RSI: ffffffff8a8a38e0 RDI: ffffffff90dd5b50 [ 218.549397][ C1] RBP: ffff88807de3ca58 R08: 0000000000000005 R09: 0000000000000000 [ 218.557337][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88807d921800 [ 218.565277][ C1] R13: 0000000000000000 R14: ffffffff81cecbe0 R15: 0000000000000001 [ 218.573222][ C1] FS: 00007f43d73056c0(0000) GS:ffff88812441a000(0000) knlGS:0000000000000000 [ 218.582122][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.588676][ C1] CR2: 00007fedee9a0990 CR3: 0000000029b1f000 CR4: 00000000003526f0 [ 218.596620][ C1] Call Trace: [ 218.599869][ C1] [ 218.602683][ C1] ? lock_acquire+0x301/0x370 [ 218.607343][ C1] ? lock_release+0x24d/0x310 [ 218.611991][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 218.617767][ C1] call_timer_fn+0x19a/0x610 [ 218.622326][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 218.627406][ C1] ? rcu_is_watching+0x12/0xc0 [ 218.632143][ C1] ? __run_timers+0x560/0xb00 [ 218.636789][ C1] ? lock_release+0x24d/0x310 [ 218.641436][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 218.647220][ C1] __run_timers+0x570/0xb00 [ 218.651704][ C1] ? __pfx___run_timers+0x10/0x10 [ 218.656707][ C1] ? rcu_is_watching+0x12/0xc0 [ 218.661445][ C1] ? clockevents_program_event+0x23e/0x820 [ 218.667224][ C1] ? ktime_get+0x9f/0x320 [ 218.671525][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 218.676524][ C1] run_timer_base+0x114/0x190 [ 218.681170][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 218.686337][ C1] run_timer_softirq+0x1a/0x50 [ 218.691081][ C1] handle_softirqs+0x1ea/0x9b0 [ 218.695815][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 218.701082][ C1] ? _raw_spin_unlock+0x28/0x50 [ 218.705907][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 218.711521][ C1] __irq_exit_rcu+0x162/0x210 [ 218.716167][ C1] irq_exit_rcu+0x9/0x30 [ 218.720380][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 218.725987][ C1] [ 218.728889][ C1] [ 218.731795][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.737746][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x70 [ 218.743879][ C1] Code: f3 0f 1e fa 65 8b 05 05 01 07 12 48 8b 34 24 65 48 8b 15 e1 00 07 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 51 72 90 09 8b 82 1c 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83 [ 218.763456][ C1] RSP: 0018:ffffc9000323f868 EFLAGS: 00000246 [ 218.769492][ C1] RAX: 0000000000080000 RBX: ffff88807a42bb80 RCX: ffffc90010876000 [ 218.777434][ C1] RDX: 0000000000080000 RSI: ffffffff8a3c50a0 RDI: ffff888054818000 [ 218.785375][ C1] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 218.793316][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807a42c110 [ 218.801264][ C1] R13: ffffc9000323f8e8 R14: ffff88807a42bc68 R15: ffff888056e98640 [ 218.809208][ C1] ? __unix_dgram_recvmsg+0x2b0/0xc30 [ 218.814555][ C1] __unix_dgram_recvmsg+0x2b0/0xc30 [ 218.819726][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 218.825425][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 218.831465][ C1] ? iovec_from_user+0xda/0x140 [ 218.836299][ C1] unix_dgram_recvmsg+0xcd/0x100 [ 218.841206][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 218.846722][ C1] ____sys_recvmsg+0x5eb/0x670 [ 218.851463][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 218.856724][ C1] ? rcu_is_watching+0x12/0xc0 [ 218.861472][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 218.866289][ C1] ? kfree+0x1e5/0x6c0 [ 218.870342][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 218.874987][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 218.880162][ C1] ? check_preemption_disabled+0x8/0xe0 [ 218.885690][ C1] ? __pfx___might_resched+0x10/0x10 [ 218.890945][ C1] do_recvmmsg+0x2f3/0x740 [ 218.895339][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 218.900245][ C1] ? do_vfs_ioctl+0x226/0x13e0 [ 218.904981][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 218.911809][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.917165][ C1] ? kcov_ioctl+0x16a/0x720 [ 218.921637][ C1] ? rcu_is_watching+0x12/0xc0 [ 218.926380][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 218.931378][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 218.936906][ C1] ? kcov_ioctl+0x16a/0x720 [ 218.941379][ C1] ? rcu_is_watching+0x12/0xc0 [ 218.946126][ C1] do_syscall_64+0x115/0x870 [ 218.950693][ C1] ? clear_bhb_loop+0x40/0x90 [ 218.955341][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.961203][ C1] RIP: 0033:0x7f43d639ce59 [ 218.965588][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.985181][ C1] RSP: 002b:00007f43d7305028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 218.993570][ C1] RAX: ffffffffffffffda RBX: 00007f43d6616090 RCX: 00007f43d639ce59 [ 219.001516][ C1] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000005 [ 219.009460][ C1] RBP: 00007f43d6432e6f R08: 0000000000000000 R09: 0000000000000000 [ 219.017413][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 219.025365][ C1] R13: 00007f43d6616128 R14: 00007f43d6616090 R15: 00007ffe37605bd8 [ 219.033325][ C1] [ 219.036330][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.043597][ C1] CPU: 1 UID: 0 PID: 7905 Comm: syz.3.455 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.054335][ C1] Tainted: [L]=SOFTLOCKUP [ 219.058630][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.068665][ C1] Call Trace: [ 219.071929][ C1] [ 219.074748][ C1] dump_stack_lvl+0x100/0x190 [ 219.079409][ C1] vpanic+0x552/0x970 [ 219.083363][ C1] ? __pfx_vpanic+0x10/0x10 [ 219.087835][ C1] ? lock_release+0x24d/0x310 [ 219.092485][ C1] panic+0xd1/0xe0 [ 219.096179][ C1] ? __pfx_panic+0x10/0x10 [ 219.100569][ C1] ? check_panic_on_warn+0x1f/0x90 [ 219.105662][ C1] check_panic_on_warn.cold+0x19/0x34 [ 219.111016][ C1] ? __queue_work+0xd2d/0x12b0 [ 219.115748][ C1] __warn.cold+0x191/0x318 [ 219.120136][ C1] __report_bug+0x30f/0x440 [ 219.124610][ C1] ? __queue_work+0xd2d/0x12b0 [ 219.129355][ C1] ? __pfx___report_bug+0x10/0x10 [ 219.134348][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 219.140139][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 219.145396][ C1] ? __mod_timer+0x409/0xca0 [ 219.149957][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.154754][ C1] report_bug_entry+0xe1/0x290 [ 219.159500][ C1] ? __queue_work+0xd31/0x12b0 [ 219.164235][ C1] handle_bug+0x1cd/0x2a0 [ 219.168536][ C1] exc_invalid_op+0x17/0x50 [ 219.173025][ C1] asm_exc_invalid_op+0x1a/0x20 [ 219.177855][ C1] RIP: 0010:__queue_work+0xd31/0x12b0 [ 219.183195][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 03 95 0e 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 219.202786][ C1] RSP: 0018:ffffc90000a08be0 EFLAGS: 00010046 [ 219.208829][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100fbc794e [ 219.216771][ C1] RDX: ffff88807d921970 RSI: ffffffff8a8a38e0 RDI: ffffffff90dd5b50 [ 219.224714][ C1] RBP: ffff88807de3ca58 R08: 0000000000000005 R09: 0000000000000000 [ 219.232664][ C1] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88807d921800 [ 219.240617][ C1] R13: 0000000000000000 R14: ffffffff81cecbe0 R15: 0000000000000001 [ 219.248577][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 219.254361][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 219.259619][ C1] ? lock_acquire+0x301/0x370 [ 219.264276][ C1] ? lock_release+0x24d/0x310 [ 219.268939][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 219.274717][ C1] call_timer_fn+0x19a/0x610 [ 219.279291][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 219.284385][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.289135][ C1] ? __run_timers+0x560/0xb00 [ 219.293791][ C1] ? lock_release+0x24d/0x310 [ 219.298454][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 219.304243][ C1] __run_timers+0x570/0xb00 [ 219.308729][ C1] ? __pfx___run_timers+0x10/0x10 [ 219.313728][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.318481][ C1] ? clockevents_program_event+0x23e/0x820 [ 219.324279][ C1] ? ktime_get+0x9f/0x320 [ 219.328582][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 219.333629][ C1] run_timer_base+0x114/0x190 [ 219.338289][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 219.343460][ C1] run_timer_softirq+0x1a/0x50 [ 219.348205][ C1] handle_softirqs+0x1ea/0x9b0 [ 219.352952][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 219.358219][ C1] ? _raw_spin_unlock+0x28/0x50 [ 219.363044][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 219.368654][ C1] __irq_exit_rcu+0x162/0x210 [ 219.373304][ C1] irq_exit_rcu+0x9/0x30 [ 219.377526][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 219.383134][ C1] [ 219.386047][ C1] [ 219.388960][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.394918][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x70 [ 219.401054][ C1] Code: f3 0f 1e fa 65 8b 05 05 01 07 12 48 8b 34 24 65 48 8b 15 e1 00 07 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 51 72 90 09 8b 82 1c 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83 [ 219.420644][ C1] RSP: 0018:ffffc9000323f868 EFLAGS: 00000246 [ 219.426693][ C1] RAX: 0000000000080000 RBX: ffff88807a42bb80 RCX: ffffc90010876000 [ 219.434646][ C1] RDX: 0000000000080000 RSI: ffffffff8a3c50a0 RDI: ffff888054818000 [ 219.442590][ C1] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 219.450532][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807a42c110 [ 219.458475][ C1] R13: ffffc9000323f8e8 R14: ffff88807a42bc68 R15: ffff888056e98640 [ 219.466426][ C1] ? __unix_dgram_recvmsg+0x2b0/0xc30 [ 219.471778][ C1] __unix_dgram_recvmsg+0x2b0/0xc30 [ 219.476952][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 219.482643][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 219.488685][ C1] ? iovec_from_user+0xda/0x140 [ 219.493513][ C1] unix_dgram_recvmsg+0xcd/0x100 [ 219.498430][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 219.503958][ C1] ____sys_recvmsg+0x5eb/0x670 [ 219.508708][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 219.513980][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.518737][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 219.523565][ C1] ? kfree+0x1e5/0x6c0 [ 219.527623][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 219.532285][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 219.537456][ C1] ? check_preemption_disabled+0x8/0xe0 [ 219.542976][ C1] ? __pfx___might_resched+0x10/0x10 [ 219.548238][ C1] do_recvmmsg+0x2f3/0x740 [ 219.552628][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 219.557537][ C1] ? do_vfs_ioctl+0x226/0x13e0 [ 219.562289][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 219.569119][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.574477][ C1] ? kcov_ioctl+0x16a/0x720 [ 219.578961][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.583700][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 219.588704][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 219.594238][ C1] ? kcov_ioctl+0x16a/0x720 [ 219.598712][ C1] ? rcu_is_watching+0x12/0xc0 [ 219.603453][ C1] do_syscall_64+0x115/0x870 [ 219.608014][ C1] ? clear_bhb_loop+0x40/0x90 [ 219.612676][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.618551][ C1] RIP: 0033:0x7f43d639ce59 [ 219.622945][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.642527][ C1] RSP: 002b:00007f43d7305028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 219.650929][ C1] RAX: ffffffffffffffda RBX: 00007f43d6616090 RCX: 00007f43d639ce59 [ 219.658902][ C1] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000005 [ 219.666852][ C1] RBP: 00007f43d6432e6f R08: 0000000000000000 R09: 0000000000000000 [ 219.674798][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 219.682746][ C1] R13: 00007f43d6616128 R14: 00007f43d6616090 R15: 00007ffe37605bd8 [ 219.690712][ C1] [ 219.693899][ C1] Kernel Offset: disabled [ 219.698208][ C1] Rebooting in 86400 seconds..