last executing test programs: 17m30.824032612s ago: executing program 0 (id=426): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sync_file_range(r2, 0xc5c4, 0xb3, 0x7) 17m29.710300557s ago: executing program 0 (id=427): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17m29.42388246s ago: executing program 0 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 17m28.266647409s ago: executing program 0 (id=435): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r3, &(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x2400c840) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 17m26.9900055s ago: executing program 0 (id=439): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000001c0)={@my=0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x5, 0x4) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) syz_open_dev$dri(&(0x7f0000000140), 0xffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 17m26.219617516s ago: executing program 0 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x4000, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 17m26.045324281s ago: executing program 32 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x4000, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 16m18.067739238s ago: executing program 3 (id=625): mkdirat(0xffffffffffffffff, 0x0, 0x16b) madvise(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1f) socket(0xa, 0x2, 0x7fff) openat$dlm_monitor(0xffffff9c, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f0000001d40), 0x64200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x2}) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0xf5fda930a2381291) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) 16m15.230476517s ago: executing program 3 (id=637): r0 = socket(0x11, 0x6, 0x9) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2ef8, 0x778d, 0x2, &(0x7f0000000140)={[0x7fff8000000000]}, 0x8) (async) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) (async) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x8000000000000000) (async) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="d0b4163e96457321d877d01ac288fb", 0xf, 0x40000, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x70, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x4, 0xd, 0x54, 0xce, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8000, 0x5, 0x3c3}}) 16m14.155915804s ago: executing program 3 (id=641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x7ffc, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x7f, 0x3cb7, 0x0, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x80000, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdf9cd90, 0x8000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7ffffffd, 0x0, 0x0, 0xffffffffffff2328, 0xffffffffffffffff, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x3ff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x32bf91}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ee222}) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) sendto$inet(r9, 0x0, 0x3f, 0x20000000, 0x0, 0x0) 16m12.373109655s ago: executing program 3 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc8, 0xc}}}, 0x8) 16m10.695247118s ago: executing program 3 (id=650): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600), 0x0, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x8, 0x40, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 16m10.076568939s ago: executing program 3 (id=654): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x24f17000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(0x0, 0x7f, 0x0) read$msr(r0, &(0x7f0000019680)=""/102389, 0x18ff5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x86) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = io_uring_setup(0x4edd, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000), 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0000000000008100000000110000f295b02d0069"], 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) r5 = fsopen(&(0x7f00000000c0)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x2b, "5a342384df86b043a83b442808b5304ec5f87d60f7dbc1d2648b6a02b78ba297783bb8f980a4e02151c4bf"}, &(0x7f0000000300)=0x33) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 15m53.63314911s ago: executing program 33 (id=654): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x24f17000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(0x0, 0x7f, 0x0) read$msr(r0, &(0x7f0000019680)=""/102389, 0x18ff5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x86) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = io_uring_setup(0x4edd, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000), 0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff0000000000008100000000110000f295b02d0069"], 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40186f40, 0x20000502) r5 = fsopen(&(0x7f00000000c0)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0x2b, "5a342384df86b043a83b442808b5304ec5f87d60f7dbc1d2648b6a02b78ba297783bb8f980a4e02151c4bf"}, &(0x7f0000000300)=0x33) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.575885525s ago: executing program 5 (id=3509): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406a05940000000000000109022400010000000009040000010300000009210400000122070009058103000000000884875a61f70772fedfc6c79466a2454b421d3afb4d6b814aab848a4d897843e398c0baa7e1031d0aa5632ee072757b0e6f8d5c9f5705050958ce8c45a78aac71093284b2aa56314614395db8f39cb59cc7689506fb0148daafc499d37b001c6b5c1740d2c37e68c2fc6a47d058938c9ef72959f17bc402eb1657337c02d1e010c5c833b07f852ab65a5d65738b667c0fc88099d44bea94fca293"], 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x20, {0x20, 0xe, "2bfb251128abf2d7e565e32ac6e16f089bfed4feb6f383590cf74d56e1cd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) dup(r0) syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)) ppoll(&(0x7f0000000000)=[{r3, 0x8020}], 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0xa00, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) 8.574099149s ago: executing program 1 (id=3510): bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) 5.670712599s ago: executing program 6 (id=3516): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) fchmodat(0xffffffffffffffff, 0x0, 0x102) 5.462583403s ago: executing program 6 (id=3518): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0/../file0/file0\x00', 0x0) 5.439423692s ago: executing program 1 (id=3519): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.282525759s ago: executing program 5 (id=3520): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40f41, 0x7a8f08989cc21170) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = inotify_init1(0x800) close_range(r5, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0xf) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) sendmsg$nl_route(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7a2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}}, 0x20008040) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4, 0x9, 0x8, 0x7, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x3c, 0x80, 0x0, @in6={0xa, 0x4e22, 0x3, @remote, 0x5}}]}, 0x38}}, 0x40000) 5.105253531s ago: executing program 6 (id=3522): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x2, 0x0) fchdir(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x2004, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2f}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.436784719s ago: executing program 1 (id=3523): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x141141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2040600) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007301490000000000952b"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) accept$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0441c100000000000109022400010000"], 0x0) 4.343953322s ago: executing program 5 (id=3524): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x8, @loopback, 0x80000001}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f00000000c0)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000300000001"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.337101411s ago: executing program 6 (id=3525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 2.773166214s ago: executing program 6 (id=3529): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x6, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) vmsplice(r1, &(0x7f0000000140), 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) socket(0x400000000010, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x800) 2.14505623s ago: executing program 5 (id=3531): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.127019674s ago: executing program 6 (id=3532): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000140)=@framed, 0x0, 0x4, 0x9b, &(0x7f0000000300)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)={0x30, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000002}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="4087a4"], 0x0, 0x0, 0x0, 0x0}) 1.956178089s ago: executing program 4 (id=3533): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) uname(&(0x7f0000000000)=""/174) 1.871900029s ago: executing program 2 (id=3534): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001c00070c00000000000000000a000000", @ANYRES32=r1, @ANYBLOB="80000000140001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.819508838s ago: executing program 2 (id=3535): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() tkill(r0, 0x12) tkill(r0, 0x1) tkill(r2, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) 1.769874889s ago: executing program 4 (id=3536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x8f47, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4479d51f}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 1.683807243s ago: executing program 4 (id=3537): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}, {0x0}], 0x2, 0x14a, 0x0) 1.578075513s ago: executing program 2 (id=3538): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2100, 0x0, 0x0, 0x0, 0x0, 0xc240, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.43628992s ago: executing program 4 (id=3539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1.396457365s ago: executing program 2 (id=3540): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fcntl$getown(r1, 0x9) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 1.296058929s ago: executing program 1 (id=3541): syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x1, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 1.238695471s ago: executing program 1 (id=3542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="04010000100007000000000000000000fe880000000000000000000000000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000011003c000000fe8000000000000000000000000000bb00000000000000000080000000000000000000000000000000000000000000399b56220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000a000000000000000000000014000e"], 0x104}}, 0x0) 1.187397354s ago: executing program 4 (id=3543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) sendfile(r1, r0, 0x0, 0x100000000) 1.071865165s ago: executing program 1 (id=3544): openat$tun(0xffffffffffffff9c, 0x0, 0x460000, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000240)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 1.031963629s ago: executing program 5 (id=3545): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 794.328663ms ago: executing program 5 (id=3546): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000ff01000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004500)=@delchain={0x35cc, 0x65, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x10, 0xffff}, {0xffff, 0x6}, {0x1e, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x350c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff2}}, @TCA_BASIC_ACT={0x3f4, 0x3, [@m_gact={0xac, 0xa, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb5c8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x3, 0x20000000, 0x1, 0x5}}]}, {0x5c, 0x6, "e3e26c8a86e67193df2d1ab80e2db4fc3027850a3e9e12c1d8121764e3469c13ddac0667f005ffa4ceb93146d5f52b34a5d7d6685f5f771e92fbe1dfbd733d6a18675a0c5f8dcd6a796ffff4c3c3d162985514bc7b4632e7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xa8, 0x14, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}]}, {0x74, 0x6, "9610dfce28f896ddf48ff5b811b54c3dd58c4a2dd5e3437b278092017a58d971cb0ed3d7f12ebd292e0d15b1e873f7c9dbca58fb56e5fe0fe6577dcc473ddb8e45aa4ca9497ca2a6dc25c82b30d19b96067ba3c9295381eb4aeb19a893996e9a3aeb72b536c60a0e040a78a04a3371af"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xec, 0x12, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3ff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0xa6, 0x6, "42133223f4692dc1cdafe3d24b8923b80fdcff3c573899ab3e84bdecbebb961bf1538a0182cb4da300d5bebaa12b0e75b322a620641923b0467c594fa9cb8e926c83489dd8475cfffd699523c8f1520122aa5e2cac4827c394f219d482ab1057b9b3ef4ae128b8ae139b74a560f4bfbf383348f77de9cf8900493de4a30ac84fe0178c1bd4888f97e3da86adc2370c838f5efe79e57559fb0b899a2494a5f0d632d6"}, {0xc, 0x7, {0x1, 0xea7dcf63669cec0a}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x94, 0x1e, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}]}, {0x60, 0x6, "5fc1c744ad65ca187e2b11e5e3e2b41c29d4b5a2d1c8608cd443a88c5fc18510dd1a303e98f14ba2a37e3f76a086f4bcd215e0e125f3fb078091a5144cf6b0f7908ba915dca30b1169e08033b0f2919692ff7b50caa8947eac2c6074"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x50, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xff, 0x101, 0x20000007, 0x400, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xcc, 0xd, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x98, 0x6, "125e538496877ac1020088fef276cecad23ad478c7abcf962654ff6854efe47b76d317f4fd3bb5fddcf766974378bab16233368b93b303410f95e41e4013acc7485122c1572050d84918bdae4bd9dd7474c709cfec5d1712b86822d336be75f868918ca2dceaf33fd1d204037b849b68839249298ca0da0bfb65421f6e2fa96c35915a4aedf4a292c77ab3df21558b6c02898020"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x324, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x5}, {0x2, 0x3, 0x6, 0x0, 0xf, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0xa26}, {0x0, 0xd7f, 0x501, 0x2, 0x4, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0x94, 0x1, 0x0, 0x0, {{0x3ff, 0x0, 0x6}, "d9806ac556888b9378f0d26cb55847d69820bd665663238760a914fdb3900ca6651b9a7b2e4d563d3ca0776c09acd028de3515336c82d9a64ce2af7c25ddc4809b8698525518d16711cf6ec24dea6b5ad4eb920641cdb888ad8661562a361f37248a6269d962f2f659efe90bfcd0028868e1349869028a06385c79daae4f357fc5fc3ad137ba"}}]}, @TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x200, 0x7, 0x23b}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x3}, {0x4, 0x1, 0x2, 'd'}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x9d}, {0x8, 0x5, 0x1, "1a7f0d4aff"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xe, 0x2, 0x8}, {0x5, 0x3, 0x0, "6a2298"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x8, 0xbd}, {0x4, 0x3, 0x1}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x7f, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="2611f31fb6018c", @TCF_META_TYPE_VAR="6750a2ac9e", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPT={0xe0, 0x1, 0x0, 0x0, {{0x81, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xc6, 0x5, "718e050367dd8132b7d3f2d27564f29ed34e80e3e4d29bb937422cee9ac50e192f8444c14e1d40a599eeb6b872f731ee11713a0f9c37ef19bf4eda6e17c12a20c074d66296c87dc48b7e33cd2215a4b78051cc0ebecd29e7184eb25c470ba9b3a7da93a35f0722234a8ba10f5c85999d32e967a66f1a3a190d9159855733648cc4c660efac71ba19874848161c66322f067657c54b9599601ff25ced448f36d05d055f3a192e47b76d3029180f980311fa094df3e7d71d4d09d4f7f7f430c8049439"}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2b, 0x7, 0x5f9}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xff, 0x9, 0x9}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xdd, 0x2, 0x9}, {0x10, 0x3, 0x0, "9c9373"}}}]}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x10, 0x1}, {0x3, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x4}, {0x1000, 0x1, 0xfff8, 0x1, 0x9}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x2}, {0xffffffffffffffff, 0x16, 0x5}}}, @TCF_EM_META={0x30, 0x3, 0x0, 0x0, {{0x1d, 0x4, 0xc83}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x8, 0x2}, {0xff, 0x1, 0x216d942939028638}}}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="b6a3", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2e}, {0x8001, 0x9, 0x1}}}]}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_POLICE={0xc18, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8218, 0x5, 0x5, 0x1000, 0x1, 0xfffffff7, 0x7, 0x6, 0x1, 0x0, 0x0, 0x585, 0x5, 0xa2c, 0x1, 0x80000001, 0x0, 0x7, 0xffff3c86, 0x5, 0x8, 0x6, 0x5, 0x9c, 0x0, 0x7, 0xffff, 0x4, 0x1000, 0x1, 0x4, 0x10001, 0xe6, 0x9, 0x8, 0x2, 0x88b9, 0x30000, 0x7ff, 0x1, 0x9, 0x2, 0x1, 0x2000000, 0x9, 0x25d00000, 0x200, 0x6, 0x80000001, 0x2, 0xf, 0x7, 0x2, 0x2, 0x9, 0xfffffffb, 0xfffff001, 0x904e, 0x4, 0x2, 0x4, 0x1, 0x133, 0x5, 0x7, 0x1000, 0x0, 0x9, 0xe, 0xd, 0xe, 0x5, 0x6, 0x9349, 0x4dcd, 0x7fff, 0x0, 0x0, 0x3, 0x1ff, 0x0, 0x8, 0x240, 0x0, 0x3, 0x2, 0x7fff, 0x9, 0xd, 0x6, 0x1, 0x7, 0x7, 0x777f, 0x2, 0x4, 0x9, 0x6, 0x10000, 0x852, 0x5, 0x9, 0x345, 0x200, 0x4, 0x8, 0x4, 0x8, 0x5, 0x3d, 0xf, 0x10000, 0x1000, 0x3, 0x4, 0x884, 0xd4, 0x40, 0xd, 0x3, 0xd, 0x800, 0xe1, 0x9de, 0x4, 0x2, 0x0, 0x9, 0x9, 0x1000, 0x8, 0x7, 0x8, 0x8001, 0x910e, 0x8, 0xffff, 0x7, 0xa, 0xfff, 0x3, 0xf4b, 0x3, 0x2, 0x3, 0x200, 0x3, 0x9, 0x686, 0x9, 0x10000, 0x6, 0x8, 0x6, 0x1, 0x9, 0x9, 0x2, 0x7ff, 0x6, 0x1, 0x1ff, 0xffff, 0xfed, 0x3, 0x4, 0x6, 0xfffffffa, 0x9, 0x2, 0x5, 0x3, 0x100, 0x40, 0x8, 0xa250, 0x2, 0x4, 0x7f, 0x400, 0xee3, 0xd, 0xd78, 0xffff8000, 0x80000001, 0x10, 0xff, 0x10, 0x0, 0x81, 0x7, 0xf144, 0x6, 0x7, 0x70, 0x0, 0x1, 0x5, 0x3, 0xff, 0x1, 0x9, 0x6, 0x0, 0x7fffffff, 0x7, 0x0, 0x1, 0x9, 0x8001, 0xfffffffd, 0x80000000, 0x6, 0xfffffffc, 0x100, 0x2, 0x6, 0xfffffe66, 0xb, 0xffffffff, 0x9, 0x1, 0x1, 0x1, 0x101, 0x0, 0x800, 0xeeb, 0x7, 0x3, 0x5, 0x5, 0x3, 0x8, 0x9, 0x4, 0x40000, 0x0, 0x0, 0xf, 0x7, 0x0, 0x2, 0xfff, 0x8, 0xb243, 0xcf, 0x200, 0x10000, 0x1ff, 0x7, 0x9, 0x0, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x494, 0xffffc4c2, 0x6, 0x3, 0xe, 0xe, 0x3, 0x3, 0x710, 0x7, 0x6, 0x100000, 0x0, 0x3, 0x3ff, 0xfffffff8, 0x0, 0x1, 0x5, 0x9, 0x1, 0xacb5, 0xeb, 0x9, 0x4, 0x1000, 0x9, 0x6f1d, 0xff, 0x2, 0x8, 0x0, 0x0, 0x9, 0x80, 0x7ff, 0x3ff, 0x7fff, 0x1, 0x1000, 0x9, 0x4, 0x401, 0xe, 0xf3, 0x4074, 0xf99, 0x6, 0x80, 0x9, 0x1, 0x9, 0xbdf, 0xf96b, 0x2, 0x401, 0xb, 0x1, 0x5, 0xfb65, 0x5, 0x7, 0x148, 0x6, 0xbde, 0xc, 0x7fffffff, 0xcc2, 0x4d, 0xffffffff, 0x8, 0x7fffffff, 0xa0cc, 0x7fffffff, 0x2, 0x8, 0x319, 0x2, 0xf, 0x0, 0x8, 0x6, 0x3, 0xbe, 0x1000, 0x8, 0x0, 0x9, 0xffffffff, 0x9, 0x2, 0xe, 0x7f, 0xff, 0xcb, 0x30e4, 0x101, 0x7fff, 0x8, 0x2, 0x5, 0xfffffffe, 0xfffffffd, 0x9, 0x7ff, 0x7fff, 0x9, 0x1, 0x4, 0x3702, 0x8, 0xacf, 0x3b7ee7e4, 0x5, 0x0, 0x4, 0xffff7fff, 0xef3, 0x0, 0x400, 0x5, 0x8, 0x7, 0x1ff, 0x5, 0x0, 0x10000, 0x4, 0x100, 0xb, 0x4, 0x4, 0x3, 0x7fff, 0xd1672020, 0x4, 0x1ff, 0x4, 0x0, 0xffffffff, 0x1ff, 0xd, 0x3, 0x7, 0xd32b7d78, 0xd, 0x3ff, 0x4, 0x401, 0xfffffff7, 0x9, 0xfffeffff, 0xe, 0x19bba657, 0xa, 0x2, 0xfffffff5, 0x81, 0xfffffff3, 0x6, 0x5, 0xc7, 0xffff, 0x200, 0x5, 0x3, 0x9, 0xffff, 0x8b1a, 0x4, 0x7, 0x10, 0x559b, 0x5, 0x468, 0x8, 0xa, 0x6, 0x8, 0x2, 0x2, 0x3, 0x2d88, 0x6, 0x2, 0x7, 0x4, 0x9, 0xfffffffb, 0x6, 0x7, 0x5, 0x4, 0x1ed, 0x0, 0x7fff, 0x800, 0x401, 0x7, 0xef28, 0x7, 0x0, 0x80, 0x4, 0x3, 0x0, 0xe, 0x6, 0x8, 0x0, 0xdf4, 0x3, 0xfffff3bb, 0xee, 0x7, 0x6, 0x5, 0x2, 0x8, 0x1000, 0x2, 0x0, 0xe9, 0x0, 0x0, 0x4, 0xfffffffc, 0xef4, 0x4ea9ef3b, 0xffff, 0x3, 0x2, 0x0, 0x6, 0x200, 0x3ff, 0xc8de, 0xcf, 0x1, 0x2, 0x80000000, 0x2, 0x0, 0x53, 0x0, 0x1, 0x10001, 0xdb, 0x5954, 0x5, 0xa00, 0xb5, 0x5, 0x80000000, 0xffff8000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x7, 0x13c9, 0x10, 0x200, 0xfffffff7, 0xfffeffff, 0x7, 0x3ff, 0x6, 0x3ff, 0x4f0, 0x7, 0x6c, 0x8, 0x6000, 0x2, 0x3, 0x1, 0x0, 0x3, 0x1ff, 0x800000, 0x3, 0x3, 0x1, 0x8, 0x1, 0x8001, 0x72c, 0xfffffff9, 0x400, 0x6, 0xf, 0xfffeffff, 0x58e4, 0x4, 0xc38, 0x5, 0xe0000, 0xe, 0x4, 0x7, 0x6, 0x1c, 0x4, 0x4, 0x7, 0x3, 0x6, 0x9, 0x4, 0x7, 0x7, 0x946, 0x6, 0x6, 0x1, 0x7f, 0x1143eaca, 0x2, 0x724, 0x1, 0x18e8000, 0x3, 0xb, 0x38, 0x6, 0x2, 0x6, 0xe0000000, 0x2, 0xeef8, 0xc, 0x2, 0x3000716f, 0xfffffff9, 0x9, 0x12c, 0x10, 0xfffffff8, 0x0, 0x8, 0x10, 0xfffffffa, 0x9, 0x73a, 0xeec7, 0x2, 0x4, 0x8, 0x8, 0x0, 0x8, 0x6, 0x2, 0x89c, 0x0, 0x9, 0xd, 0x4, 0x5, 0x5d5d, 0x10001, 0x80000001, 0x8, 0x6, 0x6, 0x1ff, 0xffffffff, 0x1, 0xfffffffb, 0x3, 0xb913, 0xfffffff8, 0xc, 0x1, 0x8, 0x2, 0x5, 0xe05c, 0x6, 0x6, 0xe, 0x9, 0xffffffff, 0x2, 0x0, 0x1, 0x8001, 0x762, 0x0, 0x295, 0x42fbcc7c, 0xe, 0x4, 0x10001, 0x8, 0x7fffffff, 0x8, 0xcff, 0x6, 0xe930, 0x0, 0x8, 0x5, 0x2, 0x0, 0x1, 0xfffffff5, 0xffff0000, 0x3, 0x5, 0xa, 0x9, 0x8001, 0x1, 0xe, 0xac7e, 0x36ac, 0x8, 0x6, 0x5, 0x4, 0x4, 0x8, 0xd360, 0x6, 0x7, 0x7, 0x10000, 0x2, 0x81, 0xb930, 0x3, 0x3ff, 0x9, 0xfffffffd, 0x4, 0x7ff, 0x4, 0xae, 0xffffffff, 0x4, 0x9, 0x800, 0x3, 0x536a, 0x7, 0x88bb, 0xfffffff8, 0x6, 0x99f1, 0x40, 0x10001, 0xac0f, 0xc4, 0x9, 0xa6, 0x1, 0xffff, 0x0, 0xfffffffe, 0x7, 0x0, 0xc8d, 0x3, 0x1, 0x80000001, 0xfff, 0x101, 0x0, 0x4, 0x2, 0x5d, 0x9, 0x0, 0x5, 0x24c, 0xffff, 0x0, 0x3, 0x1, 0x5d45f668, 0x0, 0x5, 0x2, 0x2, 0x1, 0x3, 0x2, 0x9, 0x7, 0x6, 0x4, 0x5, 0x1e, 0x0, 0xffff8001, 0x4, 0x2, 0x8a, 0x0, 0x4, 0x8, 0x2, 0xc3ae, 0x0, 0x4, 0x8540000, 0x6, 0xcd3, 0xb71, 0x3, 0x5]}]}, @TCA_BASIC_ACT={0x10f8, 0x3, [@m_nat={0x10f4, 0xe, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x5, 0x4, 0x7, 0x2}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff, 0x9, 0x7, 0x76f, 0x3}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2, 0x10000000, 0xedd, 0xf33}, @private=0xa010102, @loopback, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7fff, 0x10000001, 0x80000000, 0x9}, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff35, 0xfffffe01, 0x6, 0x1, 0x3}, @broadcast, @multicast2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_BASIC_POLICE={0x824, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0xbd9, 0x2, 0x7, 0x0, 0x2, 0x18, 0x46d, 0xbb, 0x0, 0x1000, 0x4800000, 0x6, 0x4, 0x1, 0x9, 0x5, 0x4, 0xfff, 0x8, 0x5, 0x0, 0x6, 0x6, 0x1454, 0x9, 0x1, 0x200, 0x7, 0x0, 0xd49, 0x6, 0xfffffc5c, 0x800, 0x4, 0x2021, 0x3, 0x5, 0x1aec, 0x2, 0x6dc, 0xa, 0x7, 0xce, 0xfffffffc, 0x1, 0x0, 0xffffd8c9, 0x1, 0x0, 0x4, 0x8, 0x800, 0x4, 0x2285, 0x800, 0xffffff4c, 0x8, 0x6, 0x3, 0x9, 0x2, 0x0, 0x25d5, 0x1, 0x58b7, 0x0, 0x3, 0x9, 0x2, 0x6, 0x9, 0x1, 0x6, 0x101, 0x0, 0x8001, 0x9, 0x800, 0x2, 0x6, 0x1ff, 0x5, 0x2, 0x8, 0x7, 0xfffffff8, 0x9267, 0x5dc, 0x2, 0x2, 0x6, 0x5d, 0x8, 0x9, 0x7, 0x10, 0x880, 0x180, 0xbf7, 0x3ff, 0x7, 0x7, 0x7, 0x131297f5, 0x40, 0x4, 0x399d, 0x4, 0x0, 0x6, 0x10000, 0x2, 0x8, 0xfa, 0x2, 0x7f, 0x4, 0x6, 0x5, 0x9, 0x4, 0x9, 0x401, 0x6, 0x40000000, 0x1, 0x3, 0xf, 0x2, 0x67, 0xfffffffb, 0x1, 0xe, 0x7fff, 0x59a0, 0x9, 0x9, 0x3, 0xdf, 0x1, 0xfffffffe, 0x7fffffff, 0x0, 0xf5, 0x10, 0x0, 0x2, 0x60, 0xdff4, 0x0, 0x2000007, 0x6, 0x349, 0x1, 0x2, 0x7, 0x5, 0xfe00, 0x1ff, 0x3, 0x8001, 0x3, 0x10, 0x8, 0x3, 0x200, 0x8001, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7fffffff, 0x9, 0x7f, 0xfffffffb, 0x34, 0x1, 0x5a15, 0x50000000, 0x458, 0x9, 0x1, 0x400, 0x0, 0x6, 0x80000001, 0x6, 0x1, 0x5, 0x1000, 0x6, 0x81, 0x9, 0x5af, 0x5, 0x3, 0x8c0, 0x3, 0x6, 0x1000, 0x5afeb6d6, 0x0, 0x8, 0xff, 0x0, 0xfffffffc, 0x7, 0xbaca, 0x3, 0x400, 0x2, 0x4, 0x4, 0xb, 0x4, 0x3, 0x0, 0x9, 0x2, 0x1, 0x6, 0x4, 0x1, 0x2, 0x80000000, 0x1, 0x4, 0x2, 0x6e3, 0x6, 0x1, 0x9, 0x2, 0x354, 0x2, 0x80000000, 0x8, 0xffff, 0x2, 0xffff, 0x2, 0x1ff, 0x9, 0x6, 0x9, 0x0, 0x8, 0x2, 0x7, 0x10000, 0x156, 0x10, 0x800, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xa8, 0x1, 0x8, 0xf90, 0x200, 0x2, 0x2, 0x6, 0x80, 0x7, 0xb44, 0x3, 0x6, 0x5, 0x8, 0x0, 0x4f7c, 0xff, 0xd4b6, 0xa4, 0x7, 0x7, 0xc, 0x3, 0x2, 0xf8f, 0x1, 0x6157, 0xd, 0x2, 0x1, 0xa, 0x55751806, 0x7ff, 0xa1, 0x100, 0x4, 0x4, 0x9, 0x6, 0x7b2, 0x1, 0x9, 0x6f, 0xe7bb, 0xb030, 0x6, 0xf, 0xaad0, 0x4, 0x1, 0xffffff5f, 0x5, 0x35d2d55b, 0x6, 0x8, 0x260312c2, 0x7ee, 0x80000001, 0x5, 0x7ff, 0x5, 0x9, 0x9, 0x9, 0x5, 0x1, 0x8, 0x0, 0x800, 0x120, 0x8, 0x80, 0x2, 0x5, 0x9, 0xb, 0x0, 0x80000000, 0x1, 0x8, 0x163, 0x5, 0x4, 0x5, 0x3, 0x659, 0x9, 0xfffffff8, 0x2, 0x80000000, 0xfffffff7, 0x1ff, 0x401, 0x1, 0x2, 0x0, 0x9, 0x40, 0x8, 0x163e, 0x6, 0x2, 0x6, 0x7, 0xff, 0xfff, 0x6, 0x1, 0x1, 0x2, 0x6e, 0x3, 0xc439, 0x2, 0x8, 0x2, 0x80000, 0x1, 0x20000, 0x7, 0x1, 0x8, 0x16b210c9, 0x0, 0xda, 0x40, 0x6, 0x4, 0x5, 0x2, 0x3, 0x1, 0x5be2, 0x8, 0x3ff, 0x4, 0x0, 0x4, 0x8, 0x4268, 0xf6, 0x6, 0x216d, 0x936, 0x1a40, 0x47ab, 0xfff, 0x40, 0x1000, 0xd97b, 0x2, 0x7, 0xe, 0x117a, 0x343f, 0x0, 0xa, 0xd95d, 0x2, 0x80000001, 0x80, 0xaf, 0x4, 0x4, 0x9, 0x2, 0xad8, 0x3, 0x7bb, 0x3, 0x3, 0x4, 0x7f, 0x1, 0x5, 0x3, 0x9, 0x4, 0x0, 0xb7f, 0x4c, 0x4, 0x6, 0x10001, 0x980, 0x8a6, 0xcc1, 0xd830, 0xa3, 0x9, 0x2, 0x6, 0x897, 0x8000, 0x81, 0x7, 0x400, 0x1, 0x7fff, 0x1, 0x342c, 0x7d, 0x75c2, 0x80, 0x0, 0xea, 0x8001, 0x46, 0xd, 0x40000000, 0x75f, 0x2, 0xc99, 0x2, 0x4, 0x5, 0x8, 0x7, 0x0, 0xfffff79e, 0x2, 0x2, 0x4, 0xdb, 0x5, 0x2, 0x5, 0x4, 0x3, 0x7a, 0x91, 0x5, 0x10, 0x4, 0x9, 0x8, 0xc4, 0x7, 0x26d, 0x7fff, 0x8001, 0x400, 0x80, 0x9, 0x4, 0x4, 0x9, 0x3, 0x101, 0x0, 0x2, 0x6, 0x8, 0x8000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffff80}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_BASIC_POLICE={0x888, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x998}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x100, 0x5e1, 0xfffffc00, 0x80000000, 0xcb, 0x9ea1, 0x5, 0x5, 0x401, 0x8001, 0x1, 0xfffffffc, 0x5, 0x1, 0x0, 0x7fffffff, 0x5, 0x3ff, 0x8, 0x800, 0x200, 0x6, 0x1, 0x5, 0x40, 0xfffffffd, 0xfffff8c1, 0x8, 0x10000, 0x2, 0x5, 0x0, 0x9, 0x9, 0xc, 0x6f, 0xa8, 0x6, 0x2, 0x10000, 0xf, 0x1, 0xfffffffe, 0x200, 0x3ff, 0xfec, 0x7fff, 0x0, 0x5, 0xfffff000, 0x7, 0x8, 0xfffffff4, 0x100, 0xffffff82, 0x2, 0x8, 0xffffffff, 0xc3e, 0x9, 0x2, 0x3, 0x7, 0x2, 0xff, 0x81, 0x100, 0x6, 0x8, 0x5, 0x1, 0x3, 0x8b, 0x6, 0x4, 0xfff, 0x3, 0x62975d6c, 0x289f, 0xb9, 0x7, 0x41, 0x3, 0x2, 0x0, 0x40, 0x5, 0x2, 0x8, 0x1, 0x0, 0xffff, 0x9, 0x6, 0x80000001, 0x2, 0x1, 0x7, 0x10001, 0x7fffffff, 0x1, 0xfffffffd, 0x80000001, 0x4, 0xfffffff7, 0x1000, 0x5f1, 0x4, 0x8, 0x800, 0x80000000, 0x80000000, 0x0, 0x5, 0x1, 0xd065, 0x0, 0x7, 0x7, 0xfffffff9, 0x3, 0x5, 0x3, 0x81, 0x8, 0x80000000, 0x8, 0x6, 0x80000000, 0x0, 0xffff, 0x6, 0x2, 0xfff, 0x8, 0xd0b8, 0x3, 0x80000001, 0x3, 0x4a5, 0x32, 0xfff, 0x4, 0x0, 0x7, 0x2, 0x1451, 0x4, 0x8, 0x4, 0x0, 0xe, 0x7, 0x7fffffff, 0xbe9, 0xa, 0x9, 0x6, 0x3, 0x7, 0x1f, 0xd9, 0x1ff, 0x6, 0xc5e, 0xffffffff, 0x401, 0x2, 0x59af62b8, 0xe447, 0x6, 0x3, 0xffff, 0x34, 0x1, 0xd6, 0x0, 0x0, 0x9, 0x6, 0x7, 0x4d, 0xf8000000, 0x3, 0x1, 0x4, 0x2, 0x2b, 0x80000000, 0x8, 0x9, 0x7, 0x2, 0x81, 0x1, 0x7, 0x4, 0x40, 0xdf, 0x9, 0x0, 0x6, 0x0, 0x5, 0x5, 0x7f, 0xd, 0x1, 0x8000, 0x10, 0x101, 0x8, 0x4, 0x9, 0x5, 0x5902, 0x1, 0x9, 0x4c00231e, 0xc, 0x5, 0xf, 0x6, 0x4, 0x6, 0x966b, 0x3, 0x9, 0x7fffffff, 0x2, 0x1, 0x75c, 0x4, 0x8, 0x4, 0x9, 0x0, 0xc5, 0x22, 0xa, 0x0, 0x1, 0x44, 0x2, 0x2, 0x4, 0x5, 0x80, 0x9, 0x6, 0x4004, 0x7, 0x6, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x0, 0x2, 0x7770, 0x0, {0x0, 0x0, 0xd, 0x9, 0x3, 0xfc}, {0x17, 0x1, 0x3, 0x7ff, 0x3, 0xa43}, 0x5, 0x1, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x47}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xd, 0x7ff, 0x8, 0xbf9, 0x0, 0x0, 0x140d, 0x1, 0x2, 0x0, 0x80, 0x4, 0x2, 0xffffff39, 0xfffffff7, 0x9, 0x4, 0x3, 0xea6, 0x1, 0x5, 0xdaf4, 0x464b14c4, 0x3, 0x1, 0xd3, 0x80000001, 0x4, 0x1, 0x5, 0x1, 0xfffffbff, 0x5, 0x2, 0x10001, 0x132, 0x7, 0xf, 0x3, 0x200, 0x3, 0x7, 0x1, 0x7, 0xa78, 0x4, 0x5, 0xfffffc00, 0x3, 0x3, 0x10, 0x1000, 0xbb0b, 0xe, 0xc, 0xf7b, 0xfff, 0x9, 0x80000000, 0x0, 0x7fff, 0x9, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x10001, 0x19392f08, 0xfffffff9, 0x5, 0x1, 0x4, 0x200, 0x6, 0x87, 0x80000000, 0x80000000, 0x3, 0x7, 0x6, 0x0, 0x0, 0x8, 0x70, 0x1, 0x90, 0x1ff, 0x8, 0x9, 0x0, 0x9, 0x9, 0x5, 0x27, 0x7, 0x8, 0x8, 0x7, 0x8, 0x1, 0x800, 0xffff, 0xf6, 0x6, 0x7ff, 0x34, 0x0, 0xa5, 0x100, 0x8bdb, 0xfffffffd, 0x5, 0x1, 0x55f, 0xdc3a, 0xffffff81, 0x8, 0x4, 0x8e9, 0x6dee, 0x5, 0x1, 0x6, 0x9, 0x40, 0x9, 0x6, 0x58c1, 0x200, 0x0, 0x2, 0x8, 0x80, 0x5, 0xf878, 0x8f, 0x3, 0x6, 0x2, 0x10, 0x9, 0x2, 0x1ff, 0x200, 0x8, 0x3, 0xd, 0x0, 0x9, 0x0, 0x0, 0x7, 0x200, 0xc64, 0x0, 0x0, 0x3, 0x2, 0xa150, 0x6, 0x9, 0x1, 0x8, 0x3ff, 0xd, 0x2a, 0x5a6, 0xfffffff8, 0x8615, 0xd, 0x0, 0x1, 0x80000000, 0x266, 0x9, 0x0, 0xd4, 0x2, 0x401, 0x8, 0x7, 0x7, 0x7, 0x80c4, 0x8, 0x7ff, 0x8, 0x4, 0x7686, 0x9, 0x8, 0xfffffff8, 0x4, 0x8, 0x100, 0x7, 0x10, 0x2, 0x9e2, 0x8, 0x401, 0x7, 0x9, 0x4, 0x2, 0x33, 0xfffffffc, 0x0, 0x2, 0x7, 0x1d8, 0x2, 0xcf7, 0xfffffffa, 0xc, 0x26ec847c, 0x7e, 0x1, 0x4, 0x0, 0x0, 0x8, 0x3, 0x1a77, 0x9, 0xbd90, 0x5, 0x2, 0x2616, 0x9, 0x200, 0x101, 0x1, 0x1, 0x8, 0x800, 0x3, 0xa, 0xfcaa, 0x3, 0xb3, 0x4, 0x1, 0x8, 0x8001, 0x9, 0x60000000, 0x465, 0x1, 0x9, 0x8, 0x6, 0x8bb7, 0x7fffffff]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xb}}, @TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff1, 0x3}}]}}, @filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffff00, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x3}]}}]}, 0x35cc}}, 0x0) setitimer(0x0, &(0x7f0000000080)={{r0, r1/1000+60000}}, &(0x7f0000000100)) mmap(&(0x7f000074e000/0x3000)=nil, 0x3000, 0x0, 0x810, r2, 0x5757000) 315.940042ms ago: executing program 2 (id=3547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 580.202µs ago: executing program 4 (id=3548): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 0s ago: executing program 2 (id=3549): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x6, 0xfffff034}, {0x6}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) sendto$inet(r1, 0x0, 0x0, 0xdfedac7253303320, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) kernel console output (not intermixed with test programs): Mfr=0, Product=0, SerialNumber=0 [ 1091.164916][T17629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.172653][T11925] usb 2-1: Product: syz [ 1091.188933][T11925] usb 2-1: Manufacturer: syz [ 1091.193557][T11925] usb 2-1: SerialNumber: syz [ 1091.206344][T11925] usb 2-1: config 0 descriptor?? [ 1091.212542][ T5863] usb 7-1: config 0 descriptor?? [ 1091.218918][ T5863] hub 7-1:0.0: bad descriptor, ignoring hub [ 1091.225059][ T5863] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1091.233625][ T5863] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1091.243084][T11925] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1091.293132][T17629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.300847][T17629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.327496][T17629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.410725][T17629] hsr_slave_0: entered promiscuous mode [ 1091.426596][T17629] hsr_slave_1: entered promiscuous mode [ 1091.452681][T17629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1091.473845][T17629] Cannot create hsr debugfs directory [ 1091.562770][ T1200] usb 2-1: USB disconnect, device number 70 [ 1091.623528][ T6536] hsr_slave_0: left promiscuous mode [ 1091.648640][ T6536] hsr_slave_1: left promiscuous mode [ 1091.654757][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1091.697119][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.267631][ T6536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1092.275140][ T6536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.307611][ T6536] veth1_macvtap: left promiscuous mode [ 1092.314042][ T6536] veth0_macvtap: left promiscuous mode [ 1092.319689][ T6536] veth1_vlan: left promiscuous mode [ 1092.325271][ T6536] veth0_vlan: left promiscuous mode [ 1093.048676][T17718] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1093.203739][T11223] Bluetooth: hci5: command tx timeout [ 1093.511348][T17722] input: syz1 as /devices/virtual/input/input155 [ 1093.625403][ T29] audit: type=1400 audit(1735104028.405:1345): avc: denied { ioctl } for pid=17723 comm="syz.2.3075" path="socket:[58489]" dev="sockfs" ino=58489 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1093.653392][ T29] audit: type=1400 audit(1735104028.405:1346): avc: denied { connect } for pid=17723 comm="syz.2.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1093.701165][ T29] audit: type=1400 audit(1735104028.405:1347): avc: denied { write } for pid=17723 comm="syz.2.3075" laddr=172.20.20.10 lport=9 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1093.872582][T11925] usb 7-1: USB disconnect, device number 90 [ 1094.127121][ T6536] team0 (unregistering): Port device team_slave_1 removed [ 1094.197345][ T6536] team0 (unregistering): Port device team_slave_0 removed [ 1095.454528][T11925] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1095.627695][T11925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1095.756730][T11925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.401494][T11925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1096.413965][ T29] audit: type=1400 audit(1735104031.014:1348): avc: denied { setattr } for pid=17734 comm="syz.5.3079" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1096.437065][T11925] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1096.450935][T11925] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1096.461084][ T29] audit: type=1400 audit(1735104031.024:1349): avc: denied { write } for pid=17734 comm="syz.5.3079" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1096.461085][T11925] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1096.461125][ T29] audit: type=1400 audit(1735104031.024:1350): avc: denied { open } for pid=17734 comm="syz.5.3079" path="/530/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1096.482236][T11925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.482301][T11925] usb 3-1: Product: syz [ 1096.575222][T11925] usb 3-1: Manufacturer: syz [ 1096.580033][T11925] usb 3-1: SerialNumber: syz [ 1096.582401][T17735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1096.619409][T17735] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1096.857600][T17733] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 1096.906592][ T6536] IPVS: stop unused estimator thread 0... [ 1096.960423][ T29] audit: type=1326 audit(1735104031.529:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17749 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1096.960832][T17629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1096.992715][T11925] smsusb:smsusb_probe: board id=8, interface number 0 [ 1096.999680][T11925] smsusb:smsusb_probe: Device initialized with return code -19 [ 1097.053089][ T5941] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1097.057423][T17629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1097.064662][ T29] audit: type=1326 audit(1735104031.529:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17749 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1097.092189][ T29] audit: type=1326 audit(1735104031.529:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17749 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1097.133225][ T29] audit: type=1326 audit(1735104031.529:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17749 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1097.164930][ T29] audit: type=1326 audit(1735104031.529:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17749 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1097.188618][ T29] audit: type=1326 audit(1735104031.529:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17749 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1097.214266][ T29] audit: type=1326 audit(1735104031.529:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17749 comm="syz.6.3082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1097.218649][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 1097.250680][T17629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1097.250710][T11925] usb 3-1: USB disconnect, device number 77 [ 1097.283704][T17629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1097.342399][ T5941] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b7.70 [ 1097.351878][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.382256][ T5941] usb 2-1: Product: syz [ 1097.386490][ T5941] usb 2-1: Manufacturer: syz [ 1097.414280][ T5941] usb 2-1: SerialNumber: syz [ 1097.635246][ T5941] usb 2-1: config 0 descriptor?? [ 1097.670107][T17757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1097.787056][ T5941] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1097.797375][T17629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.929225][T17629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.610100][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.617276][ T9180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.637630][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.644802][ T9180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.682735][ T51] usb 2-1: USB disconnect, device number 71 [ 1099.067309][T17777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1099.329229][T17629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.910417][T17629] veth0_vlan: entered promiscuous mode [ 1100.690487][T17629] veth1_vlan: entered promiscuous mode [ 1100.730636][T17629] veth0_macvtap: entered promiscuous mode [ 1100.771148][T17629] veth1_macvtap: entered promiscuous mode [ 1100.843779][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.255939][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.268944][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.310610][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.357711][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.501024][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.562655][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.616829][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.631931][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.644451][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.659666][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.681318][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.720319][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.775284][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.829522][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1101.883361][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.927279][T17629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.968068][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1101.982645][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1101.992711][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.010412][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.021775][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.039122][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.055692][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.236726][T17822] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1102.637099][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.647450][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.658666][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.695352][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.705936][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.715975][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.727266][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.737227][T17629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.747870][T17629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.758837][T17629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.769901][T17629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.778876][T17629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.787785][T17629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.796669][T17629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.364389][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 1103.364434][ T29] audit: type=1400 audit(1735104037.515:1454): avc: denied { bind } for pid=17831 comm="syz.6.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1103.695538][ T29] audit: type=1400 audit(1735104037.824:1455): avc: denied { setopt } for pid=17831 comm="syz.6.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1104.048984][T16706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.056923][T16706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.116198][ T29] audit: type=1400 audit(1735104038.226:1456): avc: denied { read } for pid=17831 comm="syz.6.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1104.151045][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.164427][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.243400][ T29] audit: type=1400 audit(1735104038.226:1457): avc: denied { create } for pid=17831 comm="syz.6.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1104.393566][T17851] netlink: 'syz.6.3104': attribute type 10 has an invalid length. [ 1104.401445][T17851] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3104'. [ 1104.450009][T11223] Bluetooth: min 0 < 6 [ 1104.475090][T17851] team0: entered promiscuous mode [ 1104.533001][T17851] team_slave_0: entered promiscuous mode [ 1104.576476][T17851] team_slave_1: entered promiscuous mode [ 1104.592229][T17851] bridge0: port 4(team0) entered blocking state [ 1104.598881][T17851] bridge0: port 4(team0) entered disabled state [ 1104.616411][T17851] team0: entered allmulticast mode [ 1104.633138][T17851] team_slave_0: entered allmulticast mode [ 1104.667412][T17851] team_slave_1: entered allmulticast mode [ 1106.648732][T17880] overlay: Unknown parameter '/' [ 1106.815381][T11223] Bluetooth: hci5: command tx timeout [ 1107.384940][T17896] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 1107.401976][T17896] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1107.414612][ T29] audit: type=1400 audit(1735104041.276:1458): avc: denied { relabelfrom } for pid=17889 comm="syz.5.3115" name="HCI" dev="sockfs" ino=59176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1107.705974][ T29] audit: type=1400 audit(1735104041.294:1459): avc: denied { relabelto } for pid=17889 comm="syz.5.3115" name="HCI" dev="sockfs" ino=59176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:ssh_keysign_exec_t:s0" [ 1107.995288][T17894] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1109.495551][T11223] Bluetooth: hci2: command 0x0401 tx timeout [ 1110.080288][T17925] Invalid ELF header magic: != ELF [ 1110.087845][T17925] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1110.094826][T17925] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1110.132593][ T29] audit: type=1400 audit(1735104043.811:1460): avc: denied { module_load } for pid=17919 comm="syz.1.3124" path="/sys/kernel/notes" dev="sysfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1111.076178][ T51] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1111.374350][ T51] usb 2-1: config index 0 descriptor too short (expected 3620, got 36) [ 1111.413798][ T51] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 1111.447618][ T51] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1111.460715][ T51] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1111.477546][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.776293][ T51] usb 2-1: config 0 descriptor?? [ 1111.790604][ T1200] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1111.797941][ T51] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1112.046980][ T1200] usb 6-1: Using ep0 maxpacket: 8 [ 1112.244256][ T1200] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b7.70 [ 1112.253450][ T1200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.261755][ T1200] usb 6-1: Product: syz [ 1112.265933][ T1200] usb 6-1: Manufacturer: syz [ 1112.270855][ T1200] usb 6-1: SerialNumber: syz [ 1112.287934][ T1200] usb 6-1: config 0 descriptor?? [ 1112.293172][ T5941] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1112.312961][ T1200] usb_ehset_test 6-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1112.465533][ T5941] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 1112.481302][ T5941] usb 3-1: config 0 has no interface number 0 [ 1112.487799][ T5941] usb 3-1: config 0 interface 74 has no altsetting 0 [ 1112.496747][ T5941] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=f6.7d [ 1112.514685][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.538266][ T1200] usb 6-1: USB disconnect, device number 64 [ 1112.549180][ T5941] usb 3-1: Product: syz [ 1112.556518][ T5941] usb 3-1: Manufacturer: syz [ 1112.566239][ T5941] usb 3-1: SerialNumber: syz [ 1112.577285][ T5941] usb 3-1: config 0 descriptor?? [ 1112.589692][ T5941] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1112.599074][ T5941] usb 3-1: setting power ON [ 1112.607251][ T5941] dvb-usb: bulk message failed: -22 (2/0) [ 1113.060008][ T5941] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1113.154656][ T5941] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 1113.193233][ T5941] dvb_usb_cxusb 3-1:0.74: probe with driver dvb_usb_cxusb failed with error -22 [ 1113.973246][ T5869] usb 2-1: USB disconnect, device number 72 [ 1114.490580][T17977] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1114.990930][T17988] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3141'. [ 1115.284375][ T5863] usb 3-1: USB disconnect, device number 78 [ 1116.404402][ T29] audit: type=1400 audit(1735104048.899:1461): avc: denied { listen } for pid=17991 comm="syz.2.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1116.426664][ T29] audit: type=1400 audit(1735104048.983:1462): avc: denied { mount } for pid=17991 comm="syz.2.3143" name="/" dev="autofs" ino=59832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1116.449937][ T29] audit: type=1400 audit(1735104048.983:1463): avc: denied { read } for pid=17991 comm="syz.2.3143" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1116.473317][ T29] audit: type=1400 audit(1735104048.983:1464): avc: denied { open } for pid=17991 comm="syz.2.3143" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1116.497307][ T29] audit: type=1400 audit(1735104048.983:1465): avc: denied { ioctl } for pid=17991 comm="syz.2.3143" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1116.665536][ T29] audit: type=1400 audit(1735104049.956:1466): avc: denied { unmount } for pid=17228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1116.947448][T18009] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1117.179092][T11223] Bluetooth: hci3: command 0x040f tx timeout [ 1117.335011][T18014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.345534][T18014] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1117.570329][T11223] Bluetooth: min 0 < 6 [ 1117.702606][ T29] audit: type=1400 audit(1735104050.929:1467): avc: denied { search } for pid=18015 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.724990][ T29] audit: type=1400 audit(1735104050.938:1468): avc: denied { read } for pid=18022 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.748832][ T29] audit: type=1400 audit(1735104050.938:1469): avc: denied { open } for pid=18022 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.775491][ T29] audit: type=1400 audit(1735104050.938:1470): avc: denied { getattr } for pid=18022 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1119.086930][T18037] syz_tun: entered promiscuous mode [ 1119.181388][T18037] syz_tun: left promiscuous mode [ 1119.743981][T11223] Bluetooth: hci2: command 0x0401 tx timeout [ 1119.802942][T18051] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1120.353547][ T1200] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1120.591568][T18072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1120.718925][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.725325][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.844828][ T1200] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 1120.852964][ T1200] usb 5-1: config 0 has no interface number 0 [ 1120.866274][ T1200] usb 5-1: config 0 interface 74 has no altsetting 0 [ 1120.896261][ T1200] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=f6.7d [ 1120.908702][ T1200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.939379][ T1200] usb 5-1: Product: syz [ 1120.975298][ T1200] usb 5-1: Manufacturer: syz [ 1120.991134][ T1200] usb 5-1: SerialNumber: syz [ 1121.038588][ T1200] usb 5-1: config 0 descriptor?? [ 1121.049371][ T1200] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1121.087402][ T1200] usb 5-1: setting power ON [ 1121.116083][ T1200] dvb-usb: bulk message failed: -22 (2/0) [ 1121.137760][ T1200] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1121.172732][ T1200] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 1121.209905][ T1200] dvb_usb_cxusb 5-1:0.74: probe with driver dvb_usb_cxusb failed with error -22 [ 1121.725135][ T5869] usb 5-1: USB disconnect, device number 87 [ 1121.971090][T18097] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1122.704748][ T5869] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1122.714318][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1122.714334][ T29] audit: type=1400 audit(1735104055.615:1482): avc: denied { sys_chroot } for pid=18108 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1122.917698][T18111] sp0: Synchronizing with TNC [ 1123.076765][ T5869] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1123.102954][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.115404][ T1200] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1123.129660][ T29] audit: type=1400 audit(1735104055.662:1483): avc: denied { setgid } for pid=18108 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1123.139938][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1123.173570][ T5869] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1123.222114][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.250994][ T29] audit: type=1400 audit(1735104055.933:1484): avc: denied { setrlimit } for pid=18108 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1123.276953][ T29] audit: type=1400 audit(1735104056.046:1485): avc: denied { create } for pid=18106 comm="syz.4.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1123.281547][ T5869] usb 2-1: config 0 descriptor?? [ 1123.506550][ T1200] usb 7-1: Using ep0 maxpacket: 8 [ 1123.512980][ T1200] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 1123.521314][ T1200] usb 7-1: config 0 has no interface number 0 [ 1123.530322][ T1200] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1123.539699][ T1200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.549994][ T1200] usb 7-1: Product: syz [ 1123.558511][ T1200] usb 7-1: Manufacturer: syz [ 1123.581100][ T1200] usb 7-1: SerialNumber: syz [ 1123.604068][ T1200] usb 7-1: config 0 descriptor?? [ 1123.610650][ T1200] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1123.618825][ T1200] pctv452e: pctv452e_power_ctrl: 1 [ 1123.618825][ T1200] [ 1123.629482][ T1200] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1123.629482][ T1200] [ 1123.666922][ T1200] dvb-usb: bulk message failed: -22 (5/0) [ 1123.714467][ T1200] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1123.811044][ T1200] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1123.856176][ T29] audit: type=1400 audit(1735104056.682:1486): avc: denied { map } for pid=18109 comm="syz.6.3162" path="socket:[60652]" dev="sockfs" ino=60652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1123.929212][ T1200] usb 7-1: media controller created [ 1124.164723][T18120] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1124.187207][T18120] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1124.758524][ T1200] dvb-usb: bulk message failed: -22 (8/0) [ 1124.765881][ T5869] hid-led 0003:1D34:0004.0011: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.1-1/input0 [ 1124.787033][ T5869] hid-led 0003:1D34:0004.0011: Dream Cheeky Webmail Notifier initialized [ 1124.795636][ T29] audit: type=1400 audit(1735104056.934:1487): avc: denied { write } for pid=18109 comm="syz.6.3162" path="socket:[60658]" dev="sockfs" ino=60658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1124.846839][ T1200] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1124.866070][ T1200] dvb-usb: MAC address reading failed. [ 1124.871984][ T5869] usb 2-1: USB disconnect, device number 73 [ 1124.989938][ T29] audit: type=1400 audit(1735104056.934:1488): avc: denied { create } for pid=18109 comm="syz.6.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1125.089535][ T1200] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1125.115341][ T29] audit: type=1400 audit(1735104056.962:1489): avc: denied { write } for pid=18109 comm="syz.6.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1125.126853][ T1200] DVB: Unable to find symbol stb0899_attach() [ 1125.146761][ T1200] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1125.773797][ T29] audit: type=1400 audit(1735104057.028:1490): avc: denied { read } for pid=18109 comm="syz.6.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1125.862389][ T1200] rc_core: IR keymap rc-tt-1500 not found [ 1125.868294][ T1200] Registered IR keymap rc-empty [ 1125.877323][ T1200] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1125.933415][ T1200] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input156 [ 1126.061192][ T1200] dvb-usb: schedule remote query interval to 100 msecs. [ 1126.072302][ T1200] pctv452e: pctv452e_power_ctrl: 0 [ 1126.072302][ T1200] [ 1126.105559][ T1200] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1126.302209][T13837] dvb-usb: bulk message failed: -22 (4/0) [ 1126.384950][T13837] dvb-usb: error -22 while querying for an remote control event. [ 1126.521575][T13837] dvb-usb: bulk message failed: -22 (4/0) [ 1126.532005][T13837] dvb-usb: error -22 while querying for an remote control event. [ 1126.667321][T18146] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1126.768757][ T1200] usb 7-1: USB disconnect, device number 91 [ 1128.545405][T18158] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1128.634286][ T29] audit: type=1400 audit(1735104060.900:1491): avc: denied { write } for pid=18153 comm="syz.1.3175" path="socket:[60115]" dev="sockfs" ino=60115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1128.664800][T18157] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1128.698212][ T29] audit: type=1400 audit(1735104061.078:1492): avc: denied { listen } for pid=18153 comm="syz.1.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1128.850588][ T29] audit: type=1400 audit(1735104061.078:1493): avc: denied { shutdown } for pid=18153 comm="syz.1.3175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1129.137273][ T1200] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1129.404599][T18175] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1130.038822][ T29] audit: type=1400 audit(1735104061.508:1494): avc: denied { append } for pid=18164 comm="syz.6.3177" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1130.165341][T18166] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1130.426925][T18182] netlink: 'syz.4.3180': attribute type 6 has an invalid length. [ 1130.444361][T18182] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3180'. [ 1130.872590][T11223] Bluetooth: hci2: command 0x0401 tx timeout [ 1131.093623][T18186] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3182'. [ 1131.374984][T18190] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1132.337014][ T5862] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1132.532951][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1132.627342][ T5862] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1132.642733][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.662238][ T5862] usb 6-1: config 0 descriptor?? [ 1132.676212][ T5862] hub 6-1:0.0: bad descriptor, ignoring hub [ 1132.709063][ T5862] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1132.750156][ T5862] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1132.785998][ T1200] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1133.114317][ T5827] Bluetooth: hci2: command 0x0401 tx timeout [ 1133.986629][ T1200] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1133.996784][ T1200] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.007272][ T1200] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1134.647782][T18216] new mount options do not match the existing superblock, will be ignored [ 1135.064000][ T1200] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1135.077064][ T1200] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1135.141995][ T1200] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1135.157148][ T1200] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.181842][ T1200] usb 7-1: Product: syz [ 1136.186147][ T1200] usb 7-1: Manufacturer: syz [ 1136.190785][ T1200] usb 7-1: SerialNumber: syz [ 1136.508556][T18225] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1136.895747][ T1200] usb 7-1: can't set config #1, error -71 [ 1136.921563][ T1200] usb 7-1: USB disconnect, device number 92 [ 1137.060489][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3196'. [ 1137.070086][ T51] usb 6-1: USB disconnect, device number 65 [ 1137.120060][T18238] overlay: Unknown parameter '/' [ 1137.179948][T11925] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1137.438653][T11925] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1137.462660][T11925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.553359][T11925] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1137.814914][T11925] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1137.823018][T11925] usb 2-1: Manufacturer: syz [ 1137.870514][T11925] usb 2-1: config 0 descriptor?? [ 1138.310617][T18260] afs: Unknown parameter 'ut<>]oSV9i' [ 1138.349837][T11925] rc_core: IR keymap rc-hauppauge not found [ 1138.356121][T11925] Registered IR keymap rc-empty [ 1138.361712][T11925] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1138.376467][T11925] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input157 [ 1139.713902][ T51] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1139.912665][ T5867] usb 2-1: USB disconnect, device number 74 [ 1139.913383][ T29] audit: type=1400 audit(1735104071.704:1495): avc: denied { setopt } for pid=18280 comm="syz.2.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1140.066326][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 1140.074928][ T51] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b7.70 [ 1140.084383][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.093291][ T51] usb 5-1: Product: syz [ 1140.097695][ T51] usb 5-1: Manufacturer: syz [ 1140.102468][ T51] usb 5-1: SerialNumber: syz [ 1140.108179][ T51] usb 5-1: config 0 descriptor?? [ 1140.116035][ T51] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1140.226707][ T1200] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1140.349243][ T51] usb 5-1: USB disconnect, device number 88 [ 1140.391132][ T1200] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1140.399829][ T1200] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.410072][ T1200] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1140.419072][ T1200] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1140.435436][ T1200] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1140.468216][ T1200] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1140.567080][ T1200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.620697][ T1200] usb 3-1: Product: syz [ 1140.668454][ T1200] usb 3-1: Manufacturer: syz [ 1140.709235][ T1200] usb 3-1: SerialNumber: syz [ 1141.000293][T18290] overlayfs: missing 'lowerdir' [ 1141.065434][ T1200] smsusb:smsusb_probe: board id=8, interface number 0 [ 1141.072753][ T1200] smsusb:smsusb_probe: Device initialized with return code -19 [ 1141.110749][ T1200] usb 3-1: USB disconnect, device number 79 [ 1141.263673][T13837] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1141.359866][ T5901] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1141.402627][T13837] usb 2-1: device descriptor read/64, error -71 [ 1141.520771][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 1141.527302][ T5901] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.540315][ T5901] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1141.548929][ T5901] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1141.558415][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.566575][ T5901] usb 5-1: Product: syz [ 1141.570758][ T5901] usb 5-1: Manufacturer: syz [ 1141.575444][ T5901] usb 5-1: SerialNumber: syz [ 1141.685526][T13837] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1141.954230][T13837] usb 2-1: device descriptor read/64, error -71 [ 1142.049993][ T5901] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input158 [ 1142.066087][ T5901] usb 5-1: USB disconnect, device number 89 [ 1142.072045][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1142.081022][T13837] usb usb2-port1: attempt power cycle [ 1142.103899][ T5901] appletouch 5-1:1.0: input: appletouch disconnected [ 1142.146253][ T29] audit: type=1400 audit(1735104073.800:1496): avc: denied { create } for pid=18299 comm="syz.5.3211" name="#83" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1142.178847][ T29] audit: type=1400 audit(1735104073.800:1497): avc: denied { link } for pid=18299 comm="syz.5.3211" name="#83" dev="tmpfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1142.213120][ T29] audit: type=1400 audit(1735104073.800:1498): avc: denied { rename } for pid=18299 comm="syz.5.3211" name="#84" dev="tmpfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1142.264501][ T29] audit: type=1800 audit(1735104073.856:1499): pid=18302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3211" name="file1" dev="overlay" ino=12 res=0 errno=0 [ 1142.461284][T11925] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1142.557271][T13837] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1142.771431][T11925] usb 6-1: Using ep0 maxpacket: 16 [ 1143.623412][T13837] usb 2-1: device descriptor read/8, error -71 [ 1143.636210][T11925] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1144.006020][T18320] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 1144.028719][T11925] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32 [ 1144.039848][T11925] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1144.052510][T11925] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1144.061840][T11925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.070098][T11925] usb 6-1: Product: syz [ 1144.074453][T11925] usb 6-1: Manufacturer: ➼觫欕륮稲⹤ᑃ樞ꈥ㑤헭賻췩䯍땑鹮롣뒽ը꧜知䧩藈坐쌈먚内ꖶ勳胖Ừ챪Ẍ頗苹Ⱆ䟡摉섿馂报䢍䱃㡴ﶎ龔욲䃈ꔉ䗷뙖㫞굘滅͟玳ۺ⧶镮偻䍀훥凖햗἞뵽ắ㿓啇⧝䉟쌰Ҋচ⬊幚섖䲆종䕑ᛓ౷戈켫ழ襷᣻胁技쎂帵ࢄ䵤࣊冟镄ꑄᏩ꣫钊笗箿䔚ᡦ퍴䏰 [ 1144.110784][T11925] usb 6-1: SerialNumber: syz [ 1144.136996][T18302] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1144.145179][T18302] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1144.161017][T13837] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1144.283476][T13837] usb 2-1: device descriptor read/8, error -71 [ 1144.411391][T13837] usb usb2-port1: unable to enumerate USB device [ 1144.841618][ T29] audit: type=1400 audit(1735104076.316:1500): avc: denied { append } for pid=18299 comm="syz.5.3211" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1144.846472][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3211'. [ 1145.006883][T11925] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 1145.016221][T13837] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1145.020887][T11925] usb 6-1: USB disconnect, device number 66 [ 1145.054205][T11925] usblp0: removed [ 1145.189272][T13837] usb 2-1: config 0 has no interfaces? [ 1145.195342][T13837] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1145.204699][T13837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.216438][T13837] usb 2-1: config 0 descriptor?? [ 1145.251293][ T5901] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1145.441961][ T5901] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1145.460641][T13837] usb 2-1: USB disconnect, device number 79 [ 1145.469780][ T5901] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.485266][ T5901] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1145.495434][ T5901] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1145.510656][ T5901] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1145.520166][ T5901] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1145.529505][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.537617][ T5901] usb 7-1: Product: syz [ 1145.542151][ T5901] usb 7-1: Manufacturer: syz [ 1146.154702][ T5901] usb 7-1: SerialNumber: syz [ 1146.596734][ T5901] smsusb:smsusb_probe: board id=8, interface number 0 [ 1146.604024][ T5901] smsusb:smsusb_probe: Device initialized with return code -19 [ 1146.786109][ T5901] usb 7-1: USB disconnect, device number 93 [ 1146.945737][ T29] audit: type=1400 audit(1735104078.252:1501): avc: denied { execute } for pid=18349 comm="syz.2.3225" name="file2" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1148.783948][T18371] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1148.985458][ T5867] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1149.268017][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 1149.277077][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1149.326563][ T5867] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1149.383460][ T5827] Bluetooth: min 0 < 6 [ 1149.397230][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.526748][ T5867] usb 2-1: config 0 descriptor?? [ 1149.543409][ T5867] hub 2-1:0.0: bad descriptor, ignoring hub [ 1149.561409][ T5867] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1149.590113][ T5867] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1149.773428][ T5901] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1149.933825][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 1149.940869][ T5901] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.575590][ T5901] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1150.588651][ T5901] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1150.597871][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.683022][ T5901] usb 7-1: config 0 descriptor?? [ 1150.691114][ T5901] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1151.350572][T18387] syz.5.3234 (18387): drop_caches: 2 [ 1151.358017][T18387] syz.5.3234 (18387): drop_caches: 2 [ 1151.580179][ T5827] Bluetooth: hci2: command 0x0401 tx timeout [ 1151.946642][T18398] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1152.320626][ T5867] usb 2-1: USB disconnect, device number 80 [ 1152.471960][T18397] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1153.058880][T18411] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1153.122066][ T29] audit: type=1400 audit(1735104084.061:1502): avc: denied { setopt } for pid=18407 comm="syz.2.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1153.151849][ T5867] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1153.380997][T18409] usb 7-1: USB disconnect, device number 94 [ 1153.406181][T18413] fuse: Bad value for 'fd' [ 1154.581650][ T5827] Bluetooth: hci2: command 0x0401 tx timeout [ 1154.597099][T18419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3240'. [ 1155.242141][ T5867] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1155.336269][ T5867] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.516566][ T5867] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1155.591737][ T5867] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1155.625929][ T5867] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1155.640263][ T5867] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1155.668112][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.681460][ T5867] usb 6-1: Product: syz [ 1155.685569][T18429] gre1: entered promiscuous mode [ 1155.688639][ T5867] usb 6-1: Manufacturer: syz [ 1155.695750][ T5867] usb 6-1: SerialNumber: syz [ 1155.700579][T18429] gre1: entered allmulticast mode [ 1155.959486][T18439] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1155.997106][ T5901] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1156.260170][ T5901] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 1156.290434][ T5901] usb 7-1: config 0 has no interface number 1 [ 1156.350854][ T5867] smsusb:smsusb_probe: board id=8, interface number 0 [ 1156.361682][ T5901] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1156.363580][ T5867] smsusb:smsusb_probe: Device initialized with return code -19 [ 1156.420686][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.449019][ T5867] usb 6-1: USB disconnect, device number 67 [ 1156.463949][ T5901] usb 7-1: config 0 descriptor?? [ 1156.474508][ T5901] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1156.490597][ T5901] usb 7-1: MIDIStreaming interface descriptor not found [ 1156.516307][ T5901] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1156.712168][T18433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.738326][T18433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.907310][ T5901] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1156.944777][T18450] xt_TCPMSS: Only works on TCP SYN packets [ 1156.986504][ T5901] usb 7-1: USB disconnect, device number 95 [ 1157.247951][T18459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1157.259566][ T29] audit: type=1400 audit(1735104087.915:1503): avc: denied { write } for pid=18454 comm="syz.5.3252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1157.740466][ T5869] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1158.005470][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 1158.136239][ T5869] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1158.149054][ T5869] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1158.186968][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1158.198884][ T29] audit: type=1400 audit(1735104088.813:1504): avc: denied { create } for pid=18463 comm="syz.1.3254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1158.205387][T18468] netlink: 'syz.4.3256': attribute type 1 has an invalid length. [ 1158.227844][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1158.244041][ T5869] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1158.270818][ T5869] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1158.280030][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.300001][ T29] audit: type=1400 audit(1735104088.906:1505): avc: denied { read } for pid=18463 comm="syz.1.3254" path="socket:[61426]" dev="sockfs" ino=61426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1158.676331][T18468] bond1: entered promiscuous mode [ 1158.681879][T18468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1158.726712][T18470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1158.731374][ T5869] usb 3-1: GET_CAPABILITIES returned 0 [ 1158.733865][T18470] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1158.739112][ T5869] usbtmc 3-1:16.0: can't read capabilities [ 1158.761159][T18470] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1158.825175][T18470] bond1: (slave ip6gre1): making interface the new active one [ 1158.892944][T18470] ip6gre1: entered promiscuous mode [ 1158.899870][T18470] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1158.946987][T18479] sp0: Synchronizing with TNC [ 1159.159910][T18409] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 1159.347450][T18489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.366281][T18409] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1159.377456][T18489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.397193][T18409] usb 6-1: config 179 has no interface number 0 [ 1159.403783][T18409] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1159.421626][T18489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.430244][T18409] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1159.441516][T18489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.451233][T18409] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1159.464697][T18409] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1159.484960][T18409] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1159.500553][T18409] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1159.509880][ T29] audit: type=1400 audit(1735104090.029:1506): avc: denied { write } for pid=18493 comm="syz.6.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1159.529602][T18409] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.540151][T18478] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1159.547647][T18478] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1159.918766][T18461] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1160.191731][T18461] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1160.210484][T18461] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.230625][T18461] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1160.268706][T18461] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1160.324096][T18461] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1160.332820][T18409] usb 6-1: USB disconnect, device number 68 [ 1160.332866][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1160.332888][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1160.376720][T18461] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1160.480536][T18461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.519753][T18461] usb 5-1: Product: syz [ 1160.617262][T18461] usb 5-1: Manufacturer: syz [ 1160.627919][T18505] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1160.729933][T18461] usb 5-1: SerialNumber: syz [ 1160.794969][T13837] usb 3-1: USB disconnect, device number 80 [ 1161.018505][T18461] smsusb:smsusb_probe: board id=8, interface number 0 [ 1161.029234][T18461] smsusb:smsusb_probe: Device initialized with return code -19 [ 1161.063908][T18461] usb 5-1: USB disconnect, device number 90 [ 1161.150333][ T29] audit: type=1400 audit(1735104091.572:1507): avc: denied { write } for pid=18518 comm="syz.5.3269" name="task" dev="proc" ino=61819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1161.172948][ T29] audit: type=1400 audit(1735104091.572:1508): avc: denied { add_name } for pid=18518 comm="syz.5.3269" name="2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1161.193393][ T29] audit: type=1400 audit(1735104091.572:1509): avc: denied { create } for pid=18518 comm="syz.5.3269" name="2060" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 1161.218000][ T29] audit: type=1400 audit(1735104091.572:1510): avc: denied { associate } for pid=18518 comm="syz.5.3269" name="2060" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1161.233700][T13837] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1161.327624][T18522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3270'. [ 1161.404814][T13837] usb 3-1: Using ep0 maxpacket: 8 [ 1161.418500][T13837] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b7.70 [ 1161.428037][T13837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.436136][T13837] usb 3-1: Product: syz [ 1161.441171][T13837] usb 3-1: Manufacturer: syz [ 1161.446029][T13837] usb 3-1: SerialNumber: syz [ 1161.454160][T13837] usb 3-1: config 0 descriptor?? [ 1161.462501][T13837] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1161.714908][ T5867] usb 3-1: USB disconnect, device number 81 [ 1161.951322][T18525] FAULT_INJECTION: forcing a failure. [ 1161.951322][T18525] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.110388][T18525] CPU: 0 UID: 0 PID: 18525 Comm: syz.4.3271 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 1162.121191][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1162.131239][T18525] Call Trace: [ 1162.134504][T18525] [ 1162.137417][T18525] dump_stack_lvl+0x16c/0x1f0 [ 1162.142080][T18525] should_fail_ex+0x497/0x5b0 [ 1162.146740][T18525] ? fs_reclaim_acquire+0xae/0x150 [ 1162.151837][T18525] should_failslab+0xc2/0x120 [ 1162.156498][T18525] __kmalloc_noprof+0xcb/0x510 [ 1162.161255][T18525] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1162.166880][T18525] tomoyo_realpath_from_path+0xb9/0x720 [ 1162.172418][T18525] ? tomoyo_path_number_perm+0x235/0x590 [ 1162.178049][T18525] ? tomoyo_path_number_perm+0x235/0x590 [ 1162.183669][T18525] tomoyo_path_number_perm+0x248/0x590 [ 1162.189110][T18525] ? tomoyo_path_number_perm+0x235/0x590 [ 1162.194722][T18525] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1162.200700][T18525] ? __pfx_lock_release+0x10/0x10 [ 1162.205712][T18525] ? trace_lock_acquire+0x14e/0x1f0 [ 1162.210908][T18525] ? lock_acquire+0x2f/0xb0 [ 1162.215407][T18525] ? __fget_files+0x40/0x3a0 [ 1162.219978][T18525] ? __fget_files+0x206/0x3a0 [ 1162.224637][T18525] security_file_ioctl+0x9b/0x240 [ 1162.229681][T18525] __x64_sys_ioctl+0xb7/0x200 [ 1162.234365][T18525] do_syscall_64+0xcd/0x250 [ 1162.238866][T18525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.244761][T18525] RIP: 0033:0x7fb8dcd85d29 [ 1162.249174][T18525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.268788][T18525] RSP: 002b:00007fb8ddaf8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1162.277179][T18525] RAX: ffffffffffffffda RBX: 00007fb8dcf75fa0 RCX: 00007fb8dcd85d29 [ 1162.285146][T18525] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1162.293108][T18525] RBP: 00007fb8ddaf8090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.301057][T18525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.309017][T18525] R13: 0000000000000000 R14: 00007fb8dcf75fa0 R15: 00007ffd45084fd8 [ 1162.317006][T18525] [ 1162.388391][T18525] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1162.850458][T18537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3274'. [ 1163.062763][T18542] sp0: Synchronizing with TNC [ 1163.812433][ T5827] Bluetooth: min 0 < 6 [ 1165.830987][ T29] audit: type=1400 audit(1735104094.968:1511): avc: denied { connect } for pid=18551 comm="syz.2.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1166.183629][T18559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 1166.411616][ T5827] Bluetooth: hci4: command tx timeout [ 1167.028060][ T5869] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1167.049341][T13837] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1167.213079][T13837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.252033][T13837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1167.266672][T13837] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1167.295559][T13837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1167.307544][T13837] usb 2-1: SerialNumber: syz [ 1167.331546][T13837] usb 2-1: 0:2 : does not exist [ 1167.356928][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1167.392665][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.416253][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1167.498362][ T5869] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1167.530935][ T5869] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1167.605453][T11925] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1167.700997][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1167.806522][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.816267][ T5869] usb 5-1: Product: syz [ 1167.820574][ T5869] usb 5-1: Manufacturer: syz [ 1167.825214][ T5869] usb 5-1: SerialNumber: syz [ 1168.033058][T11925] usb 3-1: Using ep0 maxpacket: 8 [ 1168.049018][T18581] gfs2: gfs2 mount does not exist [ 1168.059209][T11925] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b7.70 [ 1168.060793][T18581] vcan0: tx drop: invalid sa for name 0x0000000000000080 [ 1168.141130][T11925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.222154][ T29] audit: type=1400 audit(1735104098.036:1512): avc: denied { write } for pid=18566 comm="syz.1.3282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1168.256996][T11925] usb 3-1: Product: syz [ 1168.363771][T11925] usb 3-1: Manufacturer: syz [ 1168.368565][T11925] usb 3-1: SerialNumber: syz [ 1168.375696][ T5869] smsusb:smsusb_probe: board id=8, interface number 0 [ 1168.382505][ T5869] smsusb:smsusb_probe: Device initialized with return code -19 [ 1168.399152][T11925] usb 3-1: config 0 descriptor?? [ 1168.405797][T11925] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1168.478385][T11925] usb 2-1: USB disconnect, device number 81 [ 1168.509410][ T5869] usb 5-1: USB disconnect, device number 91 [ 1168.617454][T18588] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1168.836851][T11925] usb 3-1: USB disconnect, device number 82 [ 1168.931545][ T29] audit: type=1400 audit(1735104098.859:1513): avc: denied { ioctl } for pid=18583 comm="syz.6.3287" path="socket:[61931]" dev="sockfs" ino=61931 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1169.092240][T11223] Bluetooth: hci3: command 0x040f tx timeout [ 1169.829368][ T5867] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1170.131302][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 1170.139934][ T5867] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1170.220194][ T5867] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1170.229936][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.239863][ T5867] usb 6-1: config 0 descriptor?? [ 1170.247591][ T5867] hub 6-1:0.0: bad descriptor, ignoring hub [ 1170.254171][ T5867] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1170.263778][ T5867] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1170.492403][T18618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3297'. [ 1171.742799][ T29] audit: type=1400 audit(1735104101.441:1514): avc: denied { ioctl } for pid=18627 comm="syz.2.3299" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=62064 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1171.950118][ T29] audit: type=1400 audit(1735104101.450:1515): avc: denied { create } for pid=18627 comm="syz.2.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1172.010148][ T29] audit: type=1400 audit(1735104101.459:1516): avc: denied { write } for pid=18627 comm="syz.2.3299" path="socket:[62067]" dev="sockfs" ino=62067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1172.031216][ T5869] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1172.126000][T18636] ipvlan2: entered promiscuous mode [ 1172.151782][T18636] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1172.163235][T18636] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1172.213760][ T5869] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1172.222472][ T5869] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.234653][ T5869] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1172.251690][ T5869] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1172.274703][ T5869] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1172.284588][ T5869] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1172.298503][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.313719][ T5869] usb 7-1: Product: syz [ 1172.318106][ T5869] usb 7-1: Manufacturer: syz [ 1172.346876][ T5869] usb 7-1: SerialNumber: syz [ 1173.149869][ T5869] smsusb:smsusb_probe: board id=8, interface number 0 [ 1173.168174][ T5869] smsusb:smsusb_probe: Device initialized with return code -19 [ 1173.615685][ T5869] usb 7-1: USB disconnect, device number 96 [ 1173.616114][T18409] usb 6-1: USB disconnect, device number 69 [ 1173.747221][T18649] sp0: Synchronizing with TNC [ 1174.291456][T18667] FAULT_INJECTION: forcing a failure. [ 1174.291456][T18667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.306967][T18667] CPU: 0 UID: 0 PID: 18667 Comm: syz.5.3310 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 1174.317829][T18667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1174.327893][T18667] Call Trace: [ 1174.331174][T18667] [ 1174.334106][T18667] dump_stack_lvl+0x16c/0x1f0 [ 1174.338785][T18667] should_fail_ex+0x497/0x5b0 [ 1174.343466][T18667] _copy_to_user+0x32/0xd0 [ 1174.347871][T18667] simple_read_from_buffer+0xd0/0x160 [ 1174.353241][T18667] proc_fail_nth_read+0x198/0x270 [ 1174.358265][T18667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1174.363855][T18667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1174.369433][T18667] vfs_read+0x1df/0xbe0 [ 1174.373603][T18667] ? __fget_files+0x1fc/0x3a0 [ 1174.378272][T18667] ? __pfx___mutex_lock+0x10/0x10 [ 1174.383289][T18667] ? __pfx_vfs_read+0x10/0x10 [ 1174.387961][T18667] ? __fget_files+0x206/0x3a0 [ 1174.392630][T18667] ksys_read+0x12b/0x250 [ 1174.396864][T18667] ? __pfx_ksys_read+0x10/0x10 [ 1174.401618][T18667] do_syscall_64+0xcd/0x250 [ 1174.406115][T18667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.412002][T18667] RIP: 0033:0x7f686258473c [ 1174.416407][T18667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1174.436005][T18667] RSP: 002b:00007f68603f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1174.444407][T18667] RAX: ffffffffffffffda RBX: 00007f6862775fa0 RCX: 00007f686258473c [ 1174.452365][T18667] RDX: 000000000000000f RSI: 00007f68603f60a0 RDI: 0000000000000004 [ 1174.460321][T18667] RBP: 00007f68603f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1174.468282][T18667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.476244][T18667] R13: 0000000000000000 R14: 00007f6862775fa0 R15: 00007fff117c4d58 [ 1174.484216][T18667] [ 1174.828431][T18673] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3311'. [ 1174.841230][T18673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3311'. [ 1174.850296][T18673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3311'. [ 1174.874619][ T5869] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1175.080767][T18677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3312'. [ 1175.088700][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 1175.124796][ T5869] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b7.70 [ 1175.134074][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.484248][ T5869] usb 3-1: Product: syz [ 1175.516586][ T5869] usb 3-1: Manufacturer: syz [ 1175.529703][ T5869] usb 3-1: SerialNumber: syz [ 1175.538530][ T5869] usb 3-1: config 0 descriptor?? [ 1175.552880][ T5869] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1175.613142][ T5901] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1175.735778][T18689] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3316'. [ 1175.908969][T11925] usb 3-1: USB disconnect, device number 83 [ 1175.933443][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.945223][T18684] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1175.945258][T18684] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1175.966644][ T5901] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1175.977616][ T5901] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1175.997660][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.091284][ T5901] usb 6-1: config 0 descriptor?? [ 1176.255685][T11223] Bluetooth: min 0 < 6 [ 1176.605217][ T5869] usb 6-1: USB disconnect, device number 70 [ 1176.764642][T18702] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.3319'. [ 1176.788094][T18702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.002545][T13837] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1177.559038][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3322'. [ 1177.607670][T13837] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1177.623081][T13837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.793833][T13837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1177.815613][T13837] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1177.846934][T13837] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1178.069456][T13837] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1178.071656][T11925] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1178.086986][T13837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.095207][T13837] usb 5-1: Product: syz [ 1178.099435][T13837] usb 5-1: Manufacturer: syz [ 1178.104173][T13837] usb 5-1: SerialNumber: syz [ 1178.192372][T18718] netlink: 'syz.5.3325': attribute type 1 has an invalid length. [ 1178.293082][T11925] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1178.328506][T18409] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1178.350493][T11925] usb 3-1: config 1 has no interface number 1 [ 1178.356779][T11925] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1178.377061][T11925] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 1178.514203][T11223] Bluetooth: hci5: command tx timeout [ 1178.535928][T13837] smsusb:smsusb_probe: board id=8, interface number 0 [ 1178.542455][T11925] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1178.543268][T13837] smsusb:smsusb_probe: Device initialized with return code -19 [ 1178.563160][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3326'. [ 1178.575297][T11925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.590086][T11925] usb 3-1: Product: syz [ 1178.600092][T11925] usb 3-1: Manufacturer: syz [ 1178.605980][T18409] usb 7-1: Using ep0 maxpacket: 32 [ 1178.612886][T11925] usb 3-1: SerialNumber: syz [ 1178.621463][T18409] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1178.642217][T18708] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1178.648735][ T5869] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1178.664676][T18409] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1178.667143][T13837] usb 5-1: USB disconnect, device number 92 [ 1178.687841][T18409] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.706801][T18409] usb 7-1: config 0 descriptor?? [ 1178.718277][T18409] hub 7-1:0.0: bad descriptor, ignoring hub [ 1178.728341][T18409] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1178.748432][T18409] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1178.811478][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.835215][ T5869] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1178.847018][ T5869] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1178.860701][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.872681][ T5869] usb 6-1: config 0 descriptor?? [ 1178.906875][T11925] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1178.915514][T11925] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1178.961393][T11925] usb 3-1: USB disconnect, device number 84 [ 1179.143708][ T51] usb 6-1: USB disconnect, device number 71 [ 1179.876845][T11223] Bluetooth: min 0 < 6 [ 1180.299226][ T29] audit: type=1400 audit(1735104109.485:1517): avc: denied { watch } for pid=18732 comm="syz.2.3329" path="/74/net_prio.prioidx" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1180.340197][ T29] audit: type=1400 audit(1735104109.485:1518): avc: denied { watch_sb watch_reads } for pid=18732 comm="syz.2.3329" path="/74/net_prio.prioidx" dev="tmpfs" ino=425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1180.578988][T18740] netlink: 'syz.2.3331': attribute type 21 has an invalid length. [ 1180.587951][T18740] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1182.222754][T11223] Bluetooth: hci5: command tx timeout [ 1182.268868][ T51] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 1182.341257][ T5869] usb 7-1: USB disconnect, device number 97 [ 1182.572370][T13837] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1182.583002][ T5827] Bluetooth: min 0 < 6 [ 1182.622655][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1182.635202][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 1182.669382][ T51] usb 5-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1182.746381][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.825175][ T51] usb 5-1: config 0 descriptor?? [ 1182.830866][T13837] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1182.843163][T18744] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1182.843620][T13837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.853779][ T51] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input159 [ 1182.871673][T13837] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1182.888903][T13837] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1182.946634][ T5827] Bluetooth: hci2: command 0x0401 tx timeout [ 1182.989730][T11925] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1183.010724][T13837] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1183.128635][T13837] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1183.140542][T13837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.148700][T13837] usb 6-1: Product: syz [ 1183.153191][T13837] usb 6-1: Manufacturer: syz [ 1183.157826][T13837] usb 6-1: SerialNumber: syz [ 1183.396571][T11925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.402380][T13837] smsusb:smsusb_probe: board id=8, interface number 0 [ 1183.408625][T11925] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1183.423829][T11925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.453665][T13837] smsusb:smsusb_probe: Device initialized with return code -19 [ 1183.472496][T11925] usb 3-1: Product: syz [ 1183.476937][T11925] usb 3-1: Manufacturer: syz [ 1183.481929][T11925] usb 3-1: SerialNumber: syz [ 1183.502902][T11925] usb 3-1: config 0 descriptor?? [ 1183.539571][T13837] usb 6-1: USB disconnect, device number 72 [ 1183.605434][ T5176] bcm5974 5-1:0.0: could not read from device [ 1183.612689][ T5869] usb 5-1: USB disconnect, device number 93 [ 1183.628078][ T5176] bcm5974 5-1:0.0: could not read from device [ 1183.732747][T13837] usb 3-1: USB disconnect, device number 85 [ 1184.850558][T18741] Bluetooth: hci4: command tx timeout [ 1186.217936][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.224254][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.588209][T18800] FAULT_INJECTION: forcing a failure. [ 1187.588209][T18800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.617943][T18800] CPU: 1 UID: 0 PID: 18800 Comm: syz.4.3349 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 1187.628782][T18800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1187.638884][T18800] Call Trace: [ 1187.642190][T18800] [ 1187.645138][T18800] dump_stack_lvl+0x16c/0x1f0 [ 1187.649854][T18800] should_fail_ex+0x497/0x5b0 [ 1187.654552][T18800] _copy_from_iter+0x2a1/0x1560 [ 1187.659393][T18800] ? trace_lock_acquire+0x14e/0x1f0 [ 1187.664579][T18800] ? __alloc_skb+0x1fe/0x380 [ 1187.669154][T18800] ? __pfx__copy_from_iter+0x10/0x10 [ 1187.674429][T18800] ? __virt_addr_valid+0x1a4/0x590 [ 1187.679519][T18800] ? __virt_addr_valid+0x5e/0x590 [ 1187.684521][T18800] ? __phys_addr_symbol+0x30/0x80 [ 1187.689524][T18800] ? __check_object_size+0x488/0x710 [ 1187.694795][T18800] netlink_sendmsg+0x813/0xd70 [ 1187.699542][T18800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.704821][T18800] ____sys_sendmsg+0xaaf/0xc90 [ 1187.709565][T18800] ? copy_msghdr_from_user+0x10b/0x160 [ 1187.715012][T18800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.720289][T18800] ___sys_sendmsg+0x135/0x1e0 [ 1187.724954][T18800] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.730133][T18800] ? __pfx_lock_release+0x10/0x10 [ 1187.735137][T18800] ? trace_lock_acquire+0x14e/0x1f0 [ 1187.740322][T18800] ? __fget_files+0x206/0x3a0 [ 1187.744979][T18800] __sys_sendmsg+0x16e/0x220 [ 1187.749549][T18800] ? __pfx___sys_sendmsg+0x10/0x10 [ 1187.754642][T18800] do_syscall_64+0xcd/0x250 [ 1187.759126][T18800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.765002][T18800] RIP: 0033:0x7fb8dcd85d29 [ 1187.769394][T18800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.788981][T18800] RSP: 002b:00007fb8ddaf8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.797380][T18800] RAX: ffffffffffffffda RBX: 00007fb8dcf75fa0 RCX: 00007fb8dcd85d29 [ 1187.805330][T18800] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005 [ 1187.813281][T18800] RBP: 00007fb8ddaf8090 R08: 0000000000000000 R09: 0000000000000000 [ 1187.821242][T18800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.829207][T18800] R13: 0000000000000000 R14: 00007fb8dcf75fa0 R15: 00007ffd45084fd8 [ 1187.837165][T18800] [ 1187.874823][ T29] audit: type=1400 audit(1735104116.538:1519): avc: denied { sqpoll } for pid=18797 comm="syz.1.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1187.894328][ T29] audit: type=1400 audit(1735104116.547:1520): avc: denied { bind } for pid=18797 comm="syz.1.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1187.929064][T18799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3348'. [ 1188.135390][T18806] FAULT_INJECTION: forcing a failure. [ 1188.135390][T18806] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.195772][T18806] CPU: 0 UID: 0 PID: 18806 Comm: syz.6.3346 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 1188.195808][T18806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1188.195821][T18806] Call Trace: [ 1188.195830][T18806] [ 1188.195840][T18806] dump_stack_lvl+0x16c/0x1f0 [ 1188.195874][T18806] should_fail_ex+0x497/0x5b0 [ 1188.195893][T18806] ? fs_reclaim_acquire+0xae/0x150 [ 1188.195907][T18806] should_failslab+0xc2/0x120 [ 1188.195925][T18806] __kmalloc_node_noprof+0xd1/0x510 [ 1188.195939][T18806] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1188.195956][T18806] __kvmalloc_node_noprof+0xad/0x1a0 [ 1188.195969][T18806] traverse.part.0.constprop.0+0x392/0x640 [ 1188.195992][T18806] ? __pfx___lock_acquire+0x10/0x10 [ 1188.196008][T18806] seq_read_iter+0x934/0x12b0 [ 1188.196024][T18806] ? hlock_class+0x4e/0x130 [ 1188.196043][T18806] seq_read+0x39f/0x4e0 [ 1188.196058][T18806] ? __pfx_seq_read+0x10/0x10 [ 1188.196076][T18806] ? import_ubuf+0x1b6/0x220 [ 1188.196096][T18806] ? avc_policy_seqno+0x9/0x20 [ 1188.196114][T18806] ? __pfx_seq_read+0x10/0x10 [ 1188.196129][T18806] proc_reg_read+0x23d/0x330 [ 1188.196142][T18806] ? __pfx_proc_reg_read+0x10/0x10 [ 1188.196153][T18806] vfs_readv+0x6bf/0x890 [ 1188.196168][T18806] ? __pfx___lock_acquire+0x10/0x10 [ 1188.196179][T18806] ? find_held_lock+0x2d/0x110 [ 1188.196196][T18806] ? __pfx_vfs_readv+0x10/0x10 [ 1188.196213][T18806] ? __fget_files+0x1fc/0x3a0 [ 1188.196225][T18806] ? __pfx_lock_release+0x10/0x10 [ 1188.196242][T18806] ? __fget_files+0x206/0x3a0 [ 1188.196256][T18806] ? do_preadv+0x1b1/0x270 [ 1188.196265][T18806] do_preadv+0x1b1/0x270 [ 1188.196275][T18806] ? __pfx_do_preadv+0x10/0x10 [ 1188.196293][T18806] do_syscall_64+0xcd/0x250 [ 1188.196309][T18806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.196323][T18806] RIP: 0033:0x7f040b185d29 [ 1188.196334][T18806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1188.196344][T18806] RSP: 002b:00007f040bfab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1188.196356][T18806] RAX: ffffffffffffffda RBX: 00007f040b376160 RCX: 00007f040b185d29 [ 1188.196364][T18806] RDX: 0000000000000001 RSI: 0000000020000380 RDI: 0000000000000005 [ 1188.196371][T18806] RBP: 00007f040bfab090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.196377][T18806] R10: 00000000ffffffbf R11: 0000000000000246 R12: 0000000000000001 [ 1188.196384][T18806] R13: 0000000000000000 R14: 00007f040b376160 R15: 00007ffc856194c8 [ 1188.196397][T18806] [ 1189.592991][ C1] vkms_vblank_simulate: vblank timer overrun [ 1190.312152][ T5901] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1190.439526][T18831] 9pnet_fd: Insufficient options for proto=fd [ 1190.496312][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1190.505150][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.519383][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1190.610167][ T5901] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1190.727031][ T5901] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1190.736301][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1190.746307][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.777629][ T5901] usb 3-1: Product: syz [ 1190.875184][ T5901] usb 3-1: Manufacturer: syz [ 1190.917252][ T5901] usb 3-1: SerialNumber: syz [ 1190.964265][T18832] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1191.223414][ T5901] smsusb:smsusb_probe: board id=8, interface number 0 [ 1191.289495][ T5901] smsusb:smsusb_probe: Device initialized with return code -19 [ 1192.061025][ T5901] usb 3-1: USB disconnect, device number 86 [ 1192.527901][T18850] sp0: Synchronizing with TNC [ 1192.957812][T18741] Bluetooth: hci2: command 0x0401 tx timeout [ 1193.177233][ T51] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1193.391098][ T51] usb 6-1: Using ep0 maxpacket: 32 [ 1193.800994][T18871] hub 2-0:1.0: USB hub found [ 1193.807010][T18871] hub 2-0:1.0: 1 port detected [ 1194.221111][T18872] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3367'. [ 1194.366877][ T51] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1194.370651][ T29] audit: type=1400 audit(1735104122.440:1521): avc: denied { watch watch_reads } for pid=18866 comm="syz.6.3366" path="/proc/1939/net/udplite6" dev="proc" ino=4026534242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1194.377899][ T51] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1194.428228][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.572722][ T51] usb 6-1: config 0 descriptor?? [ 1194.643073][ T51] hub 6-1:0.0: bad descriptor, ignoring hub [ 1194.654484][ T51] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1194.673557][ T51] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1195.016158][ T51] usb 7-1: new full-speed USB device number 98 using dummy_hcd [ 1197.293266][ T51] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 1197.303936][ T51] usb 7-1: config 0 has no interface number 0 [ 1197.310532][ T51] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1197.320719][ T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.490171][ T51] usb 7-1: config 0 descriptor?? [ 1197.500447][ T51] cp210x 7-1:0.3: cp210x converter detected [ 1198.126980][ T5901] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1198.166617][ T51] cp210x 7-1:0.3: failed to get vendor val 0x370b size 1: -71 [ 1198.175902][ T51] cp210x 7-1:0.3: querying part number failed [ 1198.187874][ T51] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1198.200136][ T51] usb 7-1: USB disconnect, device number 98 [ 1198.266215][T18409] usb 6-1: USB disconnect, device number 73 [ 1198.296455][ T51] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1198.437990][ T51] cp210x 7-1:0.3: device disconnected [ 1198.612593][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1198.621491][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.631851][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1198.641080][ T5901] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1198.654334][ T5901] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1198.663443][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1198.672811][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.683364][ T5901] usb 3-1: Product: syz [ 1198.687624][ T5901] usb 3-1: Manufacturer: syz [ 1198.704497][ T5901] usb 3-1: SerialNumber: syz [ 1198.837947][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3375'. [ 1199.778881][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 1199.804329][ T5901] smsusb:smsusb_probe: board id=8, interface number 0 [ 1199.985993][ T5901] smsusb:smsusb_probe: Device initialized with return code -19 [ 1200.185718][T18913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1200.223820][ T5901] usb 3-1: USB disconnect, device number 87 [ 1200.652915][T18936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3381'. [ 1201.996366][T18950] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3384'. [ 1202.157419][T15047] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1202.212695][ T29] audit: type=1400 audit(1735104129.989:1522): avc: denied { connect } for pid=18937 comm="syz.5.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1202.350729][T15047] usb 7-1: Using ep0 maxpacket: 32 [ 1202.370822][T15047] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1202.382358][ T51] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1202.427497][T15047] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1202.525590][T15047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.574343][ T51] usb 3-1: device descriptor read/64, error -71 [ 1202.581229][T15047] usb 7-1: config 0 descriptor?? [ 1202.608089][T15047] hub 7-1:0.0: bad descriptor, ignoring hub [ 1202.614065][T15047] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1202.668969][T15047] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1202.970581][ T51] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1203.534639][ T51] usb 3-1: device descriptor read/64, error -71 [ 1203.666321][ T51] usb usb3-port1: attempt power cycle [ 1204.039112][ T51] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1204.076094][ T51] usb 3-1: device descriptor read/8, error -71 [ 1204.305350][T18963] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1204.509653][ T51] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1204.547092][ T51] usb 3-1: device descriptor read/8, error -71 [ 1204.707974][ T51] usb usb3-port1: unable to enumerate USB device [ 1204.893704][ T5941] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1204.894461][T15047] usb 7-1: USB disconnect, device number 99 [ 1205.209755][T18971] tipc: Failed to obtain node identity [ 1205.215429][T18971] tipc: Enabling of bearer rejected, failed to enable media [ 1205.279113][ T5941] usb 2-1: Using ep0 maxpacket: 8 [ 1205.285501][ T5941] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1205.303990][ T5941] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1205.315218][ T5941] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1205.327028][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.340581][ T5941] usb 2-1: Product: syz [ 1205.347252][ T5941] usb 2-1: Manufacturer: syz [ 1205.352077][ T5941] usb 2-1: SerialNumber: syz [ 1205.401705][ T29] audit: type=1400 audit(1735104132.964:1523): avc: denied { write } for pid=18976 comm="syz.2.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1205.614786][T18960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.623398][T18960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.663860][T15047] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1205.839796][ T5941] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input160 [ 1205.858328][T15047] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1205.867026][T15047] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.932356][T15047] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1205.940513][ T5941] usb 2-1: USB disconnect, device number 82 [ 1205.941290][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1205.966848][T15047] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1206.013560][ T5941] appletouch 2-1:1.0: input: appletouch disconnected [ 1206.024222][T15047] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1206.049693][T15047] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1206.058929][T15047] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.076668][T15047] usb 7-1: Product: syz [ 1206.090245][T15047] usb 7-1: Manufacturer: syz [ 1206.104596][T15047] usb 7-1: SerialNumber: syz [ 1206.345407][T15047] smsusb:smsusb_probe: board id=8, interface number 0 [ 1206.369544][T15047] smsusb:smsusb_probe: Device initialized with return code -19 [ 1206.603014][T18996] sp0: Synchronizing with TNC [ 1206.796218][T15047] usb 7-1: USB disconnect, device number 100 [ 1206.802869][ T51] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1206.989659][T18741] Bluetooth: hci3: command 0x040f tx timeout [ 1207.800619][ T51] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 1207.909027][ T51] usb 3-1: config 0 has no interface number 0 [ 1207.915174][ T51] usb 3-1: config 0 interface 74 has no altsetting 0 [ 1207.936950][ T51] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=f6.7d [ 1207.946252][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.954533][ T51] usb 3-1: Product: syz [ 1207.958759][ T51] usb 3-1: Manufacturer: syz [ 1207.963455][ T51] usb 3-1: SerialNumber: syz [ 1207.991284][T19006] sp0: Synchronizing with TNC [ 1208.016211][ T29] audit: type=1400 audit(1735104135.349:1524): avc: denied { execute_no_trans } for pid=19001 comm="syz.1.3398" path="/76/file1" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1208.040541][ T29] audit: type=1400 audit(1735104135.386:1525): avc: denied { listen } for pid=19001 comm="syz.1.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1208.105544][ T51] usb 3-1: config 0 descriptor?? [ 1208.161105][ T51] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1208.176278][ T51] usb 3-1: setting power ON [ 1208.182356][ T51] dvb-usb: bulk message failed: -22 (2/0) [ 1208.309307][T19012] xt_TCPMSS: Only works on TCP SYN packets [ 1209.218670][ T51] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1209.382709][ T51] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 1209.398756][ T51] dvb_usb_cxusb 3-1:0.74: probe with driver dvb_usb_cxusb failed with error -22 [ 1210.401126][T19026] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1212.716211][ T29] audit: type=1400 audit(1735104139.044:1526): avc: denied { write } for pid=19041 comm="syz.6.3407" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1212.901665][ T29] audit: type=1400 audit(1735104139.315:1527): avc: denied { shutdown } for pid=19040 comm="syz.4.3406" lport=34040 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1213.107626][T18409] usb 3-1: USB disconnect, device number 92 [ 1213.179446][ T5901] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1213.416054][ T5901] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.639318][T18409] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1213.858553][T18409] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1213.908107][ T5901] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1213.919054][ T5901] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 1213.935702][T18409] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.939200][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1213.954731][T18409] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1213.969122][T18409] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1214.069674][T18409] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1214.369158][T18409] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1214.394710][T19066] sp0: Synchronizing with TNC [ 1214.410058][T18409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.512695][ T5901] usb 5-1: Product: syz [ 1214.517360][T18409] usb 3-1: Product: syz [ 1214.521563][T18409] usb 3-1: Manufacturer: syz [ 1214.522049][ T5901] usb 5-1: SerialNumber: syz [ 1214.526174][T18409] usb 3-1: SerialNumber: syz [ 1214.598119][ T29] audit: type=1400 audit(1735104141.560:1528): avc: denied { ioctl } for pid=19069 comm="syz.5.3414" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1214.605749][ T5901] usb 5-1: can't set config #7, error -71 [ 1214.623668][ C1] vkms_vblank_simulate: vblank timer overrun [ 1214.660928][ T5901] usb 5-1: USB disconnect, device number 94 [ 1215.093764][T18409] smsusb:smsusb_probe: board id=8, interface number 0 [ 1215.101142][T18409] smsusb:smsusb_probe: Device initialized with return code -19 [ 1215.801841][T19086] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3417'. [ 1215.846465][T11223] Bluetooth: hci5: command 0x0406 tx timeout [ 1215.873545][T11223] Bluetooth: hci3: command 0x040f tx timeout [ 1215.889804][T18409] usb 3-1: USB disconnect, device number 93 [ 1216.266158][T19087] Bluetooth: min 0 < 6 [ 1216.832416][T19102] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 1217.242352][ T29] audit: type=1400 audit(1735104143.449:1529): avc: denied { create } for pid=19093 comm="syz.6.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1217.284897][ T29] audit: type=1400 audit(1735104143.449:1530): avc: denied { ioctl } for pid=19093 comm="syz.6.3419" path="socket:[64061]" dev="sockfs" ino=64061 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1218.440945][ T5901] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1218.631350][T19087] Bluetooth: hci4: command 0x0406 tx timeout [ 1219.085879][T19123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.101985][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 1219.114060][T19123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.123715][ T5941] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1219.132131][ T5901] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1219.147578][ T5901] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1219.317607][ T5901] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1219.326935][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.832522][ T5901] usb 3-1: Product: syz [ 1219.836746][ T5901] usb 3-1: Manufacturer: syz [ 1219.841611][ T5901] usb 3-1: SerialNumber: syz [ 1219.848130][T19117] sp0: Synchronizing with TNC [ 1220.351646][ T5941] usb 5-1: device descriptor read/all, error -71 [ 1220.397035][T19087] Bluetooth: min 0 < 6 [ 1220.948919][T19116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.957539][T19116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.998251][T18409] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1221.038023][ T29] audit: type=1400 audit(1735104147.593:1531): avc: denied { listen } for pid=19150 comm="syz.4.3434" lport=57056 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.073319][ T5901] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input161 [ 1221.104871][ T5901] usb 3-1: USB disconnect, device number 94 [ 1221.122575][ T29] audit: type=1400 audit(1735104147.668:1532): avc: denied { accept } for pid=19150 comm="syz.4.3434" lport=57056 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.156473][ T5901] appletouch 3-1:1.0: input: appletouch disconnected [ 1221.201774][ T29] audit: type=1400 audit(1735104147.696:1533): avc: denied { setopt } for pid=19150 comm="syz.4.3434" lport=57056 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1221.286575][T18409] usb 6-1: Using ep0 maxpacket: 8 [ 1221.304652][T18409] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b7.70 [ 1221.324656][T18409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.332843][ T29] audit: type=1400 audit(1735104147.696:1534): avc: denied { write } for pid=19150 comm="syz.4.3434" lport=57056 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1221.368131][T18409] usb 6-1: Product: syz [ 1221.374794][T18409] usb 6-1: Manufacturer: syz [ 1221.390838][T18409] usb 6-1: SerialNumber: syz [ 1221.401054][T18409] usb 6-1: config 0 descriptor?? [ 1221.524383][T18409] usb_ehset_test 6-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1222.093054][T18409] usb 6-1: USB disconnect, device number 74 [ 1222.640654][T19087] Bluetooth: hci5: command 0x0406 tx timeout [ 1222.700509][T19170] sp0: Synchronizing with TNC [ 1223.969014][ T5901] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1224.006036][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1224.110227][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1224.122074][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1224.137346][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1224.168460][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1224.177072][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1224.229387][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.321579][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.332007][ T5901] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1224.342751][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.357585][ T5901] usb 5-1: config 0 descriptor?? [ 1226.235195][ T5901] samsung 0003:0419:0001.0012: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 1226.267767][T19184] chnl_net:caif_netlink_parms(): no params data found [ 1226.399773][T19184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.409670][T19184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.424003][T19184] bridge_slave_0: entered allmulticast mode [ 1226.440144][T19184] bridge_slave_0: entered promiscuous mode [ 1226.470152][T19219] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 1226.486155][T19087] Bluetooth: hci0: command tx timeout [ 1226.495493][ T5901] usb 5-1: USB disconnect, device number 97 [ 1226.520031][T19184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.527516][T19184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.564107][T13837] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1226.602147][T19184] bridge_slave_1: entered allmulticast mode [ 1226.609852][T19184] bridge_slave_1: entered promiscuous mode [ 1226.633539][T19184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1226.644851][T19184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.709845][T19184] team0: Port device team_slave_0 added [ 1226.735663][T13837] usb 3-1: Using ep0 maxpacket: 8 [ 1226.735939][T19184] team0: Port device team_slave_1 added [ 1226.758402][T13837] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b7.70 [ 1226.785334][T13837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.798887][T19184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1226.805976][T13837] usb 3-1: Product: syz [ 1226.806000][T13837] usb 3-1: Manufacturer: syz [ 1226.806017][T13837] usb 3-1: SerialNumber: syz [ 1226.807541][T13837] usb 3-1: config 0 descriptor?? [ 1226.812176][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1226.861018][T19184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.871472][T13837] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1226.879639][T19184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.897760][T19184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1227.078277][T19184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.262077][T13837] usb 3-1: USB disconnect, device number 95 [ 1227.360093][T19184] hsr_slave_0: entered promiscuous mode [ 1227.376257][T19184] hsr_slave_1: entered promiscuous mode [ 1227.448592][T19184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.538426][T19184] Cannot create hsr debugfs directory [ 1228.048730][T19232] sp0: Synchronizing with TNC [ 1228.680187][T19243] raw_sendmsg: syz.1.3459 forgot to set AF_INET. Fix it! [ 1228.680255][T19184] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.734222][T19087] Bluetooth: hci0: command tx timeout [ 1228.831456][T19184] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.946535][T19184] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.078040][T19184] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1229.125499][ T29] audit: type=1400 audit(1735104155.161:1535): avc: denied { write } for pid=19244 comm="syz.6.3462" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1229.202574][ T29] audit: type=1400 audit(1735104155.161:1536): avc: denied { open } for pid=19244 comm="syz.6.3462" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1229.304950][T19184] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1229.337343][T19184] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1229.360357][T19184] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1229.384836][T19184] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1229.509868][T19184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.537610][T19184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.559790][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.566984][ T9180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.584950][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.592135][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.854494][T19184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.953488][T19087] Bluetooth: hci0: command tx timeout [ 1231.096915][ T5901] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1231.237418][T19282] xt_bpf: check failed: parse error [ 1231.260167][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.271805][ T5901] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.539989][ T5901] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1231.549180][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.558841][ T5901] usb 7-1: config 0 descriptor?? [ 1231.692439][ T29] audit: type=1326 audit(1735104157.555:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6d185d29 code=0x7ffc0000 [ 1231.776371][ T29] audit: type=1326 audit(1735104157.555:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6d185d29 code=0x7ffc0000 [ 1231.777889][T19184] veth0_vlan: entered promiscuous mode [ 1231.830709][ T29] audit: type=1326 audit(1735104157.583:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f6d185d29 code=0x7ffc0000 [ 1231.833831][T19184] veth1_vlan: entered promiscuous mode [ 1231.884408][ T29] audit: type=1326 audit(1735104157.583:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6d185d29 code=0x7ffc0000 [ 1231.894319][T19184] veth0_macvtap: entered promiscuous mode [ 1231.930444][T19184] veth1_macvtap: entered promiscuous mode [ 1231.948473][ T29] audit: type=1326 audit(1735104157.583:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6d185d29 code=0x7ffc0000 [ 1231.955178][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.997207][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.997382][ T29] audit: type=1326 audit(1735104157.583:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3f6d185d29 code=0x7ffc0000 [ 1232.007341][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.086239][ T29] audit: type=1326 audit(1735104157.583:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f6d185d29 code=0x7ffc0000 [ 1232.117467][ T5901] hid (null): bogus close delimiter [ 1232.130019][ T29] audit: type=1326 audit(1735104157.583:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19285 comm="syz.1.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f6d185d29 code=0x7ffc0000 [ 1232.195471][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.227756][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.249335][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.275940][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.312230][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.336910][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.351834][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.365218][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.384155][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.399023][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.422992][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.444253][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.462081][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.472817][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.495994][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.509002][T19184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.536950][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.578665][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.593629][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.606991][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.617005][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.633845][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.636512][T19303] syz.4.3479[19303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.648115][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.653369][T19303] syz.4.3479[19303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.659864][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.690679][T19303] syz.4.3479[19303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.692938][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.715748][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.726103][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.736888][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.747742][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.758588][ T5901] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0013/input/input162 [ 1232.766698][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.781263][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.792036][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.802521][T19184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.822028][T19184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.833968][ T5901] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0013/input/input163 [ 1232.853417][T19184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.875073][T19184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.884948][ T5901] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0013/input/input164 [ 1232.899119][T19184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.911055][ T5901] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0013/input/input165 [ 1232.933455][T19184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.943141][T19184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.960142][ T5901] uclogic 0003:256C:006D.0013: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 1232.973800][T19303] bridge: RTM_NEWNEIGH with invalid ether address [ 1233.004616][ T5901] usb 7-1: USB disconnect, device number 101 [ 1233.106839][T17024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.114707][T17024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.145548][ T6635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.160306][ T5827] Bluetooth: hci0: command tx timeout [ 1233.168001][T19313] cgroup: Unknown subsys name 'cpuset' [ 1233.179389][ T6635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.875163][T19338] SELinux: syz.6.3494 (19338) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1234.884269][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 1234.884286][ T29] audit: type=1326 audit(1735104160.530:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1234.919739][ T29] audit: type=1326 audit(1735104160.530:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1234.943278][ T29] audit: type=1326 audit(1735104160.530:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1234.967113][ T29] audit: type=1326 audit(1735104160.530:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1234.991212][ T29] audit: type=1326 audit(1735104160.530:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1235.014838][ T29] audit: type=1326 audit(1735104160.530:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1235.039778][ T29] audit: type=1326 audit(1735104160.530:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1235.063740][ T29] audit: type=1326 audit(1735104160.530:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1235.087338][ T29] audit: type=1326 audit(1735104160.595:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1235.111243][ T29] audit: type=1326 audit(1735104160.595:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19337 comm="syz.5.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bd385d29 code=0x7ffc0000 [ 1235.300397][T19350] syzkaller0: entered promiscuous mode [ 1235.305928][T19350] syzkaller0: entered allmulticast mode [ 1235.476360][ T5867] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 1235.667891][ T5867] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1235.758369][ T5867] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1235.865957][ T5867] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1235.926628][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1235.958317][ T5867] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1235.967616][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.976025][ T5867] usb 3-1: Manufacturer: К [ 1235.980723][ T5867] usb 3-1: SerialNumber: ᰉ [ 1236.439641][ T5867] usb 3-1: 0:2 : does not exist [ 1236.463834][ T5867] usb 3-1: USB disconnect, device number 96 [ 1237.132664][T19378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=63 sclass=netlink_tcpdiag_socket pid=19378 comm=syz.6.3508 [ 1237.145930][T19378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19378 comm=syz.6.3508 [ 1238.077840][T19393] xt_NFQUEUE: number of total queues is 0 [ 1238.366737][ T51] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1239.556139][T19087] Bluetooth: hci1: sending frame failed (-49) [ 1239.567593][ T5827] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 1239.577759][T19399] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1240.232090][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1240.232112][ T29] audit: type=1326 audit(1735104165.544:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.6.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1240.470591][ T51] usb 6-1: device descriptor read/all, error -71 [ 1240.927697][T19415] tipc: Enabling of bearer rejected, failed to enable media [ 1241.703468][ T5901] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1242.709354][T19436] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1242.718989][T19436] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1242.858094][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.037900][ T5901] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1243.049269][ T29] audit: type=1326 audit(1735104168.163:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.457068][ T29] audit: type=1326 audit(1735104168.163:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.592603][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=c141, bcdDevice= 0.00 [ 1243.601792][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.611495][ T5901] usb 2-1: config 0 descriptor?? [ 1243.624691][ T29] audit: type=1326 audit(1735104168.163:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.657024][ T29] audit: type=1326 audit(1735104168.163:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.680978][ T29] audit: type=1326 audit(1735104168.163:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.704702][ T29] audit: type=1326 audit(1735104168.163:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.728396][ T29] audit: type=1326 audit(1735104168.163:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.752048][ T29] audit: type=1326 audit(1735104168.163:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.777264][ T29] audit: type=1326 audit(1735104168.163:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19441 comm="syz.6.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f040b185d29 code=0x7ffc0000 [ 1243.910913][T19453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1244.278513][T18461] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1244.440280][T18461] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1244.451638][ T51] usb 2-1: USB disconnect, device number 83 [ 1244.453948][T18461] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1244.493706][T18461] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1244.505241][T18461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.529233][T18461] usb 7-1: Product: syz [ 1244.540411][T18461] usb 7-1: Manufacturer: syz [ 1244.550942][T18461] usb 7-1: SerialNumber: syz [ 1244.564212][T18461] usb 7-1: config 0 descriptor?? [ 1244.570698][T19456] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1244.584323][T19456] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1244.814663][T19456] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1244.822010][T19456] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1244.889469][T19479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3545'. [ 1244.899054][T19479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3545'. [ 1245.273376][T18461] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1245.496094][T18461] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1245.509935][T18461] usb 7-1: USB disconnect, device number 102 [ 1245.641960][T19490] pim6reg1: entered promiscuous mode [ 1245.647620][T19490] pim6reg1: entered allmulticast mode [ 1358.186687][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1358.193663][ C1] rcu: 0-...!: (1 ticks this GP) idle=56e4/1/0x4000000000000000 softirq=88432/88433 fqs=0 [ 1358.205523][ C1] rcu: (detected by 1, t=10505 jiffies, g=74397, q=231 ncpus=2) [ 1358.213254][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1358.213283][ C0] NMI backtrace for cpu 0 [ 1358.213293][ C0] CPU: 0 UID: 0 PID: 19486 Comm: syz.1.3544 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 1358.213311][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1358.213320][ C0] RIP: 0010:__lock_acquire+0x22c/0x3c40 [ 1358.213342][ C0] Code: 74 54 f6 84 24 48 01 00 00 01 75 4a 4e 8d 74 3e d8 48 ba 00 00 00 00 00 fc ff df 49 8d 7e 20 48 89 fe 48 c1 ee 03 0f b6 14 16 <84> d2 74 09 80 fa 03 0f 8e d0 12 00 00 41 0f b7 56 20 8b 7c 24 20 [ 1358.213356][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00000802 [ 1358.213370][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 1358.213379][ C0] RDX: 0000000000000000 RSI: 1ffff1100879aa70 RDI: ffff888043cd5380 [ 1358.213390][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 1358.213399][ C0] R10: 0000000000000005 R11: 0000000000000001 R12: ffffffff8e1bb900 [ 1358.213408][ C0] R13: ffff888043cd4880 R14: ffff888043cd5360 R15: 0000000000000028 [ 1358.213419][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1358.213435][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1358.213446][ C0] CR2: 0000000020003c80 CR3: 000000003d6fa000 CR4: 00000000003526f0 [ 1358.213456][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1358.213465][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1358.213475][ C0] Call Trace: [ 1358.213482][ C0] [ 1358.213490][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1358.213509][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1358.213524][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1358.213540][ C0] ? __lock_acquire+0x22c/0x3c40 [ 1358.213556][ C0] ? default_do_nmi+0x6a/0x160 [ 1358.213571][ C0] ? exc_nmi+0x170/0x1e0 [ 1358.213584][ C0] ? end_repeat_nmi+0xf/0x53 [ 1358.213607][ C0] ? __lock_acquire+0x22c/0x3c40 [ 1358.213623][ C0] ? __lock_acquire+0x22c/0x3c40 [ 1358.213639][ C0] ? __lock_acquire+0x22c/0x3c40 [ 1358.213654][ C0] [ 1358.213659][ C0] [ 1358.213668][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1358.213684][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1358.213701][ C0] lock_acquire.part.0+0x11b/0x380 [ 1358.213717][ C0] ? advance_sched+0x679/0xc60 [ 1358.213734][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1358.213750][ C0] ? rcu_is_watching+0x12/0xc0 [ 1358.213771][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1358.213792][ C0] ? advance_sched+0x679/0xc60 [ 1358.213807][ C0] ? lock_acquire+0x2f/0xb0 [ 1358.213821][ C0] ? advance_sched+0x679/0xc60 [ 1358.213836][ C0] advance_sched+0x67f/0xc60 [ 1358.213851][ C0] ? advance_sched+0x679/0xc60 [ 1358.213868][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1358.213883][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 1358.213908][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1358.213927][ C0] ? read_tsc+0x9/0x20 [ 1358.213949][ C0] hrtimer_interrupt+0x392/0x8e0 [ 1358.213972][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1358.213991][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1358.214011][ C0] [ 1358.214017][ C0] [ 1358.214022][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1358.214042][ C0] RIP: 0010:unwind_next_frame+0xd95/0x20c0 [ 1358.214061][ C0] Code: 8d 78 20 e8 6d e8 ff ff 49 8d 7d 40 48 89 fa 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 ff 0e 00 00 <49> 89 6d 40 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 0f [ 1358.214075][ C0] RSP: 0018:ffffc900033e7548 EFLAGS: 00000246 [ 1358.214089][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc900033e8000 [ 1358.214100][ C0] RDX: 1ffff9200067cebf RSI: ffffc900033e7f10 RDI: ffffc900033e75f8 [ 1358.214111][ C0] RBP: ffffc900033e7f48 R08: ffffc900033e75ec R09: ffffffff91a3e6a8 [ 1358.214121][ C0] R10: ffffc900033e75b8 R11: 00000000000a29bd R12: ffffc900033e7608 [ 1358.214131][ C0] R13: ffffc900033e75b8 R14: ffffc900033e7f28 R15: ffffc900033e7f20 [ 1358.214146][ C0] ? unwind_next_frame+0x15f1/0x20c0 [ 1358.214162][ C0] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 1358.214181][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1358.214203][ C0] arch_stack_walk+0x95/0x100 [ 1358.214224][ C0] ? do_syscall_64+0xda/0x250 [ 1358.214252][ C0] stack_trace_save+0x95/0xd0 [ 1358.214273][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1358.214293][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1358.214309][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1358.214325][ C0] kasan_save_stack+0x33/0x60 [ 1358.214342][ C0] ? kasan_save_stack+0x33/0x60 [ 1358.214356][ C0] ? kasan_save_track+0x14/0x30 [ 1358.214371][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1358.214391][ C0] ? __kasan_slab_free+0x51/0x70 [ 1358.214406][ C0] ? kmem_cache_free+0x152/0x4c0 [ 1358.214422][ C0] ? remove_vma+0x154/0x1b0 [ 1358.214437][ C0] ? exit_mmap+0x4e2/0xb20 [ 1358.214452][ C0] ? __mmput+0x12a/0x4c0 [ 1358.214467][ C0] ? mmput+0x62/0x70 [ 1358.214482][ C0] ? do_exit+0x9ba/0x2d70 [ 1358.214501][ C0] ? do_group_exit+0xd3/0x2a0 [ 1358.214519][ C0] ? get_signal+0x24ed/0x26c0 [ 1358.214537][ C0] ? arch_do_signal_or_restart+0x90/0x7e0 [ 1358.214556][ C0] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 1358.214586][ C0] kasan_save_track+0x14/0x30 [ 1358.214601][ C0] kasan_save_free_info+0x3b/0x60 [ 1358.214621][ C0] __kasan_slab_free+0x51/0x70 [ 1358.214637][ C0] kmem_cache_free+0x152/0x4c0 [ 1358.214652][ C0] ? remove_vma+0x154/0x1b0 [ 1358.214669][ C0] remove_vma+0x154/0x1b0 [ 1358.214686][ C0] exit_mmap+0x4e2/0xb20 [ 1358.214701][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1358.214718][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1358.214740][ C0] __mmput+0x12a/0x4c0 [ 1358.214756][ C0] mmput+0x62/0x70 [ 1358.214772][ C0] do_exit+0x9ba/0x2d70 [ 1358.214792][ C0] ? get_signal+0x8f7/0x26c0 [ 1358.214809][ C0] ? __pfx_do_exit+0x10/0x10 [ 1358.214828][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1358.214845][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1358.214865][ C0] do_group_exit+0xd3/0x2a0 [ 1358.214884][ C0] get_signal+0x24ed/0x26c0 [ 1358.214903][ C0] ? do_user_addr_fault+0xdc7/0x13f0 [ 1358.214919][ C0] ? reacquire_held_locks+0x20b/0x4c0 [ 1358.214935][ C0] ? __pfx_get_signal+0x10/0x10 [ 1358.214955][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 1358.214974][ C0] ? do_user_addr_fault+0xe50/0x13f0 [ 1358.214989][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1358.215011][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1358.215028][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 1358.215046][ C0] do_syscall_64+0xda/0x250 [ 1358.215064][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.215083][ C0] RIP: 0033:0x7f3f6d185d29 [ 1358.215094][ C0] Code: Unable to access opcode bytes at 0x7f3f6d185cff. [ 1358.215101][ C0] RSP: 002b:00007f3f6df9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1358.215115][ C0] RAX: 0000000000010106 RBX: 00007f3f6d376080 RCX: 00007f3f6d185d29 [ 1358.215125][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1358.215135][ C0] RBP: 00007f3f6d201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1358.215144][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1358.215154][ C0] R13: 0000000000000001 R14: 00007f3f6d376080 R15: 00007fff82c601e8 [ 1358.215168][ C0] [ 1358.215278][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g74397 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1358.922656][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1358.932623][ C1] rcu: RCU grace-period kthread stack dump: [ 1358.938508][ C1] task:rcu_preempt state:R running task stack:27744 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1358.950268][ C1] Call Trace: [ 1358.953545][ C1] [ 1358.956481][ C1] __schedule+0xe58/0x5ad0 [ 1358.960914][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1358.966126][ C1] ? __pfx___schedule+0x10/0x10 [ 1358.970982][ C1] ? schedule+0x298/0x350 [ 1358.975316][ C1] ? __pfx_lock_release+0x10/0x10 [ 1358.980352][ C1] ? lock_acquire+0x2f/0xb0 [ 1358.984855][ C1] ? schedule+0x1fd/0x350 [ 1358.989187][ C1] schedule+0xe7/0x350 [ 1358.993259][ C1] schedule_timeout+0x124/0x280 [ 1358.998114][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1359.003577][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1359.008875][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1359.014683][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1359.020146][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1359.024918][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1359.030206][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1359.034884][ C1] ? lock_acquire+0x2f/0xb0 [ 1359.039386][ C1] ? finish_swait+0xc5/0x280 [ 1359.043982][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1359.049795][ C1] rcu_gp_kthread+0x271/0x380 [ 1359.054490][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1359.059691][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1359.064898][ C1] ? __kthread_parkme+0x148/0x220 [ 1359.069930][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1359.075137][ C1] kthread+0x2c1/0x3a0 [ 1359.079211][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1359.084410][ C1] ? __pfx_kthread+0x10/0x10 [ 1359.089041][ C1] ret_from_fork+0x45/0x80 [ 1359.093458][ C1] ? __pfx_kthread+0x10/0x10 [ 1359.098074][ C1] ret_from_fork_asm+0x1a/0x30 [ 1359.102860][ C1] [ 1359.105875][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1359.112191][ C1] CPU: 1 UID: 0 PID: 6635 Comm: kworker/u8:11 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 1359.123122][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1359.133220][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1359.139743][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 1359.146425][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ba 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 1359.166078][ C1] RSP: 0018:ffffc90005207998 EFLAGS: 00000293 [ 1359.172172][ C1] RAX: 0000000000000000 RBX: ffff8880b86469c0 RCX: ffffffff818e071c [ 1359.180169][ C1] RDX: ffff88802c438000 RSI: ffffffff818e06f6 RDI: 0000000000000005 [ 1359.188139][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1359.196107][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d39 [ 1359.204076][ C1] R13: 0000000000000001 R14: ffff8880b86469c8 R15: ffff8880b873fe40 [ 1359.212044][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1359.220973][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1359.227559][ C1] CR2: 00007fb8ddaf7f98 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 1359.235535][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1359.243509][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1359.251498][ C1] Call Trace: [ 1359.254777][ C1] [ 1359.257624][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1359.263977][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1359.269184][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1359.274666][ C1] ? timekeeping_advance+0x72e/0xa90 [ 1359.279950][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1359.285594][ C1] ? __asan_memcpy+0x3c/0x60 [ 1359.290212][ C1] ? rcu_is_watching+0x12/0xc0 [ 1359.295009][ C1] ? update_process_times+0x178/0x2d0 [ 1359.300412][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1359.306148][ C1] ? update_wall_time+0x1c/0x40 [ 1359.311003][ C1] ? tick_nohz_handler+0x376/0x530 [ 1359.316127][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1359.321598][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1359.326985][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1359.332709][ C1] ? read_tsc+0x9/0x20 [ 1359.336792][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 1359.341921][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1359.348082][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1359.353922][ C1] [ 1359.356854][ C1] [ 1359.359784][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1359.365952][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 1359.372025][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 1359.378098][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 1359.384171][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 1359.390244][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1359.395276][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1359.400299][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1359.405420][ C1] text_poke_bp_batch+0x22b/0x760 [ 1359.410456][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1359.416006][ C1] ? __jump_label_patch+0x1db/0x400 [ 1359.421274][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1359.427559][ C1] text_poke_finish+0x30/0x40 [ 1359.432261][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1359.438251][ C1] jump_label_update+0x1d7/0x400 [ 1359.443201][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 1359.449102][ C1] static_key_enable+0x1a/0x20 [ 1359.453879][ C1] toggle_allocation_gate+0xfc/0x260 [ 1359.459165][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1359.465056][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 1359.470262][ C1] ? process_one_work+0x921/0x1ba0 [ 1359.475374][ C1] ? lock_acquire+0x2f/0xb0 [ 1359.479881][ C1] ? process_one_work+0x921/0x1ba0 [ 1359.484993][ C1] process_one_work+0x9c5/0x1ba0 [ 1359.489939][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1359.496091][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1359.501463][ C1] ? rcu_is_watching+0x12/0xc0 [ 1359.506255][ C1] ? assign_work+0x1a0/0x250 [ 1359.510847][ C1] worker_thread+0x6c8/0xf00 [ 1359.515445][ C1] ? __kthread_parkme+0x148/0x220 [ 1359.520474][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1359.525584][ C1] kthread+0x2c1/0x3a0 [ 1359.529658][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1359.534856][ C1] ? __pfx_kthread+0x10/0x10 [ 1359.539621][ C1] ret_from_fork+0x45/0x80 [ 1359.544035][ C1] ? __pfx_kthread+0x10/0x10 [ 1359.548627][ C1] ret_from_fork_asm+0x1a/0x30 [ 1359.553412][ C1]