last executing test programs: 4m36.856967808s ago: executing program 1 (id=176): syz_open_dev$MSR(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x3, 0x6, &(0x7f000004c240)=""/102346, 0x0) (async) fanotify_init(0x79, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', <r2=>0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1805b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9) (async) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@mcast1, @private0, @mcast2, 0x40000, 0x44, 0x5, 0x100, 0x808, 0x40008, r2}) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x8d, &(0x7f0000000100)=""/141, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) open(&(0x7f0000000380)='./bus\x00', 0x143142, 0x0) (async) mount(&(0x7f0000000340)=@sg0, &(0x7f0000000280)='./bus\x00', 0x0, 0x1000, &(0x7f0000000300)='trans=rdma,') bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e31, 0x0, @private0, 0xffffffff}, 0x1c) 4m35.517280551s ago: executing program 1 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000000) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x44}}) io_uring_enter(r3, 0x47f4, 0x0, 0x40, 0x0, 0x0) 4m32.507485031s ago: executing program 1 (id=189): r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000380)=""/95, 0x5f}], 0x1) unshare(0x2040400) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xb) copy_file_range(r6, &(0x7f0000000080), r5, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) write$eventfd(r2, &(0x7f0000000280)=0x9, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = syz_open_dev$vim2m(&(0x7f0000000240), 0x58, 0x2) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="17fa", 0x2}], 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 4m31.789785817s ago: executing program 1 (id=194): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @remote, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000880, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pipe(&(0x7f0000019480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r4 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x2, {}, 0x884d4e09817961eb}, 0x18) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x1004}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) r6 = socket$inet(0x2, 0x3, 0x4) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x40, 0x15, 0x5, "474b95f903"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x3}, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x17, 0x6, @random="61b704f8efc1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) getpid() mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) 4m29.077825955s ago: executing program 1 (id=201): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x4470, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x4440, 0x2, [@TCA_BASIC_POLICE={0x86c, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3d6, 0x80, 0x6, 0x6, 0x1, 0x80, 0x9, 0x0, 0x0, 0x7, 0x400, 0x5, 0x7ff, 0x2, 0x5, 0xffffffff, 0x7, 0x8000, 0x7, 0x5, 0x0, 0x8, 0x8001, 0x8001, 0x6, 0xfffffff9, 0x9, 0x3, 0xf, 0x9af, 0x10001, 0xfffffffe, 0x7, 0x5, 0x2, 0x401, 0x6, 0x7, 0x2, 0x9, 0x7, 0x5, 0xc00, 0x7fff, 0x3, 0xc, 0x6, 0x8, 0x1, 0x8, 0x7ae, 0x101, 0x3, 0x7, 0x6, 0x3, 0x5, 0xc6e, 0x730, 0x7, 0x2, 0x4, 0xfffffff8, 0x800, 0x9, 0x3ff, 0x5, 0xa, 0xfffffffb, 0x8, 0x0, 0xcf, 0x9, 0x400, 0xe, 0x7, 0x1, 0x0, 0x9, 0xc4, 0x7ff, 0x5, 0x8, 0x1, 0x6, 0x6, 0x1, 0x2, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x5, 0x3, 0xded3, 0x10000, 0x632, 0x6, 0x6, 0x400, 0x7ff, 0xfff, 0x6, 0x7, 0x5, 0x7f, 0x2, 0xfff, 0xc66e, 0x137, 0xffe0, 0xffffff95, 0xfc4a, 0x12afd141, 0x59e, 0x1, 0x3ff, 0x5, 0x10, 0xd43, 0xc, 0x7fff, 0x1ff, 0x9, 0x9, 0xf2, 0x10a, 0xf9b8, 0x5, 0xa, 0x1, 0xc46, 0x3, 0x1308, 0x2, 0x8, 0xffff, 0x5, 0x6, 0x81, 0x7, 0xdc83, 0x8, 0x9, 0xd, 0x2, 0xc, 0x7, 0x3, 0x7, 0x5, 0x0, 0x4, 0xfffffffc, 0x9, 0x1, 0x4, 0x6, 0xfffffffa, 0x3, 0x80, 0x0, 0x4, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x71, 0x0, 0x6, 0x7, 0x2800, 0x5, 0x7f, 0x1000, 0x0, 0x6, 0x4, 0x10, 0x4, 0x732, 0xa7, 0x0, 0xfff, 0x27, 0x9, 0x90, 0xca44, 0x1, 0xffffff91, 0x3, 0x4689, 0x4, 0x1, 0x2, 0x8, 0x401, 0x7, 0x6, 0x100, 0x1, 0x3, 0x9, 0xffff, 0x288, 0x72800, 0xfffffffa, 0x8, 0xd, 0x3, 0x4, 0xa, 0x538, 0xffffffff, 0x7, 0x9, 0x10, 0xd, 0x8, 0x7, 0x2, 0x1, 0x2, 0x8, 0x6, 0x800, 0xb4b, 0x800, 0x4, 0x4, 0x6, 0x9, 0x800, 0xff, 0x3, 0x7, 0x3, 0x1200, 0xba, 0x8, 0x9, 0x5, 0x4, 0x6, 0xb, 0x3, 0x2, 0xfffffff9, 0x8, 0x8c32, 0xffffffff, 0x5, 0x2, 0x3, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff00000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x6, 0x400, 0x9, 0xffff, {0x8, 0x0, 0x1800, 0x7e18, 0x8, 0x8}, {0x9, 0x3, 0x6, 0xfffe, 0x7ff, 0x7}, 0x1, 0x4, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4bc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa0b, 0x5, 0xacc, 0x61b, 0x6, 0xa3, 0x7, 0xfffffff8, 0x4, 0xc5a, 0x3, 0xc, 0xf, 0xc41, 0x2, 0x7, 0x0, 0x5, 0x3, 0x5, 0xfff, 0x3ff, 0x7, 0x401, 0x57f, 0x7, 0x3, 0x10000, 0x3, 0x2, 0x5, 0x1, 0x8, 0x10001, 0x400, 0x101, 0x3, 0x2, 0x6, 0x0, 0x8, 0x4, 0xd789, 0xff, 0x8, 0xdff1, 0x200, 0x8, 0x200, 0x88, 0x7, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x1ff, 0x401, 0xc, 0xb97e, 0x4, 0xb9, 0x9, 0x1ff, 0x5, 0xf204, 0x5, 0x2, 0x101, 0x2, 0x2, 0x8, 0xfe, 0xb2f6, 0x8, 0x1, 0x6a8, 0x8001, 0x7, 0x152b224a, 0x4, 0x7ff, 0x1, 0x3, 0x9, 0x7, 0x3, 0x4, 0x9, 0x5, 0x4a50, 0x9, 0x0, 0xffff, 0xc6, 0x4, 0x5, 0x7, 0xc6, 0xfb, 0x4, 0x80000000, 0x7, 0x3, 0x5, 0x5, 0xb18, 0x0, 0x7, 0xe4db, 0xfffffff7, 0x80, 0x0, 0x9, 0x6, 0x800, 0x128, 0x7f, 0x200, 0x4, 0x1, 0x9, 0x0, 0x9, 0x1, 0xffff, 0x2, 0x7fffffff, 0x4, 0xfff, 0x6, 0x79, 0x9, 0x8, 0x7e, 0xb, 0x80000000, 0x3ff, 0x200, 0x6, 0x10000, 0x0, 0x8, 0x5, 0x8000, 0x8, 0x1ff, 0x8, 0x6, 0x5, 0x5, 0x5f8, 0x100, 0x4, 0xd, 0x9, 0xb51, 0x1, 0x9, 0x0, 0x6, 0x5, 0x1016, 0x1, 0x5, 0x3, 0x8, 0x2, 0xb, 0x3b5b3dce, 0x3, 0x8, 0xd, 0xf1e, 0x2, 0x67a, 0x8, 0x200000, 0x2, 0x0, 0xe3ab, 0x5, 0xffffa988, 0x7a0c, 0x7, 0x4, 0x8, 0x4, 0x0, 0x7, 0x6, 0x8, 0x7fffffff, 0x80000001, 0x6a, 0x1, 0x8, 0x2, 0x39, 0x9, 0x3, 0x7, 0x6, 0x3, 0xc00000, 0x80, 0x5, 0x0, 0xfffffff5, 0x6, 0x6, 0xfff, 0x7, 0x9, 0x4d4f3ca6, 0x9, 0x17f, 0x7, 0x3, 0x7, 0x7, 0x300000, 0xffffff92, 0x10001, 0x3, 0x7ff, 0x2, 0x4, 0x0, 0x8237, 0x6, 0x0, 0x5b, 0x8, 0xc78, 0x6, 0x0, 0x28b560a5, 0x80, 0x9, 0x2b, 0x7, 0x5, 0x4, 0x9, 0x4, 0xaee, 0x1ff, 0x9ad, 0x0, 0x7fffffff, 0x2, 0x2, 0x80000001, 0x1ff, 0x8]}]}, @TCA_BASIC_EMATCHES={0x390, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x188, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x2, 0x0, 0xd}, "615a6948ec0b1f92fa7ee56c9f9f5dbca333af87b1"}}, @TCF_EM_IPT={0xa8, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x58, 0x5, "f9aaf824f4d548ce1c1d8ee2ee6131579316cdf277fded38e2124ea11fcf5b910377ae6e4e82fbdd34a92403dd81c5005ed9a4fe17ef4d7ee507b8f6240ac7764a1a43d6198a38a4320a2bd1de4b4dc985f1d2ba"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xe}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8000, 0x3, 0x10}, {0x1, 0x3ff, 0x4, 0xfffffff8}}}, @TCF_EM_IPT={0x80, 0x1, 0x0, 0x0, {{0xa, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x54, 0x5, "dbca5eaaad7fa62977bf2612b126adc97a9e5c0229aa8e4a758cc6012850636e13495dacfa043fcc04c6d3bdd2cd7e4a3b6ba060b055feed7267f841cdf333deb9a4f2ac922690ac990e19b290873af4"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xaa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x7f}, {0x2, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x3, 0x0, 0x0, {{0x2, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="4bdd", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x80, 0x2}, {0x9, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0xff, 0x2}, {0x4, 0x9a}}}]}}, @TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0xc, 0x0, 0xc551}, "9d9c4e2b05a4e476f921e7e96293f4072b0adb45bb0507406f745d00e390b7d2283c2464078d0b68d62fce106045c472514366baa4de6fc8f62d85bf7ebe300488539105956193ce2531fca6696199a317abd0d7654b414c68019ef0f50c8817ecd189aa508b646afabf5a7ac96ddfa19caca473e110f0b0bbece5b2c94c703e435e05f0c3d91dbb6c145e852145264a6c62e38891294efef3404725529d7d29a2637ed66bd40846b5fec4d75ecc4504ba188c4c32ea7e6452b1a0aba8d7ead6c12951fcab81975a28ccce36ab81e94556a1ddb5b205b5ea8e19e9df25871e790798be1bd1005e82e36ad1aa2b9acab656c0009423bc2fee"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2}, {0x7, 0x3, 0x1, 0x0, 0x4, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0xa3}, {0x4, 0x3}}}, @TCF_EM_IPT={0x8c, 0x1, 0x0, 0x0, {{0xf, 0x9, 0x65}, [@TCA_EM_IPT_MATCH_DATA={0x66, 0x5, "abe60738f4678cf5f99f9b47aac148532197dbea741b0331e0e082c0acbed8007a012cd6d8a1a39d1d607f68f22c4e5fe4e261b6e028bec2f50bdfbfa53f1a0654d5180ae538f84d02a0d1ee8db9e779a52a48f1e445be9ba4d3ba5faa45cd901037"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb1}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0xffe0}}, @TCA_BASIC_EMATCHES={0x1650, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x128c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0xe1, 0x10, 0xc, 0x8}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x2, 0x2, 0xc8d1}, {0x7, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0xd}, {0x4, 0x0, 0x4}}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x6}, "3f6beedd88cd92326c393471c24e5c26d253c6f27690b2391b2b690a2bf6aacfb4b2c832f3255fc25b719c6248c1fb4bb8fa99891551cebbd2f4366e5690b86d28f6"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x7}, {0x2, 0x4, 0x2}}}, @TCF_EM_CONTAINER={0x74, 0x1, 0x0, 0x0, {{0x400, 0x0, 0xa}, "afff9aefb5fb49e60582abced6aa85d3f5d96b1f7091252efb240de99c7cef9f0088542feaa24901ac876e51bde193edf3060bd2c5f7d9865c8dc65706dd48fae892554f615725bbc8fb41f2a4433b37243189ccfe146846913b5f60e45135be819966fcc65b8d1c"}}, @TCF_EM_CONTAINER={0x100c, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x9f}, "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"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xffff, 0x1, 0xffff}, {0xff, 0x4, 0x1, 0x4, 0xc, 0x2, 0x1}}}, @TCF_EM_IPT={0x58, 0x2, 0x0, 0x0, {{0x1, 0x9, 0xa}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_IPT={0xfc, 0x3, 0x0, 0x0, {{0xe0a4, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_DATA={0xae, 0x5, "a4e9932e6e0ffbc9435c14202e398993cb53d2979ae8f734164eb47a3c6c58075f3c06826d8d0f1bb72a0d76b6f989eff657fd3dd7ef5de351496b87e1da31b28878984872fee20e6674895e742d3b68200a1b0c2b579054d7f5a5ab92c4541cc8be48189029c2554391ff39e758a027912e34dff51d0ea869ead693ea45ab7574c45a7eccf32da6d77e8a9de7b65afa96663a7b44faf9ff6ec3fd1251901fb6185bde55891e36fdb11c"}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x6}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xf, 0x8, 0x4000}, {0x4, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x7c, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x2f, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b955", @TCF_META_TYPE_VAR="f56fe8635ea8", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="260620709b9b14476ff4", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="1dfd3a1157"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="eeab169bd8", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_CONTAINER={0x5c, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x5}, "32b1726d95f5ebfdcc28f0cf64e6dd145a559622bb00574fd4486df05610edc8ec8b5312d78b1ed7a877e59576fd5945e93025a114b22d9043348abb1c057c90bec739571603ab6bded77062ed"}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0xa75c}, {0x3ff, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x800, 0x8, 0x7}, {0x0, 0x4}}}, @TCF_EM_META={0x90, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x3260}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x1}, {0x2, 0x5}}}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR='RP', @TCF_META_TYPE_VAR="3b1c86", @TCF_META_TYPE_VAR="dd4746a2", @TCF_META_TYPE_VAR="7e74d24d70a019b87c10", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="7be0edefbc229e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7, 0x2}, {0xff81, 0x7c}}}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="f3be", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x7, 0x2}, {0x889, 0x8f, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x1, 0x2}, {0x318, 0x6}}}]}}]}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x1, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_CONTAINER={0x4c, 0x1, 0x0, 0x0, {{0x6, 0x0, 0x1}, "fd54c7df581d609876b3a8ba9c7a5d476912fe86241e6f1eb9a35ffe918e3735672a68730e853d43b3e2bd9facfdacbc31a5294a104f8508ffd7fc4a50eb937d"}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0xffff, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3a}]}}, @TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x800}, "534c4234a1589abc640c81e825738326fd1ed7624975609b89af9df872891787135c104d74f6e6245bfd3ecd1c5ddb68a77330f9d0e9bbdd22"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "11cf88a105f8ffea5b265b49d6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x18, 0x7, 0xfff9}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xf801, 0x7, 0x6b1}, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x74, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x7}, "688de1d28ec3301f947df61b2d5bd2cff2e644d2d4660c432272aa1ca46babd1f7dc3cfe786f343f42d859bf279545ad64394fa941f89c144ea42a9b079edc311ed8ffe20d8f75d33e43c0612fbe2585411c67c2f8ebf866229651180812171eefc10eb71270ac"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x9f3}, {0x1, 0x0, 0x7fb5, 0x7, 0x8}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4}, {{0x3, 0x0, 0x1}, {0x4}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xa, 0x7, 0x1ff}, {{0x3, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_POLICE={0x90, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x6, 0x9, 0x8, {0xa, 0x0, 0x1, 0x10, 0x2, 0xdd}, {0xa, 0x1, 0x1, 0x7f, 0x85, 0x6}, 0x8, 0x80, 0xd4d6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x6, 0xffff, 0x3, 0x1, {0x81, 0x0, 0x752f, 0x4, 0xcee2, 0x9}, {0xce, 0x0, 0xf10c, 0x1118, 0x2, 0xe5}, 0x9, 0x1, 0x2c}}]}, @TCA_BASIC_ACT={0x2150, 0x3, [@m_sample={0x114, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x401}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0xc5, 0x6, "ccfb34bb110d1c1888e7b4f3970ba9de5b98992c817d2454bd2439c974ba3ee6002d0859c749e8e90326704ea3e2bc1c0e00b0d1938ff4ce9b0d87229f0f41b021f36835964357fb50320597119bea9092bbb4f2b57e684929bea1bb01c72f2ba64ae9663eb1e529bfe3e2ae796fd1784f5e0ddf1c3bb3c2f23bb1a480a82116c37c78b8213dc5f98349669cca45ea6f944a8c5e967011b85eecec991f9e9bf3e6df5378dd36f50dd20d9c3b6f71515e27841a3df8f2948fb4c10677bce60d8e56"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x2}}}}, @m_vlan={0xbc, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x88, 0x6, "a507cf1796e9719f800f9f8743d90d8e3943b96e14943399a3cbc08ad6077df7bbb81fd599fe2964a9f396abe73be1a7f8a8ebe1a94f7ad369cd756ca056d4cad0056d8427f7422f18a4c6346bc00f890a35836b69f96a483786eece45dadebe136b3a3bcd3d1313bef319208e08359eba64cf16d80ccba1717276c56be2ca8945c07efb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1e78, 0x1d, 0x0, 0x0, {{0xa}, {0x1d94, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x0, 0x1, 0x0, 0x7fff}, 0x6, 0x0, [{0x6, 0xffff762e, 0xe201, 0x8, 0x0, 0x200}, {0x2, 0x9, 0x40, 0x401, 0x80, 0x8001}, {0x4, 0xa, 0x6, 0x8, 0x7, 0x5}, {0x8, 0xf, 0x4, 0x81, 0x4, 0x401}]}, [{0x3, 0x800, 0x0, 0x8, 0x3, 0x6}, {0x7, 0x3, 0x401, 0x3ff, 0x80000, 0x401}, {0xf, 0x10, 0x0, 0x1000, 0x10, 0x3}, {0x7, 0x40, 0x100, 0xfffffff0, 0x7f4, 0xc2}, {0xfffffff9, 0x7, 0x9, 0x0, 0x80, 0x9}, {0x1, 0x80000000, 0x4, 0x0, 0xe, 0xfffffff7}, {0x0, 0xe8e8, 0xffffff03, 0x3, 0x2, 0x7fff}, {0x6, 0x101, 0x41f, 0xffffffff, 0x1, 0x3}, {0x7, 0x51, 0x1eb68231, 0x419, 0x3a8, 0x6}, {0x2, 0x35, 0x2, 0xfffffffd, 0x294, 0x6}, {0x9c7, 0x7ff, 0x0, 0x8, 0x9, 0xec5}, {0x7, 0x3, 0x1, 0x401, 0x6c01, 0xd814}, {0xe, 0x5, 0x8001, 0x2d, 0xfffffffb, 0xffff}, {0x6, 0x3, 0x7, 0x600000, 0x2, 0x6}, {0xfffff12d, 0xff, 0x2, 0xe, 0x81, 0x8}, {0x6, 0xa, 0x5, 0x8, 0x8, 0x9}, {0x80000001, 0x8000, 0x3, 0x0, 0x3, 0x1}, {0x5, 0x4, 0x1c, 0xfffffff7, 0x9, 0x700}, {0x8, 0x1, 0x960, 0x3, 0x3}, {0x4, 0x80000001, 0x2f8c, 0x3ff, 0xff, 0x1}, {0xb, 0x5, 0x7fff, 0x40, 0x80000000, 0x7}, {0x7ff, 0x1, 0xe99, 0x6c79a80d, 0x7fff, 0x3}, {0x4, 0x8, 0xca4, 0x10000, 0x1, 0xb0}, {0x9, 0x7, 0x0, 0xff, 0x5, 0x40}, {0x10000, 0x2b, 0x4, 0x1ff, 0xf938, 0x7ff}, {0x3299, 0x4, 0x0, 0x7fffffff, 0x7, 0x5}, {0x1000, 0x8, 0x80, 0x1ff8, 0x40, 0x2}, {0x0, 0xffff6694, 0x100, 0x9, 0x0, 0x10}, {0xfb, 0x0, 0x1, 0x1, 0x10001, 0x8}, {0x3, 0x3, 0x4, 0xa, 0x7, 0x41}, {0x101, 0x1, 0x9, 0xaf, 0x7, 0x7}, {0x5, 0x1, 0xfffffffc, 0xd8, 0xfffffffb, 0x2}, {0xfc8, 0x3800, 0xffff, 0x6, 0x401, 0x1}, {0x4, 0x2, 0x44cb, 0x2, 0x5, 0x6}, {0x80000001, 0xfffffffc, 0x4, 0x2, 0xc, 0xb35e}, {0x3e3a4aed, 0x0, 0x8, 0x5, 0x7, 0x6d25}, {0xb, 0x2, 0x9, 0x8, 0xfffffffb, 0x7}, {0x8, 0x6, 0x7fffffff, 0x0, 0x0, 0x1d0}, {0x2, 0x400, 0x700, 0xffff7e30, 0xf7, 0x80000000}, {0x81, 0x3, 0xfda, 0x4, 0x6, 0xf}, {0x5, 0xff, 0x6, 0x9388, 0x80, 0x100}, {0x76b, 0x3, 0x8998, 0x2, 0x4, 0x6}, {0xa0ef, 0x8, 0x0, 0x1, 0x4, 0x813}, {0x0, 0x5, 0x2, 0x0, 0x3, 0x4}, {0x2, 0x2, 0x2, 0x7, 0x7, 0x8000}, {0xe9f335c8, 0xfffffff8, 0x3, 0xfffffff5, 0x5, 0x3}, {0x7f, 0x0, 0x0, 0x8, 0x0, 0x1a}, {0x0, 0x8, 0xffffff36, 0x40000, 0x8, 0x9}, {0xaee0, 0x6, 0x3, 0x7, 0x9, 0x5}, {0xfd5, 0x8, 0xa, 0x2, 0x6a4b29f1, 0x7}, {0x401, 0x7fff, 0x4, 0x3, 0xd0000, 0x7}, {0x6, 0xff, 0x14ee, 0x1, 0x4, 0x7}, {0x10001, 0x4, 0xffff, 0x6, 0x6, 0x8000}, {0x2, 0xffffa28a, 0x40, 0x3, 0xcfea, 0x9}, {0x80, 0xa, 0x9, 0xd, 0x6, 0x3ff}, {0xe, 0x6, 0x4, 0x0, 0x2, 0x6}, {0xfffffffe, 0x444, 0x8001, 0x180000, 0x3, 0x6}, {0x8000, 0x598, 0x0, 0x7ff, 0x3, 0x1}, {0x7, 0x3, 0x3, 0xfffffffc, 0x6dd, 0x899}, {0xfbb8, 0x0, 0x7ff, 0x72, 0xb, 0xfffffffe}, {0x3, 0x80000000, 0x5, 0xca10, 0x28, 0x7f}, {0x32, 0x7ff, 0x400, 0x1, 0xfffffff1, 0x3}, {0x80, 0x4, 0x1, 0x8, 0xffff0001, 0x10}, {0xe88, 0xe, 0x3dbb, 0x9, 0xa, 0x1}, {0x0, 0x1000000, 0x7c2b, 0x6, 0x2}, {0x100, 0x67ce, 0x1, 0x4d8a}, {0x8001, 0x87, 0xc, 0xccc, 0x0, 0x5e}, {0x5, 0x81, 0x4, 0x7, 0xfffffffd}, {0xab4, 0x2, 0xa, 0x10, 0x100, 0x400}, {0x9b4e, 0x5, 0x10000, 0x8, 0x6, 0x8000}, {0x2, 0x10001, 0x5, 0xfffffff2, 0xfffffffc, 0x3585}, {0x7fff, 0xffffffff, 0x5, 0x6}, {0x4, 0xe, 0xfffffff7, 0x3, 0x8, 0xe}, {0x47d71331, 0x1, 0x9377e0f3, 0x1, 0x0, 0x40}, {0x3, 0x1, 0x8, 0xd, 0x2, 0x7}, {0x5f4d3771, 0x5, 0x7ff, 0x40, 0x200, 0x32}, {0xffffffac, 0x7, 0xfffffffd, 0xffff, 0xa0, 0xfffffff2}, {0xd104, 0x5, 0x1, 0xd, 0x8, 0x3}, {0x48c, 0xf0, 0xffff, 0x1, 0x8e1, 0xec}, {0x6, 0x7, 0x5, 0x4, 0x2, 0x5}, {0x2, 0x7ff, 0x9, 0x9c53, 0x8f, 0xa}, {0x40000000, 0x0, 0x1, 0x1, 0x5, 0x4}, {0x9, 0xd, 0x87e, 0xff000000, 0x8000, 0x2}, {0x6, 0x9, 0x1, 0x8, 0xda0, 0xfff}, {0x2, 0x4, 0x5, 0x0, 0x5, 0x100}, {0x0, 0x4, 0x7, 0x0, 0x3, 0xa}, {0x5, 0x0, 0x8, 0x1, 0xb, 0x6c2}, {0x5, 0xf, 0x1, 0xa, 0x6, 0x1}, {0xb, 0x4, 0x0, 0x1, 0x7, 0x8}, {0x1, 0xeb7, 0x8, 0x8, 0x5, 0x7ff}, {0x3ff, 0x4, 0x9, 0x3, 0x8000, 0x2}, {0x3, 0x0, 0x4, 0x80000000, 0x6, 0xfb8}, {0x81, 0x4, 0xd2f, 0x4, 0x1, 0x3}, {0x7, 0xffff, 0xfffffff5, 0xcc, 0xc, 0x5}, {0x9f8, 0x9, 0x7fff, 0x0, 0x1000, 0x6}, {0x0, 0x6, 0x1e, 0x4, 0xf, 0x1}, {0x98eb, 0x800, 0x8001, 0x2, 0x10000, 0x9b}, {0x400, 0x5, 0x5, 0x1000, 0x9, 0xc6}, {0x3, 0x7, 0xfff, 0x5, 0x4}, {0x4, 0x8, 0x11, 0x0, 0x9, 0x10000}, {0x0, 0xb, 0xfff, 0x0, 0xff, 0x2}, {0x37, 0x3, 0xc, 0x7701, 0x6, 0x4}, {0x1, 0x8, 0x6, 0x1, 0x380, 0x7}, {0x9, 0x6, 0x3, 0x8, 0x8, 0xfffff9d9}, {0x5, 0xe, 0x7, 0xfff, 0xd, 0x5}, {0xf4, 0x8, 0x800, 0xca, 0x81, 0x6}, {0x5, 0x10001, 0x2db, 0xaf, 0x8, 0x7f}, {0x8, 0x78, 0x79b6, 0x2, 0x1, 0x200}, {0x6, 0x18, 0x2, 0x31, 0x4, 0x2}, {0x9, 0xbb35, 0xff, 0x4, 0x7}, {0x5, 0x7, 0x6, 0x101, 0x6, 0xd}, {0x0, 0x1, 0x6, 0x9, 0xfffffff9, 0x7fffffff}, {0xfffffc01, 0x80, 0x8001, 0xfe9, 0xe, 0x1ff}, {0xdf7, 0x2, 0x3, 0x2, 0x81, 0xfffffffc}, {0x43, 0x8, 0x1, 0x7, 0x782, 0x3}, {0x6, 0x40, 0x0, 0xc51, 0x1a6, 0x9}, {0x2, 0x0, 0x9, 0x5a5, 0x2, 0x4}, {0x5, 0x401, 0x7, 0xfffffffe, 0x2, 0x10000}, {0x1, 0xf, 0x6, 0x0, 0x0, 0x4}, {0x8, 0x7fff, 0xfffffffd, 0x86cf, 0x3, 0x3}, {0x9, 0x6, 0x484, 0x1, 0x3, 0x6}, {0x4, 0x51e, 0x40, 0x9, 0x4, 0x1fa4b840}, {0x7f, 0x200, 0x2, 0x4, 0x9, 0xc34}, {0x5, 0x4, 0xc00, 0x3, 0xed5, 0x64}, {0x1, 0x3, 0x6, 0xffffffff, 0x4fc264b8, 0x7}, {0x0, 0xa7, 0x74, 0x0, 0x9, 0x101}, {0x10, 0x2a, 0x3, 0x1, 0x1, 0x6}, {0x401, 0x7, 0x80000000, 0xfffff001, 0x8, 0x6}], [{0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0xfd83f82c21d30e4c}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x7, 0x1}, {0x2}, {0x1, 0x2}, {0x1}, {}, {0x1, 0x1}, {}, {0x1}, {0x5}, {0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3}, {0x3, 0x1}, {0x3, 0x8f22db272f60a3cc}, {0x4}, {0x3}, {}, {0x3}, {0x3}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4486905aa6ffe6fa}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x1}, {0x3}, {0x2, 0x1}, {}, {0x2}, {}, {0x2, 0x1}, {0x2, 0xb8ed2707a05cc366}, {0x3, 0xd616974e0dfb0ef3}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x1, 0x10000, 0x8, 0xfffffffa, 0x851}, 0x1, 0x2, [{0x2, 0xb, 0xb, 0x8, 0x800}, {0x0, 0x9, 0x6, 0xffff2b0a, 0x4, 0x8cef}, {0x1, 0xb, 0xc2f2, 0x278c0000, 0x1, 0xc5}, {0xffff8000, 0xfffffffc, 0xb, 0xffffffff, 0xffffffff, 0xd}, {0xc, 0x2, 0x8, 0x0, 0x4, 0xfffeffff}, {0x10000, 0x7f, 0xf, 0x7, 0xfffffe00, 0x6}, {0x6, 0x7, 0xb, 0x7, 0x8000, 0x4}, {0x6, 0x3, 0x80000001, 0x8, 0x7, 0x7}, {0x1, 0x4, 0x3, 0x401, 0x9, 0x4}, {0xfffffffe, 0x10, 0x96c, 0x3, 0x0, 0x2}]}, [{0xffffffff, 0x0, 0x100, 0x3, 0x13d, 0x10001}, {0x2, 0x101, 0x1, 0x1, 0x3ff, 0x101}, {0x3, 0x10, 0x9, 0x8, 0x7, 0x81}, {0xdba6, 0x5, 0x3, 0x2, 0xfffffffc, 0x6}, {0x7fff, 0x2, 0xf000, 0x7, 0x1, 0x8}, {0x379, 0xb4a, 0x1, 0x0, 0x1, 0x5b3f}, {0x5, 0x7, 0xb, 0xfa, 0x22}, {0x9, 0x0, 0xffff, 0x0, 0x9, 0x1}, {0x100, 0x7dd, 0x8, 0x4, 0x3}, {0x9, 0x400, 0x1, 0x6, 0x9, 0x9}, {0x3, 0x2, 0x1, 0x1, 0xe000000, 0x81}, {0x1, 0x6, 0x3, 0x0, 0x9, 0x1}, {0x9, 0x18000, 0x10, 0x6, 0x10, 0x8001}, {0xaa, 0x4, 0x1, 0x1, 0xfffffff3, 0x7ff}, {0x1, 0x4, 0x10000, 0x57c1, 0x6, 0x5}, {0x8, 0x5, 0x6, 0x8, 0x200, 0x101}, {0xe0, 0x50e, 0x6, 0x8, 0x9, 0x7fffffff}, {0x9, 0x9, 0x7f, 0x9, 0x200, 0x7}, {0x3, 0x10000, 0xfffffcb6, 0x7, 0x3929, 0xb}, {0x6, 0xff, 0xffff031f, 0x2, 0x8, 0xfffffff9}, {0x9, 0x8, 0x9, 0xfffffff8, 0xfffffffb, 0xffffff96}, {0x9, 0x101, 0x80000000, 0x4, 0x2, 0xe43}, {0x10001, 0x2, 0x3, 0xf96e, 0x4, 0x4}, {0x4, 0x8000, 0x80000001, 0x1, 0x7b0f7ea5, 0x7ff}, {0x8, 0x5, 0x4, 0xa, 0x4, 0x8}, {0x0, 0x1, 0x1, 0x7ff, 0x1b4, 0x8}, {0x5, 0x101, 0xe, 0x7ff, 0x9, 0x1}, {0x65, 0x8, 0xf80a, 0x2a, 0x322, 0xffffff80}, {0x8, 0x3, 0x3, 0x7, 0xa36}, {0x3, 0x6, 0x5, 0x6, 0x7, 0x1e}, {0x5, 0x101, 0xfffffd09, 0x4, 0x3, 0x5}, {0x899, 0xf36, 0x80, 0xf2d8, 0x5, 0xecef}, {0x69e94506, 0xffffff87, 0x5, 0x1, 0x9, 0x3}, {0xf, 0x9, 0x0, 0x0, 0x5, 0xfffeffff}, {0x2, 0x5, 0x5, 0xd6b4, 0x0, 0x3}, {0x7, 0x9, 0x9, 0x1, 0x2, 0x7}, {0x9, 0x2, 0x7f, 0xe9e, 0x0, 0x4}, {0x80000000, 0xfffffff7, 0x100, 0x7, 0x9, 0x8}, {0x9, 0x2, 0x2, 0xcf, 0x81, 0x9}, {0x800, 0x5, 0x1, 0xdebf, 0xacd, 0x80}, {0x400, 0x1, 0x3ff, 0x7, 0xfffffffc, 0xf}, {0x1, 0xa, 0x6, 0xfa, 0xc, 0x5}, {0x7, 0x401, 0x9, 0x10, 0x1d6, 0xe}, {0x1, 0x5, 0x6, 0x9, 0x1, 0x4}, {0x2, 0xa, 0x0, 0x40, 0x4, 0x457}, {0xb752, 0x8, 0x9, 0x5, 0x1}, {0x1, 0xfffffffb, 0x4, 0x12c23d4f, 0xed8}, {0x1c5, 0x38000000, 0x868, 0x252f, 0x80000001}, {0x2d8, 0x4, 0x2, 0x6, 0x7f, 0x5}, {0x516bcc9c, 0x400, 0x8, 0x9e, 0x1ff, 0x1c3e}, {0x725, 0x6, 0x7, 0xee66, 0x3f7e, 0x3816}, {0x7fffffff, 0x7f5, 0x0, 0x3, 0xfff, 0xe}, {0x7, 0xffffffff, 0xfb7, 0x80000001, 0x100}, {0x3, 0x7, 0x1ff, 0x3, 0x7fff, 0x7fff}, {0x1ff, 0x0, 0x5, 0xffff, 0x6, 0xe}, {0x9, 0x5, 0x0, 0x4, 0x4, 0xc6}, {0xeb, 0x9, 0x800, 0x80, 0x6, 0xa0}, {0x9b8c, 0x8, 0x80, 0xe, 0x6, 0x9}, {0x3, 0x7, 0xfffff6c5, 0x3, 0xfffffffe, 0x6429}, {0x0, 0x706392b6, 0x1, 0x8, 0x4, 0x80000001}, {0x0, 0x2, 0x3, 0x2, 0xe8, 0x7}, {0x9, 0x3, 0x3, 0xbd0c, 0x0, 0x4}, {0xfffffff8, 0x4, 0x5, 0xae, 0x1ff, 0x10000}, {0x401, 0x6, 0x0, 0xe, 0xa, 0x6}, {0x9, 0x4a, 0x0, 0x1, 0x4, 0x1}, {0x64, 0x1, 0x5, 0x288, 0x6, 0x8b}, {0x8000, 0xffff, 0x6, 0x1, 0x3, 0x2}, {0xb, 0x9, 0xffff, 0x0, 0x7, 0x1}, {0x400, 0x8, 0x2, 0x6, 0x80, 0x5}, {0x6, 0x400, 0xa, 0x653, 0x1000, 0x7}, {0xe, 0xffff7c3c, 0x80, 0x8, 0x3, 0x5}, {0x4, 0x4, 0xc90, 0xfffffffc, 0xe00, 0x8}, {0x0, 0x7f, 0x8a, 0x7f, 0x8, 0xedf0}, {0x3, 0xb, 0xfffffffe, 0x9, 0x9, 0x2e9}, {0x80000001, 0x0, 0xf334, 0xa, 0x6, 0x6}, {0x2, 0x5, 0x0, 0x7f, 0x70f7, 0xffff}, {0x74d390ce, 0x66c8, 0xa, 0x100, 0x3}, {0x0, 0x9, 0x1, 0x7, 0x7fffffff, 0x5}, {0x10001, 0xcc, 0x4, 0x6, 0x4, 0x2}, {0x3, 0x0, 0x2f9, 0xb, 0x9, 0x5}, {0x8, 0x7, 0x7, 0x4, 0x6, 0x8}, {0x9, 0x7, 0x7, 0x200, 0x997b, 0xff}, {0x7, 0x8, 0x401, 0x1000, 0x1ae}, {0x73aceca9, 0xbbb, 0x0, 0xe, 0x9, 0xffff}, {0x8, 0x8, 0x4e2c90b7, 0x9, 0x0, 0x5}, {0x7, 0x2, 0x0, 0xfffffff9, 0x7f, 0xfffffffe}, {0x3ff, 0xc5cf, 0x5481d3fe, 0x3, 0x92, 0x3}, {0x81, 0xbf0, 0x8, 0x8, 0x2, 0x5}, {0xa, 0x8, 0x300, 0xff, 0x6, 0x2}, {0x7, 0x5, 0x5, 0xb, 0x3, 0x5}, {0x401, 0x8, 0x6, 0x8, 0x9, 0x7fffffff}, {0x6, 0x7ff, 0x1, 0x9, 0x7, 0x5d66}, {0x0, 0xb8, 0x3, 0xfffeffff, 0x4, 0x4}, {0x6, 0x80000000, 0x8, 0x6, 0x9, 0xfffffff7}, {0x2, 0x80000000, 0x1, 0xfffffffe, 0x401, 0x80000001}, {0x9, 0x80000001, 0x0, 0x977e, 0xc97, 0x4}, {0x15, 0x7f, 0x41db, 0x6, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x9, 0x7fff, 0x8}, {0x3, 0xee2, 0x10001, 0xaefc, 0x81, 0x3}, {0x2, 0x7fff, 0x8001, 0x2, 0x1}, {0x4, 0x5, 0x0, 0x3, 0x0, 0x7a8e}, {0x1, 0x9, 0x8, 0x2, 0xfb, 0x10}, {0x1276d52f, 0x6, 0x40, 0x8, 0x22, 0x1}, {0x8, 0x7f, 0x9, 0xfffffff8, 0x10001, 0x8}, {0x3, 0x4, 0x6, 0x0, 0x5, 0x3}, {0x2, 0xc, 0x7, 0x10, 0x2, 0xfffffffb}, {0x3, 0xaca, 0x100000, 0x5, 0x23, 0x10}, {0x8, 0x3, 0x4, 0x9, 0x4, 0x3}, {0x3, 0x6, 0x3, 0x7, 0x0, 0x7}, {0x8, 0xb, 0xfffffffc, 0xfa, 0x0, 0x7}, {0x5, 0xde49, 0xffffffca, 0x5, 0x6, 0xd}, {0x8, 0x7, 0x2, 0x9, 0x7, 0xfffffff7}, {0x4, 0x400, 0x5, 0x80000000, 0x4e}, {0x6a75f2bc, 0x3, 0xffffff38, 0x671c, 0x5, 0x9}, {0x9, 0xf8, 0x2, 0x10000, 0x2, 0x7}, {0x6, 0x2, 0x5, 0x4, 0x10000, 0x80000001}, {0x7d, 0x81, 0x4293, 0x4, 0x8, 0x2b70}, {0x3, 0x8, 0x81, 0x1, 0x81, 0xeb}, {0x4, 0xb4e, 0x1, 0x4, 0x1000, 0x2}, {0x5, 0x2, 0x71bfa7df, 0x2, 0x9, 0x9}, {0x1, 0x1, 0x5, 0x3e, 0x8, 0x9}, {0x7ff, 0x400, 0x1, 0x0, 0x7fffffff, 0x2}, {0x6, 0x8, 0x2, 0x4, 0x8, 0x2}, {0xc, 0xf, 0x8000, 0xdd, 0x200, 0x6}, {0x0, 0x2, 0xc7f9, 0xa, 0x45, 0xf}, {0x204, 0x6, 0x9, 0x9, 0x1, 0x4}, {0x6, 0x6ad, 0x7, 0x2, 0xffffffff, 0x8}, {0xa35b, 0x9, 0x10000, 0x5, 0xaa07, 0x8}], [{0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x8e3eac6b8e875b27}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x6}, {0x2}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1}, {0x5}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x6}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x3}, {0x0, 0x7ce643b0d799d0fa}, {0x5}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x202b8d51c61b71f}]}}]}, {0xb9, 0x6, "b9cc0a15588af57fa413ef1cd3a04dc4efb782113bf8bf34da64fe03c36551dda3ba4dc23dabbefe4da340baaf0d6ffd03b71afa62283dc73c39d7949de696fae8d3755a2ece48ef7245e2c03b32a956e5bedf8b9f37a968849d1286f636714c7b1a1e6e3fd9b9ba7ff2e0bcb1e10aa58c1a1dcec20d38789bfa40c467b1d2c81b5183f59313a24aeae91e3bf728c611312d3a81c67dcbb2702817fff7f326076c6f6fd6a33c4c27b949a39acc8e615a0b6556bc35"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x104, 0xc, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xfff7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}]}, {0xa3, 0x6, "bfbe43cec5d3e8f3bc02574808725b3ad7ccdf32d912e0cedb305fc136fd52f45bd50c90baee363f604b90773748a8918e788e2b71d005a20a10c4973567caf5a16d20b5c97ac87b012c74de0835093b1aea39f580fd91b397687be3cf5cd834470f410b2348160ec8fa38d1c40ffa4d21aab61bb6885d3e67e8b8ac56df79729de12c3932e0b007c073c8fa6e757cf7c6ed3932218e62298ba1599dba6a04"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x4470}, 0x1, 0x0, 0x0, 0x8895}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m28.425177046s ago: executing program 1 (id=204): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@rand_addr, @loopback}, &(0x7f0000000580)=0xc) mprotect(&(0x7f0000677000/0x3000)=nil, 0x3000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) 4m28.030505405s ago: executing program 32 (id=204): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000480)={@rand_addr, @loopback}, &(0x7f0000000580)=0xc) mprotect(&(0x7f0000677000/0x3000)=nil, 0x3000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) 12.832251952s ago: executing program 4 (id=1097): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000580)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r3) close_range(r6, 0xffffffffffffffff, 0x0) 9.679956818s ago: executing program 4 (id=1112): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x68, 0x2) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x16, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r1, 0xfffff000, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfffffe13) getpid() r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) 9.356769266s ago: executing program 5 (id=1114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, <r4=>0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r5=>0x0, 0x10, 0x0, 0x7fffffff, 0x0, {{0x2c, 0x4, 0x1, 0x9, 0xb0, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @private=0xa010101, {[@timestamp={0x44, 0x24, 0x7d, 0x0, 0x0, [0x3, 0x4, 0x4, 0x6, 0x5, 0x4, 0x7, 0x4]}, @rr={0x7, 0x13, 0x5c, [@multicast2, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x2c, 0x10, 0x3, 0x0, [{@local, 0x3}, {@loopback, 0x4}, {@empty, 0x6e52ee6d}, {@multicast1, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x60b}]}, @noop, @cipso={0x86, 0x37, 0x3, [{0x2, 0x8, "2c66ce3f847e"}, {0x7, 0xc, "239deeae5476ef4cdecc"}, {0x5, 0x9, "fbd8e11dc25e99"}, {0x0, 0xa, "1189f18f38ba7545"}, {0x5, 0x8, "8db89ee3b1c6"}, {0x5, 0x2}]}, @end]}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x21, 0x13, &(0x7f0000000300)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xee2e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}], &(0x7f0000000280)='syzkaller\x00', 0x10001, 0xf4, &(0x7f00000003c0)=""/244, 0x41000, 0x31, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000680)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r1, r1, r6, r7, r1], 0x0, 0x10, 0x101, @void, @value}, 0x94) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) chmod(&(0x7f00000002c0)='./file0\x00', 0x1c0) 8.137929658s ago: executing program 4 (id=1116): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x7, 0x0, 0x6}]}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41201}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) close_range(r6, r6, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000300)=""/183, &(0x7f00000000c0)=0xb7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r7=>0x0}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e2b4fc4068a11806a4e3010203010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.545718475s ago: executing program 5 (id=1121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x7ffffffc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000480)={@multicast2, @multicast1, @multicast2}, 0xc) r4 = userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r5, 0x4bfb, &(0x7f0000000040)) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) r6 = memfd_secret(0x0) clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0}) mq_timedreceive(r6, &(0x7f0000000340)=""/219, 0xdb, 0xffffffff00000000, &(0x7f0000000440)={r7, r8+60000000}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r10 = dup(r9) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000000)=@x86={0x7f, 0x4, 0x9, 0x0, 0x9, 0x0, 0x8b, 0x4, 0x4, 0x9, 0x3, 0x34, 0x0, 0x100, 0x19a, 0x4, 0x67, 0x59, 0x4c, '\x00', 0x5, 0x1341}) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f00000002c0)=0x10000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000000101040000000000000000020000001c001880080001400000d92308000240000000000800034000000000240001801400018008000100e000000108000200e00000010c0002800500010000000000"], 0x54}}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.39699921s ago: executing program 5 (id=1128): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b40)={<r2=>0x0, 0x1, 0x0, [0x3, 0x7, 0x567f, 0xfffffffffffffffa], [0x80000000, 0x5, 0x7, 0x8001, 0x6, 0x9, 0x200, 0xfffffffffffffffa, 0xffffffff00000000, 0x400, 0xff, 0x3800000000000000, 0x7, 0x7, 0x2, 0x7, 0x5, 0x3, 0x3, 0x7, 0x6, 0x1ff, 0x2, 0x7, 0x3, 0x800, 0x95, 0x8, 0x1, 0x3, 0x4e, 0x8, 0x5, 0x1, 0x1, 0x3, 0x59c, 0x7, 0x8, 0x10001, 0x4, 0x7, 0x425, 0x9, 0x2, 0xc, 0x2, 0xf45f, 0x553e, 0x101, 0x8, 0x0, 0x800, 0x10001, 0x2, 0x5, 0x100000000, 0x8001, 0x100000001, 0x0, 0x10, 0x40, 0xfffffffffffffff4, 0xab23, 0x400, 0x40, 0x4, 0xa, 0x10000, 0x8000000000000000, 0x4, 0x5, 0x6, 0x2, 0x0, 0x3, 0x10000000000, 0xfffffffffffffff9, 0x64af, 0x9, 0x8, 0xbfffffffffffffff, 0x9, 0x6, 0x10, 0x7fffffffffffffff, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x3, 0x5, 0x8, 0xffffffffffffffff, 0xca, 0x300000000000000, 0x3, 0x3, 0x1000, 0x1, 0x8, 0xb, 0x2, 0x3, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x81, 0x7, 0x400000000, 0x1ff, 0xffffffffffff58f7, 0xfffffffffffffffb, 0x5, 0x4, 0x2, 0x0, 0x5, 0x100000000]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000f80)={r2, 0x3e, 0x8, 0x1}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=<r6=>0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='m', 0xfffffdfc}]) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfff]}, 0x8, 0x400) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000680)={{{@in=@empty, @in6=@local}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xfff3}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000d7baacbafa8328775dd07b54ec472c5f38e5d6f2337ea8d0f781ba632efd454fbb074851b52c04a0896311bace9d2ba4512c7b326d80c43e938b5a5170ad1f8787c979b47419d13ef4a0886f88548c89f43f9c663dd0a600f63bf8a87e03b1f64115a91511cdfd1f869cb8ad77af73fc65870de56666ff9a23ba32e0718298a6ccc460e2deb2e9bb6ff520c369af5d88d7c1c3dca57c4d8aa6b2bdf16b9a2c490bced9e88c2fa93e30e55343f20cf5cc8caafc1a1897421465a12ed3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r13, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000000000)=0xfffffff8, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000580)=@assoc_value, &(0x7f00000005c0)=0x8) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x20, 0x9959, 0x8, 0x2}) 4.233131473s ago: executing program 0 (id=1129): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac0565020000000000010902020103000200092100000301220500090581030000000b00"/54], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x9f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003020000202505a1a440000102030109028d00020109e0030904000001020d00000724060001e27a05240006000d240f010600000001010500b606201a7a025404"], 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e"], 0xec) 3.962826824s ago: executing program 2 (id=1130): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x40, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dvmrp1\x00'}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004004}, 0x4020000) msgctl$IPC_RMID(0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x20, @local, 0x5}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, 0x0, 0x44004) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r10, 0x81, 0x20}, 0xc) 3.436826242s ago: executing program 2 (id=1131): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="009a0880d03862853be736e1fc030400000004030000"], 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @broadcast, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2560000000000000001"}, {0x0, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x7, 0x10, '\x00'/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 3.337204382s ago: executing program 5 (id=1132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x100000000000000) 3.120092668s ago: executing program 4 (id=1133): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800b7000000000000000000001850000000000000000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) syz_usb_connect(0x4, 0x4a, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX=r0, @ANYBLOB="66ea89f26179609465f5dd8daa32b5439e720896a149ff3adc22e5bd0ff8", @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r0], 0x0) 2.795495409s ago: executing program 2 (id=1134): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="606737c86e11bc89282299372dc7f120afbe47cd5bbc0ff8b5444ea0d9931ec0b9bd9f037c74fa5e34b95547c9274fc06459ef54388583e57b32343bda2872957663b66302bebbde47ee4f7eb415bae8ea5565e43dc8bc9dc9d62d88eb60b206314b58f48135258aa439a95592a11e427efd1687ee51feba9430ad71e8d53d834e8161e23014f5e4440a8ec68172e0d66654485650a90e1f37b742f5fed8b171e8c8d744d3cd4e0f2073c6dacb8ad4720afe6a61fc7ce4c947e4e7a558f0e96e5f8390efb292c7def09224eed209a38a7c61a609d9ba3e5831fa41dd7b1b", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.794989652s ago: executing program 0 (id=1135): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x81, 0xffffffff}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.793466031s ago: executing program 3 (id=1136): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x105, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x840) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r0, 0x10000000) 2.643645858s ago: executing program 3 (id=1137): pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x300000000000000, 0x2) 2.577614827s ago: executing program 0 (id=1138): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x7fffffff, 0x4) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000001240)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000340)="baa635693b5ea8736b3c8d747bd4bf82c6af3df7d830cf94152be8cf57e5dd66201dfe09143c60ce6fb32c1989c9a9d95f886480f9a4768082a2e43274403fb19ab965c9e1d47f8de40712f5d8d1", 0x4e}, {&(0x7f0000000280)="8fb664a36d8ecd5be8c4a5416210742e6df7ce14121e122a06da367aebf7615ab813f83768da5e8cb8b891e0956fb62b5319", 0x32}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="93b48bdc6e93d434d9a80c86833e74a8c4ae3898a6099a9a23f82a1fb1c24d513a6205fe06be699e258c7ac1cf72969757ab33724449ee01e45b94a242bf2ad796670b4c24bde34e675ee5e3f88c6c73441ae9db197781bb89d88d02a02d0b7c597f6b003494234e10e154c3092ac8143c3871d5f461c3bb74cfd0e6919e5e4a07d9cbbd94b6a00f992091c15cea9b356135ebb9d6d4c4501df6b08adc44ed55ffc330985d4f0ef34c9a1e2f6fb428d2df34b0ae11793e7edf1412e1aec0989e6a67c276981dc5a71f8b83ec313e4794616f8227fe04021268263ab6039b0491c9c77d", 0xe3}, {&(0x7f0000000600)="ac2d4de1336530ef90226bf71ed6e58498e6a258e75dba18effc3bcdb142992e5263e8082eb15141ade95a13362ec0a10714748b43c5ec4c204927519240", 0x3e}, {&(0x7f0000000640)="6c46792abad51565badf07bdeec3ab00cbae99bae7b89e86a8b56ad5394c7bc3d9f845b64cb53af793b2f4f4c304b69d79bd1e8a39fd64ed6935010f437b9765729c5b043d3fe34a9e94eeab8057ee259233060f77227c27cbb0c4f9ccfdb9474b23dd4aa2942c23503b1ec2952afd13f1e0620373132251e60ba6364cd769dd0fd41b1bc24ddf7fedbc3013151ee61a51067901d8837ceacd7b5cd288b07213c742769441fe93dbcffe9ffa00d63fd00565bddd2f85fc5a853ee05b6cc2197b6f00ed34f7174b17f3659f0372e4698011600f701899ef07e34476067212c19fe6b2", 0xe2}, {&(0x7f0000000740)="42ff4151de1d05e427d8bef1c5895b9bd52aee074d139801648eb9df948458758e1f6d735b5a9d5c71032a41d9fb6c2372c7b1c9c48a04722fc570f292ee55c9c3797a86ea44d6ea02e7baf2a820327700fa1e8b473ed06257d8ea7721caa40d77720cb1176e99b54c1631886ac67ab5008d3584009aedb23fc18c4a1fadc8dfeab9147f76e4363e16ecba2ba7b7808c62be04b9b8476be6520e4c7b50c546fbff80969500f48150c3582467e7611ebcf0595bd96c283148a941342b335a3c0b034b902606ed32c6ea732d8796135c25df5c", 0xd2}, {&(0x7f0000000840)="c95c8fb7764e6a26f67e39192032bbba2a993240876a9866b178103b05a017b7963760c2f25ccdac7f3edfccc2c1e718f52417ec513f7efbc513b793da9eabb8a1939e01ed7fdd7c48768dd91cbf4f77d03a960567a02205ce3b5b1092b1363ad9c9779b1e3078230d609c1202ea1dc0e260eaf7c7ab134a794c0fe2b375b5539b867018544ba2fbd6d284b9aee3799f7e6c90035fed5e03658f915a97bb3403a9ae43512e837701", 0xa8}, {&(0x7f0000000900)="cb6647158cbe89b05e3f8d3be4d995817d7162c9e94b1e83b9d9c6b2715d0436c75951b6aeac0a6f9cf0870a99dbff435fede9cc961038fde728cbc1c2ec9f5d9f3af7f0c718a98936cfd4673243d25f", 0x50}], 0x9, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x40, 0x20000044}}, {{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="bdbd7f5c8baeba7ae79f0fc8793bae2096976e0f0fd9058d4b430ebb150e6a21a1879646d1bbb9e56a220d4cdc7bb14e265957fe685c793b35e1f0d88810a52538454d8d9e0a53031731b1769f750183fdebcb4512e1acce068e7239cd9fba780617b407d21b3fd8ef6b1f38a3f0354af3a84b1b0b02fdeff1c19733961294c2932743358166fba63544c724204a2404fd5b6ab658fa6ed0191f4676d7e07bb45780b718fb35bad168d39e407dd220476a720e422289474f76a42929db78983d94919a7d56a85fd8ae63f6e6d7bea1d4d41caea2a00eb5497d408e065757", 0xde}, {&(0x7f0000000cc0)="91e0e0474ac69c21d5f0b5db616b82487d3312b341942f72e58e7f4029796e5919417918a558aa277a70d02029c7f152f168527128ed734fa7907fa9f1b97c12ce85602c923a50afbfe188d4d2ff0c7432c5eb3bfcd929d6a80602df44b32ce744c3485136643a4b19d91e6e2e7b12af3a34136ec32712", 0x77}, {&(0x7f0000000d40)="41c8d4d224c1b8485c6bd7a2b6e3c214ab7c0e09844bc52be7400df1b769f416452199773b4824bb1271", 0x2a}, {&(0x7f0000000d80)="1a316d0da4302d77222c8116e3f446bd4e5b362d8583d1c141322dc92eb74ef0e46b94ce5dbb290a1773a2c084a8ea6fbb2bcc7476976a9b4f56dbe046aac08d333cedf28d95e5b88218cd2157c4a86ef83bb4e932b308a2f8ef68b9ba222d114f5b69802e93fe19eef1b948e6bf43d5032f576d2747d18074a523990f8b6262f3b982ce7af13ee6dea48c65ee06304119b2609beacce2de93d05be33f7bf14b6501161b3d4737b69d14d639d665efe88b61ae3891a2054dad7b859fb3531ded2f247153c35eb098e4b29d1e18394c6267465a7b10380d39cf2f96bfc2293d0eb1dadba37d77f468bb2fc757367165eef9f27e29", 0xf4}, {&(0x7f0000000e80)="aa0ce20bfca2faf35bda7741f3c1d3e89e94a022246feb3265d60a09f51e4a5565bc70b91f2036f85eeeffd2d5a28707", 0x30}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)="db86547f56a5616e18333022cb7b74dcc480dadbda637065abe15d439a72e7e3439ab24fca6f8405225879dfc64e4e87526bdeb3bf60d43356b806fd62a5c1b429f2463095d24060a947559aa609b57ea190aca9a270d440488e3cf283e8462257dad9071ce35e46132ed3777821e20d4edfdfa51099385a8ca1b7fa4173fcf1f5c56f8bf4086e73abcbae477df51d839c0210be7c178a9afc244ecbe18e38e1478290d2bea4b27d96a8", 0xaa}], 0x7, &(0x7f00000010c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x38, 0x1, 0x1, [r0, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148, 0x40000}}], 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r5, 0x0) 2.280976804s ago: executing program 5 (id=1139): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x15, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.187226052s ago: executing program 5 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn,']) chdir(&(0x7f00000000c0)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) listen(r0, 0x8) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="98", 0x1}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000030000fb07080000fd7f000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.712673503s ago: executing program 2 (id=1141): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000140)=""/10, 0xa}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}], 0x20, 0x4000000}, 0x20000004) io_uring_setup(0xdac, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'veth1_to_bond\x00', &(0x7f0000000340)=@ethtool_cmd={0x1c, 0xfffffffa, 0xc2e, 0xed7, 0x9, 0x5, 0x4, 0x31, 0x1b, 0x2, 0x8, 0x10001, 0x2, 0x10, 0x1, 0xffffffff, [0xd29, 0x401]}}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4004084) 1.711924096s ago: executing program 3 (id=1142): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0xc}, 0x4231fd31}}, 0x2, 0x2, 0x8, 0x5, 0x8a, 0x7f, 0x3}, &(0x7f0000000240)=0xfffffe9d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) socket(0x11, 0xa, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x16, 0x4) 1.58862643s ago: executing program 3 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc, 0x0, 0x1, 0x1, 0x41fd, 0x49ee}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) r4 = socket$kcm(0xa, 0x2, 0x0) getrlimit(0xd, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000100)) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0, 0x44, 0x0, 0x59}, 0x24040041) sendmsg$kcm(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002180)}, 0x20008000) sendmsg$sock(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) 1.587542421s ago: executing program 2 (id=1144): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0}) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000880)=""/241, 0xf1}], 0x5}, 0x2}], 0x2, 0x1, &(0x7f0000001480)={r2, r3+10000000}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x50, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000640)=0x10) close(r6) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 568.916737ms ago: executing program 3 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd2b}, 0x14}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000a80)=@ethtool_ringparam={0x11, 0x2, 0x1, 0x8, 0x4, 0x40d, 0x6, 0x5, 0x9b9}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0x15) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000001c0)=0xfffff800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r8=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x70, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x70}}, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r10=>0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r10, @ANYBLOB="08001f0005000000050011000100000008001f000800000008002300010000000a"], 0x70}}, 0x0) 366.155214ms ago: executing program 2 (id=1146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xcd, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0xd, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xfff, 0x4, 0xe}, [@mdlm={0x15, 0x24, 0x12, 0x50a1}, @mdlm={0x15, 0x24, 0x12, 0x401}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xdf, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x0, 0xe, 0x3, 0x1}}]}}, 0x15) 260.986917ms ago: executing program 3 (id=1147): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) 167.224059ms ago: executing program 0 (id=1148): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16]) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 72.567326ms ago: executing program 4 (id=1149): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x1, 0xfc, 0x5, 0x8, 0x0, 0x0, 0x25dfdbf3, [@sadb_x_nat_t_type={0x1, 0x14, 0xc2}, @sadb_address={0x3f, 0x6, 0x6c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x8, @loopback, 0x6}}]}, 0x40}}, 0x0) 16.601968ms ago: executing program 0 (id=1150): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0xeffd) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000180)={{0x2, 0x100, 0x9, 0x2, 0xfe000000, 0x2}, 0x8a, [0x401, 0x8, 0xc, 0x10, 0x5, 0x0, 0x6, 0x5, 0x0, 0x2, 0x7, 0x800, 0x1, 0x1ea, 0x2000000, 0x10001, 0x5, 0x3, 0x81, 0x400, 0x6, 0x5, 0x5, 0x7, 0xa22, 0x6, 0x800, 0x3, 0x1ff, 0xfffffffe, 0x6, 0xbe, 0x81, 0x8, 0x6, 0x3, 0x6460, 0x3, 0xfffffffb, 0x0, 0x8, 0x7, 0x80, 0xfffffe2f, 0x0, 0x4843, 0xffff0001, 0x7, 0x554, 0x1c, 0x4, 0x3, 0x1, 0x40, 0x0, 0x1, 0x2, 0x4, 0x4, 0x6, 0x80000000, 0x7ff, 0xb3, 0x30b, 0x400, 0x5ac, 0x8001, 0x28d, 0x7fffffff, 0xde, 0x1, 0x2, 0x2, 0x3f5, 0x4, 0xae, 0x9, 0x80000001, 0x8, 0x9559, 0x3ff, 0x8, 0x1, 0x4, 0x0, 0xfffffffe, 0x47, 0x4, 0x5, 0x0, 0x7b, 0x4, 0x6, 0x74, 0x4, 0x7, 0x10000, 0x2, 0x2, 0x6, 0x7, 0x5, 0xf, 0x0, 0x8001, 0x2, 0x1, 0x2b61, 0x7ef, 0x3, 0xffff, 0x1, 0x10, 0x7fffffff, 0xea, 0x0, 0x3, 0x8, 0x800, 0x5, 0xe30, 0x80, 0x2, 0x4, 0x101, 0x6, 0x4, 0xe9, 0xffff, 0x3, 0x95, 0x5, 0x74e, 0xd25f, 0x2, 0x5, 0x6, 0xc, 0x7, 0x3, 0x4, 0x4baa, 0xffffffff, 0x6, 0x7ff, 0x8, 0x8, 0x0, 0x101, 0xfffff800, 0xfffffffa, 0x0, 0x8, 0x400, 0x4d5f, 0x10000, 0x10, 0x100, 0xc, 0x2, 0x3, 0x1, 0xde6, 0x80000000, 0x7, 0x9, 0x7, 0x81, 0x3, 0x4, 0x63e3, 0x3, 0x5, 0x3, 0x2, 0xe, 0x800, 0x0, 0x1, 0x7, 0x0, 0xc49, 0x4, 0x7, 0x89cd04f, 0x3ff, 0x3, 0x6, 0x433, 0x0, 0xfff, 0x8001, 0x3, 0x3, 0x2, 0x1, 0xfffffff8, 0x8000, 0x4, 0x6, 0x4, 0x8001, 0x1, 0x71, 0x5, 0x6, 0x1, 0x8, 0x1000, 0x81, 0x200, 0xfffffffe, 0x5b, 0x8, 0x8, 0x7ff, 0x4, 0x9, 0x2, 0x8c7, 0x3, 0x6, 0x4, 0x4, 0x6a3a9065, 0x4, 0xf6, 0x6451039c, 0x2, 0x0, 0x2, 0x4, 0xc00, 0x1, 0xc, 0x8, 0x0, 0x9, 0x9, 0x7, 0x6, 0xfffffffc, 0x10000, 0x200, 0x6, 0xfd92, 0x4, 0x9, 0x7, 0xff, 0x0, 0x9, 0x1, 0x1ff, 0x2, 0x9, 0x9, 0x3, 0x7, 0x3, 0x3, 0xfff, 0x9, 0x5, 0x6, 0x76, 0xe36, 0xffffffff, 0x4, 0x8001, 0x40, 0x6a6, 0x9, 0xfffffff9, 0x139, 0x0, 0x5, 0x7, 0x9, 0x400, 0x7, 0x62, 0x7, 0x2, 0x1ff, 0x7784, 0x6, 0xf, 0x2d7f, 0x6, 0x2, 0x8d, 0x2, 0x0, 0x4, 0x9, 0xa, 0x7ff, 0x7f, 0x5, 0x7, 0x8000, 0x29, 0xd63, 0x9, 0x1, 0x0, 0x5, 0x10001, 0x20, 0x5, 0x6, 0x2658, 0x2, 0x2, 0x0, 0xe027, 0x8000, 0x100, 0x8, 0x2, 0xd, 0x3, 0x10001, 0x7, 0x5a200736, 0xb6e, 0x6, 0x4, 0x2, 0xfffffff9, 0xb, 0x0, 0xf, 0x1, 0x7, 0x4, 0x1, 0x3ff, 0x3, 0x2, 0xe4, 0x4, 0x2, 0x1, 0x7, 0x80000001, 0x5, 0x2, 0x3, 0xcb, 0x4, 0x4, 0x7f, 0xfffffffb, 0xf6, 0xffff, 0x4, 0x5, 0x7, 0x1ff, 0xffff, 0x9, 0x2, 0x2, 0x6, 0x7, 0x6, 0x7b5, 0xfff, 0x9, 0xfa62000, 0x2, 0x3, 0xec, 0x81, 0xb, 0x0, 0x81, 0x3, 0xffffffff, 0x2, 0x7ff, 0x0, 0x8, 0x3, 0x8, 0x4, 0x3ff, 0x1, 0x3, 0x6, 0x7, 0xa42, 0x4, 0x0, 0x7fffffff, 0x80000001, 0x7, 0x4, 0xe, 0xfffffffc, 0x2, 0x6, 0xf00, 0x3, 0x5, 0x9, 0xff, 0x61, 0x5, 0x7, 0xa, 0x0, 0xff, 0xacb1, 0x40000000, 0x48, 0x7fff, 0x6, 0x5, 0x1, 0x6, 0x4, 0xd89e, 0x229, 0xa17, 0xfffffff9, 0x9, 0x3ff, 0x3ff, 0xff, 0xfffffff7, 0x8, 0x2a6702f, 0x1a9d, 0x8, 0x4, 0xff, 0x8, 0x8001, 0x7f, 0x10000, 0x400, 0x4, 0x5c, 0x48, 0x8, 0x6, 0x81, 0x1ff, 0x5, 0x4, 0x307bc7f6, 0x9, 0x5, 0x1c7c, 0x9b7, 0x4, 0x6, 0x5, 0x3, 0x8, 0xf, 0x7, 0x5, 0x6, 0x7, 0x6, 0x80, 0x2, 0x7, 0x7236, 0x3, 0x3fba1157, 0x8, 0x6, 0x3, 0x2, 0x2, 0x2, 0xc15, 0x2, 0x8, 0x2, 0x9, 0x7, 0x3, 0x4, 0x9, 0x9, 0x8, 0x7f, 0xa55, 0x608, 0x101, 0x3, 0x177, 0x1, 0x7, 0x4, 0x2, 0x8, 0x9, 0xffffffff, 0x8, 0x80000001, 0x5, 0x9, 0x554e0835, 0xfffffff9, 0xd, 0x4, 0x5, 0x4, 0x9, 0x1, 0x1, 0x2, 0x5, 0x8000, 0x7, 0xfffffffe, 0x5, 0x0, 0x316, 0x40, 0x3, 0x100000, 0x0, 0xf, 0x7, 0x8, 0x6, 0x7, 0x8, 0x7, 0x7, 0x5, 0x7fffffff, 0x800, 0x708b, 0x4, 0x8, 0x3, 0x6, 0x9, 0x5, 0x7, 0x1, 0x0, 0x240000, 0x3, 0x4, 0x5, 0x3, 0x3ff, 0x4, 0x3, 0x3, 0x9, 0x9, 0x3, 0x6, 0x69, 0x7, 0x7, 0x2, 0x5, 0x0, 0x100, 0x3, 0x6, 0x8, 0x1c00000, 0x91, 0x1000, 0x5, 0x80000001, 0x80000001, 0x7f, 0x5, 0xffff, 0x3, 0x5, 0x80000001, 0x1, 0x95, 0x400, 0x7, 0x5, 0x1b, 0x880, 0x8, 0x5, 0x5, 0x6, 0x1, 0x8000, 0xbeb, 0x3, 0xf, 0x7f, 0x2, 0x3, 0x6, 0x5, 0x9, 0x6, 0x80000000, 0x6, 0xdcd, 0x7, 0x949, 0x9, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x400, 0x40, 0x8, 0x4b, 0x5d, 0x0, 0x2, 0xc, 0xb1, 0x40, 0x9, 0xf408, 0xb, 0x6f0a, 0x5, 0xffff, 0xe, 0x8, 0x4e, 0x6, 0x3, 0x1, 0x5, 0xe, 0x3, 0x1, 0xffff, 0x6, 0x7f, 0x7f, 0x3, 0x7, 0x7, 0x1, 0xffffff00, 0xe94, 0x3, 0x7, 0x9, 0x3, 0x40, 0x3, 0x1, 0x6, 0x7, 0x400, 0x81, 0xfff, 0x8, 0xfdf5, 0x7fff, 0x5, 0x3, 0xc717, 0x3, 0xc6a, 0x6, 0xfffffffa, 0x1, 0x6, 0x98, 0xd72, 0x4, 0x9, 0x9b, 0x80000001, 0x9, 0x1, 0x5, 0x36f, 0xffff, 0x1, 0xfffffffb, 0x2, 0x41, 0x1, 0x1, 0x75, 0x3, 0x7ff, 0x1000, 0x0, 0x20d, 0x26, 0x59e, 0x40, 0xffffffff, 0x0, 0x5, 0x8, 0xa, 0x2, 0x800, 0x480000, 0x4, 0x8, 0x6, 0x4, 0xa, 0x2, 0x8, 0xff, 0x65, 0xffffff7e, 0x7b, 0x6, 0x8, 0x5, 0xb, 0x20, 0x6a, 0x1, 0x8, 0xd762, 0x194b6389, 0x3, 0x100, 0x6, 0x101, 0x3, 0xfffffdb0, 0xfffffffc, 0x6, 0x1000, 0x1, 0x3, 0x3, 0x6, 0x0, 0xfffffffe, 0x800, 0x6, 0x1, 0xf9d0, 0x4c, 0x7, 0x239, 0x4, 0x6, 0x4, 0xac, 0x6, 0x2, 0x2, 0x7, 0x7, 0x1, 0x3, 0x0, 0x10001, 0x5, 0x4, 0x1, 0x4, 0x8001, 0x4, 0xb2, 0x7, 0xeed4, 0x0, 0x3, 0x6, 0x4, 0x9, 0xb2, 0xffffffff, 0x8, 0x0, 0x2, 0x96, 0x8, 0xf, 0x4, 0x1, 0x8000, 0x7ff, 0x4, 0xae1, 0x800, 0x100, 0xffffffff, 0x2, 0x3, 0x7, 0x8dd4, 0xfff, 0x101, 0x2, 0x8fb2, 0xfffff801, 0x10000, 0x1, 0x6, 0x6, 0x100, 0x4, 0x1fe8, 0xe, 0x40, 0x9aa9, 0xfffffffa, 0x401, 0x6, 0x7, 0x0, 0x5, 0x7a92, 0x1ff00000, 0x4, 0x5, 0x1, 0x1, 0xfff, 0x9, 0x7, 0x6, 0x0, 0x8, 0x9, 0x3, 0xfffffffa, 0xf4, 0x1, 0xb40a, 0x98, 0x9, 0x9, 0xb, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0xbb1, 0x49, 0x5, 0x336a, 0x3, 0x4f80, 0xec, 0x5, 0x2, 0x5, 0x401, 0x1, 0x0, 0x4, 0x400, 0x8, 0xfffffff7, 0x4a9, 0x1df, 0xd, 0x3, 0xffff8001, 0x7f, 0xa, 0x7, 0x5, 0x101, 0x9, 0x5, 0xb, 0x8000, 0x4, 0x8, 0x8, 0x9, 0xa, 0x7, 0xfff, 0x0, 0x1, 0x9, 0xe, 0x40, 0x2, 0x6, 0x6e, 0x6, 0x5, 0x8001, 0x80, 0x3, 0x4, 0x3, 0x5a0, 0x5, 0xd8c, 0x1, 0x4, 0x4, 0xc, 0x6, 0x67, 0x401, 0x3, 0x3, 0x1e5a, 0x4, 0x0, 0x9, 0x8, 0xf83d, 0x4, 0x4, 0x0, 0x3, 0xe00000, 0x8, 0x9, 0x1, 0x9, 0xfffffff8, 0x7, 0x101, 0x0, 0x8, 0x8, 0x2, 0x40, 0xffffffff, 0xffffffff, 0x40, 0x6, 0x2, 0x2d, 0xa, 0x7fffffff, 0x3, 0x80, 0x1, 0x5e7, 0x71, 0x80000001, 0x882, 0x101, 0x3, 0x4, 0x13, 0x2, 0x5a, 0x8, 0xfff, 0x8, 0x1ff, 0x6, 0x7, 0x81, 0x3, 0x2, 0x6, 0x401, 0xc, 0x3, 0x200, 0x80, 0x8001, 0x4, 0xf8ad, 0x5, 0x9f4a, 0x6, 0xffffffff, 0x7, 0x9, 0x9, 0x77d, 0x8, 0x6, 0x74, 0x8, 0x5, 0x3, 0x6, 0x5, 0x4, 0x4, 0xd, 0x8, 0x50000, 0x800, 0x502, 0xff, 0x1000, 0x2, 0xff, 0x3, 0x7, 0x5, 0x47a8, 0xf368, 0x8001, 0x3, 0x4, 0x1, 0x9, 0xffffffff, 0x2, 0x8, 0xc61]}) r1 = socket$inet(0x2b, 0x801, 0x0) socket$netlink(0x10, 0x3, 0x4) capset(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x400000000040, 0x400000000070, 0x4000000000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) flock(r0, 0x4) 12.560916ms ago: executing program 0 (id=1151): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0xfffffffc, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_open_dev$dmmidi(&(0x7f0000000240), 0x5, 0x248440) move_mount(r4, &(0x7f0000000000)='./mnt\x00', r4, &(0x7f0000000080)='./mnt\x00', 0x214) link(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000070000004d000000000000004500000000000000950000000000000009c9bc6631c1248c81933e3784a658d0c4baeecff9b457e5a861fd3aa4037a72ab04501be580e00b22e241ad7bea43155fb6ad39cc7e9db6f4e02b56989ec86839d86bc24762455d4efd69399a1c0712eb2dde"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) pause() socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) 0s ago: executing program 4 (id=1152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="606737c86e11bc89282299372dc7f120afbe47cd5bbc0ff8b5444ea0d9931ec0b9bd9f037c74fa5e34b95547c9274fc06459ef54388583e57b32343bda2872957663b66302bebbde47ee4f7eb415bae8ea5565e43dc8bc9dc9d62d88eb60b206314b58f48135258aa439a95592a11e427efd1687ee51feba9430ad71e8d53d834e8161e23014f5e4440a8ec68172e0d66654485650a90e1f37b742f5fed8b171e8c8d744d3cd4e0f2073c6dacb8ad4720afe6a61fc7ce4c947e4e7a558f0e96e5f8390efb292c7def09224eed209a38a7c61a609d9ba3e5831fa41dd7b1b", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): _key: encrypted_key: keyword 'new' not allowed when called from .update method [ 258.490407][ T5870] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 258.640436][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 258.770669][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.809773][ T5870] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 258.836018][ T5870] usb 5-1: can't read configurations, error -71 [ 259.139507][ T30] audit: type=1400 audit(259.108:686): avc: denied { ioctl } for pid=8704 comm="syz.4.706" path="socket:[19215]" dev="sockfs" ino=19215 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.194836][ T30] audit: type=1400 audit(259.128:687): avc: denied { write } for pid=8704 comm="syz.4.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.224254][ T30] audit: type=1400 audit(259.148:688): avc: denied { read } for pid=8703 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 259.268830][ T30] audit: type=1400 audit(259.238:689): avc: denied { setopt } for pid=8703 comm="syz.3.705" lport=34419 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 259.877402][ T8721] netlink: 'syz.2.708': attribute type 9 has an invalid length. [ 259.885373][ T8721] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.708'. [ 261.860462][ T5132] Bluetooth: hci1: command 0x0401 tx timeout [ 262.236368][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.717'. [ 262.554551][ T8753] vlan0: entered promiscuous mode [ 262.559674][ T8753] vlan0: entered allmulticast mode [ 262.685129][ T8744] syz.4.716: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.747872][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.4.716 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 262.747894][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.747901][ T8744] Call Trace: [ 262.747905][ T8744] <TASK> [ 262.747909][ T8744] dump_stack_lvl+0x16c/0x1f0 [ 262.747928][ T8744] warn_alloc+0x24d/0x3a0 [ 262.747941][ T8744] ? __pfx_warn_alloc+0x10/0x10 [ 262.747958][ T8744] ? __get_vm_area_node+0x1b0/0x2f0 [ 262.747974][ T8744] ? __get_vm_area_node+0x1dc/0x2f0 [ 262.747992][ T8744] __vmalloc_node_range_noprof+0x1102/0x1530 [ 262.748016][ T8744] ? do_replace+0x21f/0x500 [ 262.748035][ T8744] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.748054][ T8744] ? lock_acquire+0x2f/0xb0 [ 262.748069][ T8744] ? __might_fault+0xe3/0x190 [ 262.748082][ T8744] ? __might_fault+0xe3/0x190 [ 262.748095][ T8744] ? do_replace+0x21f/0x500 [ 262.748110][ T8744] __vmalloc_noprof+0x6d/0x90 [ 262.748126][ T8744] ? do_replace+0x21f/0x500 [ 262.748141][ T8744] do_replace+0x21f/0x500 [ 262.748157][ T8744] ? __pfx_do_replace+0x10/0x10 [ 262.748183][ T8744] ? bpf_lsm_capable+0x9/0x10 [ 262.748204][ T8744] ? security_capable+0x7e/0x260 [ 262.748229][ T8744] do_ebt_set_ctl+0x470/0x580 [ 262.748253][ T8744] ? irqentry_exit+0x3b/0x90 [ 262.748277][ T8744] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 262.748301][ T8744] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 262.748320][ T8744] nf_setsockopt+0x8a/0xf0 [ 262.748336][ T8744] ip_setsockopt+0xcb/0xf0 [ 262.748348][ T8744] tcp_setsockopt+0xa4/0x100 [ 262.748363][ T8744] smc_setsockopt+0x1b4/0xa00 [ 262.748378][ T8744] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 262.748393][ T8744] ? __pfx_smc_setsockopt+0x10/0x10 [ 262.748411][ T8744] ? selinux_socket_setsockopt+0x6a/0x80 [ 262.748426][ T8744] ? __pfx_smc_setsockopt+0x10/0x10 [ 262.748443][ T8744] do_sock_setsockopt+0x222/0x480 [ 262.748455][ T8744] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 262.748467][ T8744] ? lock_acquire+0x2f/0xb0 [ 262.748488][ T8744] __sys_setsockopt+0x1a0/0x230 [ 262.748506][ T8744] __x64_sys_setsockopt+0xbd/0x160 [ 262.748522][ T8744] ? do_syscall_64+0x91/0x250 [ 262.748537][ T8744] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.748551][ T8744] do_syscall_64+0xcd/0x250 [ 262.748567][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.748582][ T8744] RIP: 0033:0x7f29cf18d169 [ 262.748592][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.748602][ T8744] RSP: 002b:00007f29cff8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.748612][ T8744] RAX: ffffffffffffffda RBX: 00007f29cf3a6080 RCX: 00007f29cf18d169 [ 262.748619][ T8744] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 000000000000000b [ 262.748625][ T8744] RBP: 00007f29cf20e2a0 R08: 0000000000000138 R09: 0000000000000000 [ 262.748632][ T8744] R10: 0000400000000100 R11: 0000000000000246 R12: 0000000000000000 [ 262.748638][ T8744] R13: 0000000000000000 R14: 00007f29cf3a6080 R15: 00007ffe8b31a118 [ 262.748651][ T8744] </TASK> [ 262.750093][ T8744] Mem-Info: [ 263.111616][ T8744] active_anon:24895 inactive_anon:0 isolated_anon:0 [ 263.111616][ T8744] active_file:12136 inactive_file:38642 isolated_file:0 [ 263.111616][ T8744] unevictable:768 dirty:413 writeback:0 [ 263.111616][ T8744] slab_reclaimable:11454 slab_unreclaimable:100679 [ 263.111616][ T8744] mapped:33093 shmem:20464 pagetables:1125 [ 263.111616][ T8744] sec_pagetables:0 bounce:0 [ 263.111616][ T8744] kernel_misc_reclaimable:0 [ 263.111616][ T8744] free:1287454 free_pcp:359 free_cma:0 [ 263.157985][ T8744] Node 0 active_anon:98980kB inactive_anon:0kB active_file:48544kB inactive_file:154496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132372kB dirty:1652kB writeback:0kB shmem:79620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11668kB pagetables:4500kB sec_pagetables:0kB all_unreclaimable? no [ 263.203900][ T8744] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 263.237841][ T8744] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.240685][ T971] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 263.275677][ T8744] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 263.285513][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 263.285525][ T30] audit: type=1326 audit(263.258:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8760 comm="syz.2.722" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe13838d169 code=0x0 [ 263.437005][ T8744] Node 0 DMA32 free:1265068kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:35080kB inactive_anon:0kB active_file:48544kB inactive_file:154404kB unevictable:1536kB writepending:1652kB present:3129332kB managed:2547364kB mlocked:0kB bounce:0kB free_pcp:28344kB local_pcp:856kB free_cma:0kB [ 263.437206][ T30] audit: type=1400 audit(263.318:713): avc: denied { mounton } for pid=8760 comm="syz.2.722" path="/proc/502/task/503/net/netfilter" dev="proc" ino=4026532897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 263.512631][ T8744] lowmem_reserve[]: 0 0 0 0 0 [ 263.597905][ T971] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 263.851350][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.875592][ T971] usb 4-1: config 0 descriptor?? [ 263.876077][ T8744] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 263.891091][ T971] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 263.934506][ T8744] lowmem_reserve[]: 0 0 0 0 0 [ 263.947471][ T8744] Node 1 Normal free:3905888kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.980317][ T8744] lowmem_reserve[]: 0 0 0 0 0 [ 263.989462][ T8744] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.152901][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.202025][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.005460][ T8744] Node 0 DMA32: 93*4kB (UME) 457*8kB (UME) 515*16kB (UME) 376*32kB (UME) 264*64kB (UME) 44*128kB (M) 33*256kB (UM) 34*512kB (UME) 10*1024kB (UME) 3*2048kB (UM) 294*4096kB (UM) = 1293292kB [ 265.026108][ T30] audit: type=1400 audit(264.278:714): avc: denied { accept } for pid=8771 comm="syz.0.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 265.048049][ T30] audit: type=1326 audit(264.408:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 265.070951][ T30] audit: type=1326 audit(264.408:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 265.099513][ T30] audit: type=1326 audit(264.408:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 265.122359][ T30] audit: type=1326 audit(264.418:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 265.386514][ T8744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 265.409378][ T971] gspca_stv06xx: I2C: Read error writing address: -71 [ 265.463054][ T8744] Node 1 Normal: 182*4kB (UE) 37*8kB (UME) 32*16kB (UME) 181*32kB (UME) 99*64kB (UME) 24*128kB (UME) 12*256kB (UME) 6*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3905888kB [ 265.481634][ T971] usb 4-1: USB disconnect, device number 15 [ 265.579332][ T30] audit: type=1326 audit(264.418:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 265.607321][ T8744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.624300][ T8744] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.727281][ T30] audit: type=1326 audit(264.418:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 265.750538][ T30] audit: type=1326 audit(264.418:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8771 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 265.780456][ T8744] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.800595][ T8744] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.809893][ T8744] 55063 total pagecache pages [ 265.814718][ T8744] 0 pages in swap cache [ 266.670491][ T8744] Free swap = 124884kB [ 266.675141][ T8744] Total swap = 124996kB [ 266.679431][ T8744] 2097051 pages RAM [ 266.681478][ T971] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 266.690942][ T8744] 0 pages HighMem/MovableOnly [ 266.695682][ T8744] 428552 pages reserved [ 266.699874][ T8744] 0 pages cma reserved [ 266.730589][ T2147] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 266.905945][ T2147] usb 1-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 267.488081][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 267.530503][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.541437][ T2147] usb 1-1: Product: syz [ 267.545865][ T2147] usb 1-1: Manufacturer: syz [ 267.571808][ T2147] usb 1-1: SerialNumber: syz [ 267.707959][ T2147] usb 1-1: config 0 descriptor?? [ 267.830848][ T971] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.899866][ T971] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 267.908090][ T2147] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 267.929665][ T971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.980253][ T971] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 268.006268][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.114909][ T971] usb 4-1: config 0 descriptor?? [ 268.256695][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 268.590994][ T2147] gspca_sn9c20x: Write register 1001 failed -110 [ 268.612944][ T971] corsair-cpro 0003:1B1C:0C10.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 268.764439][ T2147] gspca_sn9c20x: Device initialization failed [ 268.863074][ T2147] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 268.907787][ T8827] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 268.921271][ T971] corsair-cpro 0003:1B1C:0C10.0014: probe with driver corsair-cpro failed with error -38 [ 268.937135][ T971] usb 4-1: USB disconnect, device number 16 [ 268.997670][ T8827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.032412][ T8828] gretap1: entered promiscuous mode [ 269.045933][ T8828] bond1: (slave gretap1): making interface the new active one [ 269.055386][ T8828] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 269.077676][ T8827] vlan0: entered promiscuous mode [ 269.115725][ T8827] bond1: entered promiscuous mode [ 269.126457][ T8827] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 269.147404][ T8827] bond1: left promiscuous mode [ 269.177552][ T8832] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 269.193992][ T8832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.234713][ T8832] vlan2: entered promiscuous mode [ 269.240219][ T8832] bond2: entered promiscuous mode [ 269.289347][ T8832] bond2: left promiscuous mode [ 270.066995][ T2147] usb 1-1: USB disconnect, device number 14 [ 270.081328][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 270.081341][ T30] audit: type=1400 audit(270.058:733): avc: denied { nlmsg_read } for pid=8840 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 270.109918][ T8844] nvme_fabrics: unknown parameter or missing value '�' in ctrl creation request [ 270.196745][ T30] audit: type=1400 audit(270.078:734): avc: denied { append } for pid=8840 comm="syz.3.746" name="nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.199464][ T8844] nvme_fabrics: missing parameter 'transport=%s' [ 270.245723][ T8844] nvme_fabrics: missing parameter 'nqn=%s' [ 270.248591][ T30] audit: type=1400 audit(270.218:735): avc: denied { read } for pid=8850 comm="syz.2.749" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 270.290502][ T30] audit: type=1400 audit(270.248:736): avc: denied { open } for pid=8850 comm="syz.2.749" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 270.648734][ T30] audit: type=1400 audit(270.368:737): avc: denied { mounton } for pid=8849 comm="syz.4.748" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 270.766952][ T30] audit: type=1400 audit(270.738:738): avc: denied { map } for pid=8858 comm="syz.3.751" path="socket:[20495]" dev="sockfs" ino=20495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 270.861439][ T30] audit: type=1400 audit(270.828:739): avc: denied { bind } for pid=8864 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.067303][ T30] audit: type=1400 audit(270.858:740): avc: denied { name_bind } for pid=8864 comm="syz.0.754" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 273.052306][ T30] audit: type=1400 audit(273.018:741): avc: denied { connect } for pid=8864 comm="syz.0.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 274.410700][ T30] audit: type=1400 audit(274.388:742): avc: denied { getopt } for pid=8895 comm="syz.3.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 274.499957][ T8896] tipc: Started in network mode [ 274.507048][ T8896] tipc: Node identity 4, cluster identity 4711 [ 274.513909][ T8896] tipc: Node number set to 4 [ 275.318747][ T8913] netlink: 256 bytes leftover after parsing attributes in process `syz.5.767'. [ 275.494827][ T30] audit: type=1400 audit(275.438:743): avc: denied { ioctl } for pid=8906 comm="syz.5.767" path="socket:[19797]" dev="sockfs" ino=19797 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 276.757752][ T8914] syz.4.768: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.775716][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.4.768 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 276.775739][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.775748][ T8914] Call Trace: [ 276.775751][ T8914] <TASK> [ 276.775756][ T8914] dump_stack_lvl+0x16c/0x1f0 [ 276.775775][ T8914] warn_alloc+0x24d/0x3a0 [ 276.775788][ T8914] ? __pfx_warn_alloc+0x10/0x10 [ 276.775804][ T8914] ? __get_vm_area_node+0x1b0/0x2f0 [ 276.775820][ T8914] ? __get_vm_area_node+0x1dc/0x2f0 [ 276.775839][ T8914] __vmalloc_node_range_noprof+0x1102/0x1530 [ 276.775857][ T8914] ? __pfx___schedule+0x10/0x10 [ 276.775873][ T8914] ? xt_alloc_entry_offsets+0x3a/0x60 [ 276.775893][ T8914] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.775910][ T8914] ? rcu_is_watching+0x12/0xc0 [ 276.775923][ T8914] ? trace_kmalloc+0x2d/0xd0 [ 276.775936][ T8914] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 276.775949][ T8914] ? xt_alloc_entry_offsets+0x3a/0x60 [ 276.775966][ T8914] __kvmalloc_node_noprof+0x14f/0x1a0 [ 276.775984][ T8914] ? xt_alloc_entry_offsets+0x3a/0x60 [ 276.776000][ T8914] xt_alloc_entry_offsets+0x3a/0x60 [ 276.776016][ T8914] translate_table+0x22e/0x1710 [ 276.776035][ T8914] ? _copy_from_user+0x59/0xd0 [ 276.776049][ T8914] ? __pfx_translate_table+0x10/0x10 [ 276.776065][ T8914] ? __might_fault+0xe3/0x190 [ 276.776081][ T8914] do_ipt_set_ctl+0x917/0xbe0 [ 276.776098][ T8914] ? __pfx___schedule+0x10/0x10 [ 276.776111][ T8914] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.776126][ T8914] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 276.776147][ T8914] ? irqentry_exit+0x3b/0x90 [ 276.776165][ T8914] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 276.776184][ T8914] nf_setsockopt+0x8a/0xf0 [ 276.776201][ T8914] ip_setsockopt+0xcb/0xf0 [ 276.776213][ T8914] ipv6_setsockopt+0x155/0x170 [ 276.776230][ T8914] tcp_setsockopt+0xa4/0x100 [ 276.776243][ T8914] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 276.776256][ T8914] do_sock_setsockopt+0x222/0x480 [ 276.776268][ T8914] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 276.776280][ T8914] ? lock_acquire+0x2f/0xb0 [ 276.776301][ T8914] __sys_setsockopt+0x1a0/0x230 [ 276.776320][ T8914] __x64_sys_setsockopt+0xbd/0x160 [ 276.776335][ T8914] ? do_syscall_64+0x91/0x250 [ 276.776350][ T8914] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.776364][ T8914] do_syscall_64+0xcd/0x250 [ 276.776380][ T8914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.776395][ T8914] RIP: 0033:0x7f29cf18d169 [ 276.776404][ T8914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.776415][ T8914] RSP: 002b:00007f29cff6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.776425][ T8914] RAX: ffffffffffffffda RBX: 00007f29cf3a6160 RCX: 00007f29cf18d169 [ 276.776432][ T8914] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000008 [ 276.776438][ T8914] RBP: 00007f29cf20e2a0 R08: 0000000000000268 R09: 0000000000000000 [ 276.776445][ T8914] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 276.776451][ T8914] R13: 0000000000000000 R14: 00007f29cf3a6160 R15: 00007ffe8b31a118 [ 276.776463][ T8914] </TASK> [ 276.776468][ T8914] Mem-Info: [ 276.797656][ T2147] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 277.128241][ T8914] active_anon:8247 inactive_anon:0 isolated_anon:0 [ 277.128241][ T8914] active_file:12136 inactive_file:38639 isolated_file:0 [ 277.128241][ T8914] unevictable:768 dirty:457 writeback:0 [ 277.128241][ T8914] slab_reclaimable:11472 slab_unreclaimable:100612 [ 277.128241][ T8914] mapped:33615 shmem:3774 pagetables:1051 [ 277.128241][ T8914] sec_pagetables:0 bounce:0 [ 277.128241][ T8914] kernel_misc_reclaimable:0 [ 277.128241][ T8914] free:1299906 free_pcp:2908 free_cma:0 [ 277.185234][ T30] audit: type=1400 audit(277.158:744): avc: denied { read write } for pid=8930 comm="syz.3.773" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 277.210707][ T30] audit: type=1400 audit(277.158:745): avc: denied { open } for pid=8930 comm="syz.3.773" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 277.234840][ T30] audit: type=1400 audit(277.158:746): avc: denied { ioctl } for pid=8930 comm="syz.3.773" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 277.285362][ T8914] Node 0 active_anon:35388kB inactive_anon:0kB active_file:48544kB inactive_file:154484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136560kB dirty:1828kB writeback:0kB shmem:15560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11764kB pagetables:4404kB sec_pagetables:0kB all_unreclaimable? no [ 277.297499][ T30] audit: type=1400 audit(277.178:747): avc: denied { connect } for pid=8930 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 277.319960][ T2147] usb 1-1: unable to get BOS descriptor or descriptor too short [ 277.346285][ T30] audit: type=1400 audit(277.268:748): avc: denied { mount } for pid=8933 comm="syz.3.774" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.699439][ T8914] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 277.730278][ T30] audit: type=1400 audit(277.268:749): avc: denied { watch watch_reads } for pid=8933 comm="syz.3.774" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 277.760412][ T2147] usb 1-1: not running at top speed; connect to a high speed hub [ 277.771944][ T2147] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 277.772784][ T8914] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.819099][ T2147] usb 1-1: config 12 has no interface number 0 [ 277.825473][ T30] audit: type=1326 audit(277.438:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8919 comm="syz.2.769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe13838d169 code=0x0 [ 277.847978][ T2147] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has invalid maxpacket 25147, setting to 64 [ 277.875465][ T2147] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 277.885332][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.911592][ T8914] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 277.917449][ T2147] usb 1-1: Product: syz [ 277.936744][ T8914] Node 0 DMA32 free:1289636kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:23900kB inactive_anon:0kB active_file:48544kB inactive_file:154392kB unevictable:1536kB writepending:1836kB present:3129332kB managed:2547364kB mlocked:0kB bounce:0kB free_pcp:9468kB local_pcp:9276kB free_cma:0kB [ 277.975260][ T2147] usb 1-1: Manufacturer: syz [ 277.986424][ T2147] usb 1-1: SerialNumber: syz [ 277.997308][ T8922] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.041595][ T8914] lowmem_reserve[]: 0 0 0 0 0 [ 278.058410][ T8914] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 278.090019][ T8914] lowmem_reserve[]: 0 0 0 0 0 [ 278.179565][ T8914] Node 1 Normal free:3900344kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5552kB local_pcp:4712kB free_cma:0kB [ 278.219660][ T5898] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 278.226745][ T2147] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.411777][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 278.476860][ T2147] usb 1-1: USB disconnect, device number 15 [ 278.590984][ T5898] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 278.614393][ T5898] usb 4-1: config 0 has no interface number 0 [ 278.621868][ T5898] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.623720][ T8914] lowmem_reserve[]: [ 278.640609][ T5898] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 278.660400][ T5898] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 278.678174][ T5898] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 278.688635][ T5898] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 278.695274][ T8914] 0 [ 278.716741][ T5898] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 278.736921][ T8914] 0 0 0 0 [ 278.740070][ T8914] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 278.752959][ T5898] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 278.771881][ T8914] Node 0 DMA32: 526*4kB (UME) 599*8kB (UME) 493*16kB (ME) 376*32kB (UME) 261*64kB (UME) 47*128kB (UME) 31*256kB (UME) 25*512kB (UME) 15*1024kB (UME) 6*2048kB (UM) 293*4096kB (M) = 1298048kB [ 278.791334][ T5898] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 256 [ 278.801957][ T5898] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.815183][ T8914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 278.827110][ T8914] Node 1 Normal: 186*4kB (UME) 39*8kB (UME) 35*16kB (UME) 183*32kB (UME) 100*64kB (UME) 25*128kB (UME) 11*256kB (UME) 4*512kB (UE) 4*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3900848kB [ 278.846381][ T8914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.858026][ T8914] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 278.867875][ T5898] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 278.876940][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.885016][ T5898] usb 4-1: Product: syz [ 278.889152][ T5898] usb 4-1: Manufacturer: syz [ 278.893777][ T8914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 278.905847][ T5898] usb 4-1: SerialNumber: syz [ 278.910385][ T8914] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.184284][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.212285][ T8914] 52199 total pagecache pages [ 279.219120][ T5898] usb 4-1: config 0 descriptor?? [ 279.228000][ T8942] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 279.240848][ T8914] 0 pages in swap cache [ 279.259175][ T8914] Free swap = 124888kB [ 279.266111][ T8942] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 279.273922][ T8965] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 279.281718][ T8914] Total swap = 124996kB [ 279.285916][ T8914] 2097051 pages RAM [ 279.296025][ T8914] 0 pages HighMem/MovableOnly [ 279.301241][ T8965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.301821][ T8914] 428552 pages reserved [ 279.316012][ T5898] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 279.317176][ T8965] gretap1: entered promiscuous mode [ 279.326893][ T5898] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 279.332760][ T8965] bond1: (slave gretap1): making interface the new active one [ 279.346538][ T8965] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 279.358332][ T8914] 0 pages cma reserved [ 279.367046][ T8965] vlan3: entered promiscuous mode [ 279.372813][ T8965] bond1: entered promiscuous mode [ 279.378365][ T8965] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 279.396655][ T8965] bond1: left promiscuous mode [ 279.424473][ T5898] scsi host1: microtekX6 [ 279.522527][ T5898] usb 4-1: USB disconnect, device number 17 [ 279.550519][ T7730] microtek usb (rev 0.4.3): error -19 submitting URB [ 279.809432][ T30] audit: type=1400 audit(279.768:751): avc: denied { bind } for pid=8972 comm="syz.0.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 280.526655][ T30] audit: type=1400 audit(280.458:752): avc: denied { bind } for pid=8978 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 280.658708][ T30] audit: type=1400 audit(280.458:753): avc: denied { setattr } for pid=8978 comm="syz.3.783" name="ROSE" dev="sockfs" ino=20747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 280.920464][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 281.823024][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 281.965324][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.010449][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.040377][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 282.049525][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.066426][ T9] usb 1-1: config 0 descriptor?? [ 282.496022][ T9] playstation 0003:054C:05C4.0015: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 282.703442][ T9] playstation 0003:054C:05C4.0015: Invalid byte count transferred, expected 16 got 0 [ 282.814672][ T9] playstation 0003:054C:05C4.0015: Failed to retrieve DualShock4 pairing info: -22 [ 283.217526][ T9] playstation 0003:054C:05C4.0015: Failed to get MAC address from DualShock4 [ 283.286387][ T9] playstation 0003:054C:05C4.0015: Failed to create dualshock4. [ 283.322620][ T2147] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 283.338970][ T9] playstation 0003:054C:05C4.0015: probe with driver playstation failed with error -22 [ 283.480673][ T2147] usb 3-1: Using ep0 maxpacket: 8 [ 283.501292][ T2147] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 283.520385][ T2147] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 283.540453][ T2147] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 24 [ 283.563949][ T2147] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.573377][ T2147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.590377][ T2147] usb 3-1: Product: 碻羀르ﮎ彻汨纒鑋聴Ϊ火薍飇컠ᴅ췅幣悊ۿ㯘蜁턖䔩㤽┆縟啭髄콻畔顴 [ 283.610403][ T2147] usb 3-1: Manufacturer: Ђ [ 283.615407][ T2147] usb 3-1: SerialNumber: 랱ṵ㒐ꔑ䖓휦抝涁噃ຂ췖쬩䄠ĝἬ樛拏ἆ봭駫韫ಈ苨ꡃ䂏颰թἫ [ 283.808558][ T9014] veth0_vlan: left promiscuous mode [ 283.817488][ T9014] veth0_vlan: entered promiscuous mode [ 284.248192][ T2147] usb 3-1: can't set config #1, error -71 [ 284.264529][ T2147] usb 3-1: USB disconnect, device number 21 [ 284.338489][ T5870] usb 1-1: USB disconnect, device number 16 [ 285.548015][ T30] audit: type=1400 audit(285.518:754): avc: denied { bind } for pid=9033 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 285.780688][ T30] audit: type=1400 audit(285.518:755): avc: denied { node_bind } for pid=9033 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 285.873660][ T9040] warning: `syz.4.800' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 286.777611][ T30] audit: type=1400 audit(285.848:756): avc: denied { connect } for pid=9033 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 286.902421][ T9041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.798'. [ 286.966404][ T9047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.003203][ T30] audit: type=1400 audit(286.978:757): avc: denied { write } for pid=9049 comm="syz.5.803" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 287.030122][ T9038] kvm: kvm [9037]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 287.044244][ T9038] kvm: kvm [9037]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 287.085076][ T9038] kvm: kvm [9037]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 287.089337][ T9038] kvm: kvm [9037]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 287.160130][ T9038] kvm: kvm [9037]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 287.167599][ T9038] kvm: kvm [9037]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 287.170999][ T9038] kvm: kvm [9037]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 287.173006][ T9038] kvm: kvm [9037]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 287.556466][ T5898] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 288.140408][ T30] audit: type=1400 audit(288.068:758): avc: denied { create } for pid=9059 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 288.186880][ T30] audit: type=1400 audit(288.138:759): avc: denied { connect } for pid=9059 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 288.452867][ T30] audit: type=1326 audit(288.428:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3838d169 code=0x7ffc0000 [ 288.475483][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.482375][ T30] audit: type=1326 audit(288.428:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3838d169 code=0x7ffc0000 [ 288.506660][ T30] audit: type=1326 audit(288.428:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7faa3838d169 code=0x7ffc0000 [ 288.533076][ T5898] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 288.545598][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.553699][ T30] audit: type=1326 audit(288.428:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9063 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3838d169 code=0x7ffc0000 [ 288.576276][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.078044][ T5898] usb 5-1: config 0 descriptor?? [ 289.660218][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 289.693584][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 289.714902][ T5898] usb 5-1: USB disconnect, device number 21 [ 289.786071][ T9082] fuse: Bad value for 'fd' [ 290.187701][ T9093] process 'syz.4.815' launched '/dev/fd/3' with NULL argv: empty string added [ 290.215450][ T9093] netlink: 'syz.4.815': attribute type 4 has an invalid length. [ 290.293354][ T9098] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 290.402076][ T9098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.437897][ T9103] vlan2: entered promiscuous mode [ 290.447645][ T9103] bond3: entered promiscuous mode [ 290.470582][ T9105] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 290.490820][ T9103] bond3: left promiscuous mode [ 290.537317][ T9105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.552309][ T9108] gretap1: entered promiscuous mode [ 290.559716][ T9108] bond1: (slave gretap1): making interface the new active one [ 290.651048][ T9108] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 290.666392][ T9105] vlan2: entered promiscuous mode [ 290.690729][ T9105] bond1: entered promiscuous mode [ 290.696001][ T9105] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 290.741274][ T9105] bond1: left promiscuous mode [ 290.880485][ T5898] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 291.294586][ T5898] usb 5-1: device descriptor read/64, error -71 [ 291.870417][ T5898] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 291.918604][ T9123] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 291.920433][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 291.937518][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 291.963405][ T9120] ceph: No mds server is up or the cluster is laggy [ 292.010422][ T5898] usb 5-1: device descriptor read/64, error -71 [ 292.130750][ T5898] usb usb5-port1: attempt power cycle [ 292.303714][ T9133] veth0_vlan: left promiscuous mode [ 292.312127][ T9133] veth0_vlan: entered promiscuous mode [ 293.133590][ T9141] veth0_vlan: left promiscuous mode [ 293.142785][ T9141] veth0_vlan: entered promiscuous mode [ 293.670418][ T5898] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 293.712382][ T5870] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 293.871792][ T5870] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 293.893206][ T5898] usb 5-1: device not accepting address 24, error -71 [ 293.999014][ T5870] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.108439][ T9155] Cannot find del_set index 4 as target [ 294.112566][ T9155] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.686188][ T5870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 294.686348][ T5870] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 294.686464][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.781569][ T5870] usb 1-1: config 0 descriptor?? [ 294.789449][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 294.790439][ T30] audit: type=1400 audit(294.728:792): avc: denied { write } for pid=9149 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 295.066601][ T30] audit: type=1400 audit(295.028:793): avc: denied { connect } for pid=9149 comm="syz.3.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.192132][ T5870] magicmouse 0003:05AC:0265.0016: unknown main item tag 0x0 [ 295.209357][ T5870] magicmouse 0003:05AC:0265.0016: unknown main item tag 0x0 [ 295.237452][ T5870] magicmouse 0003:05AC:0265.0016: hidraw0: USB HID v0.05 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 295.289971][ T9164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.420767][ T5816] usb 1-1: USB disconnect, device number 17 [ 295.610691][ T5869] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 295.813510][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 295.824191][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.969109][ T9170] kvm: kvm [9169]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 295.983424][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.993566][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 296.007169][ T5869] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 296.016254][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.026019][ T5869] usb 4-1: config 0 descriptor?? [ 296.039058][ T9170] kvm: kvm [9169]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 296.147968][ T9170] kvm: kvm [9169]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 296.859615][ T5869] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 296.866780][ T5869] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 296.873800][ T5869] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 296.882953][ T5869] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 296.890065][ T5869] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 296.902701][ T5869] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 296.927822][ T2147] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 297.008211][ T9185] veth0_vlan: left promiscuous mode [ 297.016485][ T9185] veth0_vlan: entered promiscuous mode [ 297.556379][ T5869] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 297.567748][ T5869] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 297.700842][ T5899] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 297.719819][ T5869] usb 4-1: USB disconnect, device number 18 [ 297.741198][ T5899] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 297.972641][ T30] audit: type=1400 audit(297.898:794): avc: denied { mount } for pid=9189 comm="syz.2.844" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 298.035911][ T5899] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 298.047245][ T5899] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 298.382946][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.430464][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.440373][ T2147] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 298.449409][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.480163][ T30] audit: type=1400 audit(298.438:795): avc: denied { create } for pid=9196 comm="syz.5.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.521654][ T2147] usb 1-1: config 0 descriptor?? [ 298.527649][ T30] audit: type=1400 audit(298.448:796): avc: denied { write } for pid=9196 comm="syz.5.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.558061][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 298.635920][ T30] audit: type=1400 audit(298.608:797): avc: denied { read } for pid=9196 comm="syz.5.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.710013][ T30] audit: type=1400 audit(298.678:798): avc: denied { map } for pid=9203 comm="syz.4.847" path="socket:[21217]" dev="sockfs" ino=21217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 298.771727][ T2147] usbhid 1-1:0.0: can't add hid device: -71 [ 298.777750][ T2147] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 298.797281][ T2147] usb 1-1: USB disconnect, device number 18 [ 299.470699][ T2147] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 299.640410][ T2147] usb 1-1: Using ep0 maxpacket: 16 [ 299.670620][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.700261][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.730484][ T2147] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 299.749787][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.790989][ T2147] usb 1-1: config 0 descriptor?? [ 300.000152][ T2147] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 300.008881][ T2147] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 300.017148][ T30] audit: type=1400 audit(299.978:799): avc: denied { mount } for pid=9220 comm="syz.5.853" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 300.307790][ T30] audit: type=1400 audit(300.278:800): avc: denied { mount } for pid=9220 comm="syz.5.853" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 301.264268][ T5899] usb 1-1: USB disconnect, device number 19 [ 301.421033][ T2147] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 301.860685][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 302.052096][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 302.136780][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 302.195820][ T2147] usb 5-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 302.205335][ T2147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.218785][ T2147] usb 5-1: Product: syz [ 302.226815][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 302.248503][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 302.280952][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 302.290369][ T2147] usb 5-1: Manufacturer: syz [ 302.295278][ T2147] usb 5-1: SerialNumber: syz [ 302.312781][ T2147] usb 5-1: config 0 descriptor?? [ 302.320804][ T2147] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 302.339856][ T9] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 302.359184][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.369272][ T9] usb 4-1: Product: syz [ 302.376662][ T9] usb 4-1: Manufacturer: syz [ 302.408682][ T9] usb 4-1: SerialNumber: syz [ 302.410990][ T9251] netlink: 'syz.0.860': attribute type 1 has an invalid length. [ 302.441643][ T9] usb 4-1: config 0 descriptor?? [ 302.462191][ T30] audit: type=1400 audit(302.428:801): avc: denied { mount } for pid=9253 comm="syz.5.862" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 302.471331][ T9251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.516224][ T9257] overlayfs: failed to resolve './file0': -2 [ 302.522016][ T9251] vlan3: entered promiscuous mode [ 302.530777][ T9251] bond2: entered promiscuous mode [ 302.539337][ T9251] bond2: left promiscuous mode [ 302.637784][ T30] audit: type=1400 audit(302.608:802): avc: denied { create } for pid=9260 comm="syz.5.865" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 302.726436][ T30] audit: type=1400 audit(302.698:803): avc: denied { setopt } for pid=9262 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 303.051115][ T2147] gspca_sn9c20x: Write register 1001 failed -110 [ 303.057538][ T2147] gspca_sn9c20x: Device initialization failed [ 303.082126][ T2147] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 303.084038][ T30] audit: type=1400 audit(303.038:804): avc: denied { read write } for pid=9260 comm="syz.5.865" name="file0" dev="tmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 303.486045][ T30] audit: type=1400 audit(303.048:805): avc: denied { open } for pid=9260 comm="syz.5.865" path="/146/file0" dev="tmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 303.501751][ T2147] hid-generic 0002:0002:0004.0018: unknown main item tag 0x1 [ 303.558175][ T2147] hid-generic 0002:0002:0004.0018: item fetching failed at offset 13/115 [ 303.588053][ T2147] hid-generic 0002:0002:0004.0018: probe with driver hid-generic failed with error -22 [ 303.706120][ T30] audit: type=1400 audit(303.448:806): avc: denied { map } for pid=9268 comm="syz.0.867" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.736808][ T30] audit: type=1400 audit(303.448:807): avc: denied { execute } for pid=9268 comm="syz.0.867" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.779915][ T30] audit: type=1400 audit(303.488:808): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 304.104785][ T2147] usb 5-1: USB disconnect, device number 26 [ 304.122764][ T9] usb 4-1: USB disconnect, device number 19 [ 305.229749][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 305.229763][ T30] audit: type=1400 audit(305.198:823): avc: denied { unlink } for pid=6664 comm="syz-executor" name="file0" dev="tmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 305.550065][ T9316] veth0_vlan: left promiscuous mode [ 305.558007][ T9316] veth0_vlan: entered promiscuous mode [ 306.347890][ T9321] veth0_vlan: left promiscuous mode [ 306.355780][ T9321] veth0_vlan: entered promiscuous mode [ 307.803601][ T9332] hfs: unable to load iocharset "io#harset" [ 307.905229][ T9323] sg_write: data in/out 2031668/2 bytes for SCSI command 0x26-- guessing data in; [ 307.905229][ T9323] program syz.5.877 not setting count and/or reply_len properly [ 307.968612][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.876'. [ 307.986956][ T9338] openvswitch: netlink: Message has 8 unknown bytes. [ 308.367939][ T9340] sg_write: data in/out 2031668/2 bytes for SCSI command 0x26-- guessing data in; [ 308.367939][ T9340] program syz.4.880 not setting count and/or reply_len properly [ 309.180487][ T5870] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 310.631641][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.646880][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.660416][ T5870] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 310.760244][ T5870] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 310.778652][ T30] audit: type=1400 audit(310.738:824): avc: denied { append } for pid=9364 comm="syz.4.887" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.868804][ T5870] usb 3-1: Manufacturer: syz [ 310.882033][ T30] audit: type=1400 audit(310.838:825): avc: denied { map } for pid=9364 comm="syz.4.887" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 310.904795][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.912779][ T5870] usb 3-1: config 0 descriptor?? [ 310.914030][ T30] audit: type=1400 audit(310.838:826): avc: denied { execute } for pid=9364 comm="syz.4.887" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 311.154393][ T9372] veth0_vlan: left promiscuous mode [ 311.163923][ T9372] veth0_vlan: entered promiscuous mode [ 311.711652][ T2334] pvrusb2: request_firmware fatal error with code=-110 [ 311.749554][ T2334] pvrusb2: Failure uploading firmware1 [ 311.759357][ T2334] pvrusb2: Device initialization was not successful. [ 311.829522][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 311.839717][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 311.861477][ T5904] pvrusb2: Device being rendered inoperable [ 312.000714][ T5870] cougar 0003:060B:700A.0019: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 312.655024][ T9377] sch_tbf: peakrate 4294901761 is lower than or equals to rate 5830806149046838872 ! [ 312.763514][ T9] usb 3-1: USB disconnect, device number 22 [ 313.197605][ T9395] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.894'. [ 313.223412][ T9395] openvswitch: netlink: Flow key attribute not present in set flow. [ 316.203359][ T30] audit: type=1400 audit(316.178:827): avc: denied { setopt } for pid=9426 comm="syz.0.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 316.203632][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 317.019637][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.027971][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.313206][ T5904] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 317.500453][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 317.528305][ T5904] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 317.542937][ T5904] usb 1-1: config 0 has no interface number 0 [ 317.565118][ T5904] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 317.574470][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.582855][ T5904] usb 1-1: Product: syz [ 317.587356][ T5904] usb 1-1: Manufacturer: syz [ 317.598763][ T5904] usb 1-1: SerialNumber: syz [ 317.621126][ T5904] usb 1-1: config 0 descriptor?? [ 317.632517][ T5904] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 317.752851][ T9443] netlink: 'syz.5.909': attribute type 1 has an invalid length. [ 317.772927][ T9443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.795971][ T9443] vlan2: entered promiscuous mode [ 317.803781][ T9443] bond2: entered promiscuous mode [ 317.821757][ T9443] bond2: left promiscuous mode [ 317.844736][ T30] audit: type=1400 audit(317.818:828): avc: denied { bind } for pid=9431 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.392577][ T5904] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 318.525124][ T5904] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 319.120774][ T5898] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 319.251912][ T30] audit: type=1400 audit(319.228:829): avc: denied { ioctl } for pid=9445 comm="syz.3.911" path="socket:[23022]" dev="sockfs" ino=23022 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 319.363111][ T5898] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 319.372506][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 319.376247][ T5898] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.400697][ T5816] usb 1-1: USB disconnect, device number 20 [ 319.406954][ T5898] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 319.416873][ T5898] usb 6-1: config 0 has no interface number 0 [ 319.417199][ T5816] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 319.423513][ T5898] usb 6-1: config 0 has no interface number 1 [ 319.440767][ T5898] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 319.449802][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.461054][ T5898] usb 6-1: config 0 descriptor?? [ 319.468568][ T5816] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 319.468808][ T5898] usb 6-1: unknown number of interfaces: 2 [ 319.481091][ T5816] quatech2 1-1:0.51: device disconnected [ 319.676113][ T9459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.685207][ T5904] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 319.690548][ T9459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.705789][ T9459] input: syz1 as /devices/virtual/input/input27 [ 319.742868][ T5898] usb 6-1: USB disconnect, device number 7 [ 319.853077][ T5904] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 319.865829][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.876189][ T5904] usb 5-1: config 0 has no interface number 0 [ 319.882758][ T5904] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 319.894354][ T5904] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.914366][ T5904] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 320.040443][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.223219][ T5904] usb 5-1: Product: syz [ 320.228282][ T5904] usb 5-1: Manufacturer: syz [ 320.233098][ T5904] usb 5-1: SerialNumber: syz [ 320.298877][ T5904] usb 5-1: config 0 descriptor?? [ 321.464909][ T9482] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 321.520393][ T30] audit: type=1326 audit(321.388:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13838d169 code=0x7ffc0000 [ 321.935027][ T30] audit: type=1326 audit(321.388:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13838d169 code=0x7ffc0000 [ 322.010041][ T30] audit: type=1326 audit(321.408:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe13838d169 code=0x7ffc0000 [ 322.076423][ T30] audit: type=1326 audit(321.408:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13838d169 code=0x7ffc0000 [ 322.106029][ T9496] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 322.109281][ T30] audit: type=1326 audit(321.408:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9476 comm="syz.2.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe13838d169 code=0x7ffc0000 [ 322.138117][ T30] audit: type=1400 audit(321.438:835): avc: denied { map } for pid=9476 comm="syz.2.919" path="socket:[22007]" dev="sockfs" ino=22007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.162500][ T30] audit: type=1400 audit(321.438:836): avc: denied { accept } for pid=9476 comm="syz.2.919" path="socket:[22007]" dev="sockfs" ino=22007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.233523][ T30] audit: type=1400 audit(322.038:837): avc: denied { setopt } for pid=9495 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 322.347405][ T30] audit: type=1400 audit(322.308:838): avc: denied { write } for pid=9495 comm="syz.0.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.162719][ T9496] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 325.164382][ T5904] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 325.617209][ T5904] usb 5-1: USB disconnect, device number 27 [ 325.699199][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 328.021874][ T30] audit: type=1400 audit(327.748:839): avc: denied { create } for pid=9514 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 328.390387][ T30] audit: type=1400 audit(327.988:840): avc: denied { write } for pid=9514 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 328.432236][ T9522] netlink: 8976 bytes leftover after parsing attributes in process `syz.4.928'. [ 328.650459][ T30] audit: type=1400 audit(328.598:841): avc: denied { ioctl } for pid=9523 comm="syz.5.929" path="socket:[23143]" dev="sockfs" ino=23143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 329.615369][ T30] audit: type=1400 audit(329.048:842): avc: denied { ioctl } for pid=9524 comm="syz.2.930" path="socket:[23146]" dev="sockfs" ino=23146 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 329.966376][ T9538] siw: device registration error -23 [ 329.985397][ T5830] Bluetooth: hci4: SCO packet for unknown connection handle 100 [ 330.609123][ T30] audit: type=1400 audit(329.568:843): avc: denied { read } for pid=9524 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.655102][ T30] audit: type=1326 audit(329.988:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 330.679550][ T30] audit: type=1326 audit(329.988:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 330.801189][ T9541] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 330.808098][ T9541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.854500][ T30] audit: type=1326 audit(329.998:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 330.881133][ T30] audit: type=1326 audit(329.998:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 330.888209][ T9541] vhci_hcd vhci_hcd.0: Device attached [ 330.904167][ T30] audit: type=1326 audit(330.018:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f005218d169 code=0x7ffc0000 [ 331.924725][ T9542] vhci_hcd: connection closed [ 331.932779][ T7051] vhci_hcd: stop threads [ 331.950398][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 332.131105][ T7051] vhci_hcd: release socket [ 332.136752][ T7051] vhci_hcd: disconnect device [ 332.173411][ T9534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.931'. [ 332.184902][ T9534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.931'. [ 332.859503][ T5830] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 333.015802][ T9561] netlink: 'syz.2.938': attribute type 1 has an invalid length. [ 333.220472][ T9561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.376490][ T9561] vlan0: entered promiscuous mode [ 333.384708][ T9561] bond2: entered promiscuous mode [ 334.153126][ T9561] bond2: left promiscuous mode [ 334.183865][ T5904] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 334.270852][ T5870] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 334.356755][ T5904] usb 4-1: device descriptor read/64, error -71 [ 334.463257][ T5870] usb 6-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 334.482705][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.506665][ T5870] usb 6-1: Product: syz [ 334.511014][ T5870] usb 6-1: Manufacturer: syz [ 334.515739][ T5870] usb 6-1: SerialNumber: syz [ 334.549568][ T5870] usb 6-1: config 0 descriptor?? [ 334.562528][ T5870] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 334.630444][ T5904] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 334.770485][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 334.790499][ T5904] usb 4-1: device descriptor read/64, error -71 [ 334.935082][ T5904] usb usb4-port1: attempt power cycle [ 334.940482][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 335.300780][ T5870] gspca_sn9c20x: Write register 1001 failed -110 [ 335.403896][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 335.443142][ T5870] gspca_sn9c20x: Device initialization failed [ 335.443704][ T10] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 335.474527][ T5870] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 335.476323][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.493948][ T10] usb 3-1: Product: syz [ 335.498132][ T10] usb 3-1: Manufacturer: syz [ 335.502861][ T10] usb 3-1: SerialNumber: syz [ 335.523495][ T10] usb 3-1: config 0 descriptor?? [ 335.556326][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 335.562486][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 335.583934][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 335.606034][ T10] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 335.626574][ T10] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 335.713833][ T9592] pimreg: entered allmulticast mode [ 335.726394][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 335.726407][ T30] audit: type=1400 audit(335.698:860): avc: denied { bind } for pid=9591 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 335.753191][ T30] audit: type=1400 audit(335.698:861): avc: denied { read write } for pid=9591 comm="syz.4.945" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 335.778732][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.789593][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.791129][ T5904] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 335.799110][ T30] audit: type=1400 audit(335.698:862): avc: denied { open } for pid=9591 comm="syz.4.945" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 335.852312][ T5904] usb 4-1: device descriptor read/8, error -71 [ 335.960596][ T10] usb 3-1: USB disconnect, device number 23 [ 336.217154][ T5904] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 336.440533][ T5898] usb 6-1: USB disconnect, device number 8 [ 337.370399][ T9] vhci_hcd: vhci_device speed not set [ 337.745483][ T5904] usb 4-1: device not accepting address 23, error -71 [ 337.762514][ T5904] usb usb4-port1: unable to enumerate USB device [ 338.728254][ T30] audit: type=1400 audit(338.258:863): avc: denied { execute_no_trans } for pid=9619 comm="syz.2.953" path="/215/file0" dev="tmpfs" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 339.060107][ T9628] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 339.087751][ T9628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.116849][ T9628] vlan0: entered promiscuous mode [ 339.122898][ T9628] bond3: entered promiscuous mode [ 339.131099][ T9628] bond3: left promiscuous mode [ 339.163842][ T30] audit: type=1400 audit(339.138:864): avc: denied { relabelfrom } for pid=9606 comm="syz.5.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 339.210395][ T5904] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 339.266243][ T30] audit: type=1400 audit(339.138:865): avc: denied { relabelto } for pid=9606 comm="syz.5.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 339.493468][ T5904] usb 4-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 339.510457][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 339.518140][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.531040][ T5904] usb 4-1: Product: syz [ 339.538377][ T5904] usb 4-1: Manufacturer: syz [ 339.561875][ T5904] usb 4-1: SerialNumber: syz [ 339.567786][ T5904] usb 4-1: config 0 descriptor?? [ 339.638143][ T5904] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 339.700566][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 339.713048][ T30] audit: type=1400 audit(339.668:866): avc: denied { append } for pid=9648 comm="syz.5.958" name="sg0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.736565][ T10] usb 1-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.749543][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 339.839426][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 339.876405][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.918406][ T10] usb 1-1: config 0 descriptor?? [ 339.945292][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 340.393045][ T5904] gspca_sn9c20x: Write register 1001 failed -110 [ 340.405354][ T30] audit: type=1400 audit(340.378:867): avc: denied { sqpoll } for pid=9656 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 340.425163][ T5904] gspca_sn9c20x: Device initialization failed [ 340.489886][ T5904] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 340.548623][ T30] audit: type=1400 audit(340.408:868): avc: denied { read } for pid=9656 comm="syz.5.960" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 340.571893][ T30] audit: type=1400 audit(340.408:869): avc: denied { open } for pid=9656 comm="syz.5.960" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 341.284898][ T10] usb 4-1: USB disconnect, device number 24 [ 341.468370][ T9666] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 341.475968][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 341.475981][ T30] audit: type=1400 audit(341.438:871): avc: denied { ioctl } for pid=9665 comm="syz.3.962" path="socket:[22282]" dev="sockfs" ino=22282 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.500522][ T9666] bond0: (slave lo): Error: Device can not be enslaved while up [ 341.622313][ T5132] Bluetooth: hci1: command 0x0401 tx timeout [ 342.060396][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 342.936426][ T5904] usb 1-1: USB disconnect, device number 21 [ 343.011342][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 343.027391][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.042328][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.052404][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 343.065516][ T10] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 343.083675][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.091975][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 343.120907][ T10] usb 6-1: config 0 descriptor?? [ 343.740474][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 343.747702][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 343.756175][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.766325][ T9] usb 3-1: config 0 has no interface number 0 [ 343.779365][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 343.796475][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.809300][ T9] usb 3-1: Product: syz [ 343.819389][ T9] usb 3-1: Manufacturer: syz [ 343.827164][ T9] usb 3-1: SerialNumber: syz [ 343.846240][ T9] usb 3-1: config 0 descriptor?? [ 343.874399][ T9] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 343.890584][ T9] cx231xx 3-1:0.1: Not found matching IAD interface [ 343.943661][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 343.972760][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 344.006921][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 344.014189][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 344.024697][ T10] shield 0003:0955:7214.001A: unknown main item tag 0x0 [ 344.034418][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 344.226970][ T9693] SELinux: Context Z;� is not valid (left unmapped). [ 345.058422][ T30] audit: type=1400 audit(344.208:872): avc: denied { create } for pid=9692 comm="syz.4.972" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=5A3BD1 [ 345.250087][ T30] audit: type=1400 audit(344.208:873): avc: denied { associate } for pid=9692 comm="syz.4.972" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=5A3BD1 [ 345.276278][ T10] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 345.285347][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.391322][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.545649][ T30] audit: type=1400 audit(344.208:874): avc: denied { mounton } for pid=9692 comm="syz.4.972" path="/182/file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=5A3BD1 [ 345.569702][ T30] audit: type=1400 audit(345.368:875): avc: denied { rmdir } for pid=5829 comm="syz-executor" name="file0" dev="tmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=5A3BD1 [ 345.994474][ T10] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 346.041735][ T9677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.050848][ T30] audit: type=1400 audit(346.018:876): avc: denied { map } for pid=9673 comm="syz.2.966" path="pipe:[23440]" dev="pipefs" ino=23440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 346.086842][ T9677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.104554][ T971] usb 3-1: USB disconnect, device number 24 [ 346.152178][ T5898] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 346.166225][ T10] usb 6-1: USB disconnect, device number 9 [ 346.189258][ T5898] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 346.226806][ T9709] ksmbd: Daemon and kernel module version mismatch. ksmbd: 105, kernel module: 1. User-space ksmbd should terminate. [ 346.245235][ T5898] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 346.282013][ T30] audit: type=1400 audit(346.248:877): avc: denied { listen } for pid=9706 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.359798][ T5898] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 346.668332][ T30] audit: type=1400 audit(346.258:878): avc: denied { name_bind } for pid=9708 comm="syz.5.974" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 346.669102][ T9714] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 346.750699][ T9714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.760108][ T9713] xt_hashlimit: size too large, truncated to 1048576 [ 346.767122][ T9703] netlink: 'syz.4.973': attribute type 12 has an invalid length. [ 346.775176][ T9703] netlink: 132 bytes leftover after parsing attributes in process `syz.4.973'. [ 346.813285][ T9714] vlan3: entered promiscuous mode [ 346.848629][ T9714] bond3: entered promiscuous mode [ 346.893276][ T9714] bond3: left promiscuous mode [ 348.233140][ T9737] tty tty3: ldisc open failed (-12), clearing slot 2 [ 349.061661][ T9750] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 349.081705][ T9750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.106410][ T9750] vlan2: entered promiscuous mode [ 349.112521][ T9750] bond4: entered promiscuous mode [ 349.169855][ T5898] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 349.182160][ T9750] bond4: left promiscuous mode [ 350.412070][ T5898] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.450669][ T5898] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.464699][ T5898] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.480467][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.518305][ T9744] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.553119][ T5898] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.660564][ T30] audit: type=1400 audit(350.628:879): avc: denied { read } for pid=9766 comm="syz.2.990" lport=43132 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 350.771850][ T9769] veth0_vlan: left promiscuous mode [ 350.780628][ T9769] veth0_vlan: entered promiscuous mode [ 351.848327][ T2147] usb 1-1: USB disconnect, device number 22 [ 351.890284][ T5870] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 352.193731][ T5870] usb 5-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 352.218309][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.228091][ T5870] usb 5-1: Product: syz [ 352.228480][ T9775] kvm: kvm [9773]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 352.235655][ T5870] usb 5-1: Manufacturer: syz [ 352.243971][ T9775] kvm: kvm [9773]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 352.247065][ T5870] usb 5-1: SerialNumber: syz [ 352.258744][ T9775] kvm: kvm [9773]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 352.447028][ T5870] usb 5-1: config 0 descriptor?? [ 352.696467][ T5870] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 352.802320][ T9775] kvm: kvm [9773]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 352.818119][ T9775] kvm: kvm [9773]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 352.838298][ T9775] kvm: kvm [9773]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 353.015343][ T5830] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 353.925324][ T5870] gspca_sn9c20x: Write register 1001 failed -110 [ 353.932585][ T5870] gspca_sn9c20x: Device initialization failed [ 353.938833][ T5870] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 354.139504][ T30] audit: type=1400 audit(354.108:880): avc: denied { getopt } for pid=9805 comm="syz.2.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.401450][ T5870] usb 5-1: USB disconnect, device number 28 [ 354.692527][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.711530][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.993147][ T30] audit: type=1400 audit(354.968:881): avc: denied { append } for pid=9830 comm="syz.0.1008" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 355.020500][ T5870] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 355.100473][ T30] audit: type=1400 audit(355.028:882): avc: denied { read } for pid=9825 comm="syz.5.1007" lport=36528 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 355.165423][ T30] audit: type=1400 audit(355.048:883): avc: denied { create } for pid=9830 comm="syz.0.1008" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 355.247148][ T5870] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 355.250402][ T30] audit: type=1400 audit(355.048:884): avc: denied { rename } for pid=9830 comm="syz.0.1008" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 355.256664][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.349936][ T5904] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 355.424052][ T5870] usb 5-1: config 0 descriptor?? [ 355.616482][ T30] audit: type=1400 audit(355.588:885): avc: denied { accept } for pid=9843 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.661939][ T30] audit: type=1400 audit(355.618:886): avc: denied { write } for pid=9843 comm="syz.0.1011" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 355.694503][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 355.703475][ T5904] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 355.715129][ T30] audit: type=1400 audit(355.618:887): avc: denied { setopt } for pid=9843 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 355.716298][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 355.754291][ T5904] usb 6-1: Manufacturer: syz [ 355.773850][ T30] audit: type=1400 audit(355.618:888): avc: denied { bind } for pid=9843 comm="syz.0.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 355.793244][ T5904] usb 6-1: config 0 descriptor?? [ 355.801938][ T5898] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 355.857966][ T9850] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1013'. [ 355.859110][ T5870] ath6kl: Unsupported hardware version: 0x0 [ 355.879445][ T30] audit: type=1400 audit(355.618:889): avc: denied { name_bind } for pid=9843 comm="syz.0.1011" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 356.059447][ T9819] SELinux: policydb magic number 0x594b9b86 does not match expected magic number 0xf97cff8c [ 356.067962][ T9850] sctp: [Deprecated]: syz.2.1013 (pid 9850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.067962][ T9850] Use struct sctp_sack_info instead [ 356.087964][ T9819] SELinux: failed to load policy [ 356.640402][ T5904] usb 6-1: Limiting number of CPorts to U8_MAX [ 356.649176][ T5904] usb 6-1: Not enough endpoints found in device, aborting! [ 356.660378][ T5870] ath6kl: Failed to init ath6kl core: -22 [ 356.679829][ T5870] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 356.701933][ T5870] usb 5-1: USB disconnect, device number 29 [ 356.717989][ T5904] usb 6-1: USB disconnect, device number 10 [ 356.861474][ T9857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.872659][ T9857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.894722][ T9859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.927604][ T9859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.210468][ T5904] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 357.220370][ T2147] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 357.370483][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 357.384736][ T5904] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 357.393120][ T2147] usb 4-1: Using ep0 maxpacket: 16 [ 357.400453][ T5904] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 357.411381][ T5904] usb 3-1: config 0 has no interface number 0 [ 357.417653][ T5904] usb 3-1: too many endpoints for config 0 interface 110 altsetting 32: 48, using maximum allowed: 30 [ 357.428793][ T5904] usb 3-1: config 0 interface 110 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 357.428910][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.453555][ T5904] usb 3-1: config 0 interface 110 has no altsetting 0 [ 357.460463][ T2147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.470492][ T2147] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 357.484998][ T2147] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 357.494342][ T5904] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 357.504037][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.512498][ T5904] usb 3-1: Product: syz [ 357.516798][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.525210][ T5904] usb 3-1: Manufacturer: syz [ 357.530640][ T5904] usb 3-1: SerialNumber: syz [ 357.536829][ T2147] usb 4-1: config 0 descriptor?? [ 357.542019][ T5816] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 357.552833][ T5904] usb 3-1: config 0 descriptor?? [ 357.727276][ T5816] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 357.752614][ T5816] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 357.795223][ T5816] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.810708][ T5904] streamzap 3-1:0.110: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 357.853183][ T5904] usb 3-1: USB disconnect, device number 26 [ 357.862228][ T5816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 357.880359][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.893464][ T5816] usb 5-1: Product: syz [ 357.902370][ T5816] usb 5-1: Manufacturer: syz [ 357.907006][ T5816] usb 5-1: SerialNumber: syz [ 357.924690][ T9878] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1020' sets config #0 [ 358.160776][ T5816] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 358.470561][ T5816] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 358.642657][ T5816] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 358.652529][ T5816] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 358.662643][ T5816] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.677347][ T5816] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 358.686631][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.694634][ T5816] usb 6-1: Product: syz [ 358.698808][ T5816] usb 6-1: Manufacturer: syz [ 358.703460][ T5816] usb 6-1: SerialNumber: syz [ 358.808735][ T9892] 9pnet_fd: Insufficient options for proto=fd [ 359.043918][ T5816] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 360.561547][ T10] usb 5-1: USB disconnect, device number 30 [ 360.648926][ T2147] usbhid 4-1:0.0: can't add hid device: -71 [ 360.672383][ T10] usblp0: removed [ 360.701096][ T2147] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 360.742263][ T2147] usb 4-1: USB disconnect, device number 25 [ 361.280645][ T10] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 361.678474][ T5899] usb 6-1: USB disconnect, device number 11 [ 361.709131][ T5899] usblp1: removed [ 361.805207][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 361.878022][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 362.011642][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.025372][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 362.087180][ T9927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.266152][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 362.278063][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 362.288458][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 362.302590][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.316266][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 362.362103][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 362.454510][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 362.472176][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 362.533545][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.572396][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 362.597967][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 362.607991][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 362.608000][ T30] audit: type=1400 audit(362.568:902): avc: denied { bind } for pid=9935 comm="syz.5.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 362.658854][ T10] usb 4-1: string descriptor 0 read error: -22 [ 362.666057][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 362.684425][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.691236][ T9936] serio: Serial port ptm0 [ 362.713659][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 362.775390][ T30] audit: type=1400 audit(362.748:903): avc: denied { read } for pid=9935 comm="syz.5.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.606087][ T2147] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1 [ 363.718161][ T9949] netlink: 'syz.5.1041': attribute type 1 has an invalid length. [ 363.726354][ T9949] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1041'. [ 363.737252][ T9949] netlink: 'syz.5.1041': attribute type 1 has an invalid length. [ 363.746142][ T9949] netlink: 'syz.5.1041': attribute type 2 has an invalid length. [ 363.967748][ T2147] usb 4-1: USB disconnect, device number 26 [ 364.791041][ T5898] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 364.879452][ T9988] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1055'. [ 364.917469][ T9988] geneve2: entered promiscuous mode [ 364.922875][ T2147] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 364.930540][ T9988] geneve2: entered allmulticast mode [ 364.985751][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 364.993313][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.010401][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.030453][ T5898] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 365.050517][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.087799][ T5898] usb 3-1: config 0 descriptor?? [ 365.120559][ T2147] usb 6-1: Using ep0 maxpacket: 32 [ 365.127815][ T2147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 365.138742][ T2147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.163910][ T2147] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 365.174020][ T2147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.187134][ T2147] usb 6-1: Product: syz [ 365.198660][ T2147] usb 6-1: Manufacturer: syz [ 365.209683][ T2147] usb 6-1: SerialNumber: syz [ 365.224565][ T2147] usb 6-1: config 0 descriptor?? [ 365.238052][ T2147] usb 6-1: no audio or video endpoints found [ 365.459349][ T9998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.771264][ T5898] nintendo 0003:057E:2009.001C: item fetching failed at offset 0/2 [ 365.784497][ T5898] nintendo 0003:057E:2009.001C: HID parse failed [ 365.791072][ T971] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 365.814293][ T5898] nintendo 0003:057E:2009.001C: probe - fail = -22 [ 365.851013][ T5898] nintendo 0003:057E:2009.001C: probe with driver nintendo failed with error -22 [ 365.933663][ T2147] usb 6-1: USB disconnect, device number 12 [ 365.971457][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 366.043566][T10004] sg_write: data in/out 2031668/2 bytes for SCSI command 0x26-- guessing data in; [ 366.043566][T10004] program syz.4.1060 not setting count and/or reply_len properly [ 366.312056][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.323880][ T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.334250][ T971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.347717][ T971] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 366.357442][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.372451][ T971] usb 4-1: config 0 descriptor?? [ 366.440531][ T7446] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 366.651840][ T7446] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 366.686134][ T7446] usb 1-1: config 0 has no interface number 0 [ 366.693622][ T7446] usb 1-1: too many endpoints for config 0 interface 1 altsetting 253: 140, using maximum allowed: 30 [ 366.712330][ T7446] usb 1-1: config 0 interface 1 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 367.375821][ T7446] usb 1-1: config 0 interface 1 has no altsetting 0 [ 367.382874][ T7446] usb 1-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e [ 367.408710][ T7446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.461345][ T7446] usb 1-1: config 0 descriptor?? [ 367.472971][ T7446] usb 1-1: bad CDC descriptors [ 367.528387][ T7446] usb 3-1: USB disconnect, device number 27 [ 367.761898][ T30] audit: type=1400 audit(367.638:904): avc: denied { setattr } for pid=10017 comm="syz.4.1065" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 367.791311][ T10] usb 1-1: USB disconnect, device number 24 [ 367.795120][ T30] audit: type=1326 audit(367.758:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cf18d169 code=0x7ffc0000 [ 367.799173][ T971] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 367.819952][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.838917][ T971] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 367.846452][ T971] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 367.853852][ T971] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 367.861202][ T971] shield 0003:0955:7214.001D: unknown main item tag 0x0 [ 367.874519][ T971] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 367.912480][T10020] VFS: could not find a valid V7 on nullb0. [ 367.984416][T10020] sch_tbf: burst 7164 is lower than device lo mtu (65550) ! [ 368.326295][ T30] audit: type=1326 audit(367.758:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f29cf18d169 code=0x7ffc0000 [ 368.349013][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.405697][ T971] shield 0003:0955:7214.001D: Registered Thunderstrike controller [ 368.414842][ T971] shield 0003:0955:7214.001D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 368.420616][ T30] audit: type=1326 audit(367.758:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cf18d169 code=0x7ffc0000 [ 368.448116][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.523610][ T971] usb 4-1: USB disconnect, device number 27 [ 368.542595][ T9] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 368.587651][ T9] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 368.628094][T10026] pimreg: entered allmulticast mode [ 368.632447][ T30] audit: type=1326 audit(367.758:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f29cf18d169 code=0x7ffc0000 [ 368.634569][ T9] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 368.681266][ T9] shield 0003:0955:7214.001D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 368.819031][ T30] audit: type=1326 audit(367.758:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cf18d169 code=0x7ffc0000 [ 368.842225][ T30] audit: type=1326 audit(367.758:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29cf18d169 code=0x7ffc0000 [ 368.864973][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.880647][ T30] audit: type=1326 audit(367.758:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cf18d169 code=0x7ffc0000 [ 368.903426][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.910336][ T30] audit: type=1326 audit(367.758:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29cf18bad0 code=0x7ffc0000 [ 368.933083][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.459320][ T30] audit: type=1326 audit(367.758:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10017 comm="syz.4.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29cf18d169 code=0x7ffc0000 [ 369.757518][T10043] sg_write: data in/out 2031668/2 bytes for SCSI command 0x26-- guessing data in; [ 369.757518][T10043] program syz.4.1072 not setting count and/or reply_len properly [ 370.238364][ T9] IPVS: starting estimator thread 0... [ 370.320418][ T971] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 370.340404][T10055] IPVS: using max 28 ests per chain, 67200 per kthread [ 370.348285][T10057] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 370.400082][T10057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.530818][ T971] usb 6-1: Using ep0 maxpacket: 16 [ 370.735410][T10057] vlan2: entered promiscuous mode [ 370.740909][ T971] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.747000][T10057] bond2: entered promiscuous mode [ 370.757475][ T971] usb 6-1: config 0 interface 0 has no altsetting 0 [ 370.935358][T10068] vivid-004: disconnect [ 370.956666][T10068] vivid-004: reconnect [ 371.293501][ T971] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 371.302714][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.319733][ T971] usb 6-1: config 0 descriptor?? [ 371.377768][T10057] bond2: left promiscuous mode [ 371.410938][ T2147] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 371.583370][ T2147] usb 1-1: Using ep0 maxpacket: 8 [ 371.612867][ T2147] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.633421][ T2147] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 371.651396][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 371.662382][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 371.673912][ T2147] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 371.689743][ T2147] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 371.702775][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 371.716770][ T2147] usb 1-1: Product: syz [ 371.726816][ T2147] usb 1-1: Manufacturer: syz [ 371.730989][ T971] bigben 0003:146B:0902.001E: unexpected rdesc, please submit for review [ 371.739878][ T2147] usb 1-1: SerialNumber: syz [ 371.768491][ T2147] usb 1-1: config 0 descriptor?? [ 371.770736][ T971] bigben 0003:146B:0902.001E: unknown main item tag 0x0 [ 371.865058][ T971] bigben 0003:146B:0902.001E: unknown main item tag 0x0 [ 371.875992][ T971] bigben 0003:146B:0902.001E: unknown main item tag 0x0 [ 371.913400][ T971] bigben 0003:146B:0902.001E: unknown main item tag 0x0 [ 372.000881][ T971] bigben 0003:146B:0902.001E: unknown main item tag 0x0 [ 372.049216][ T2147] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 372.055073][ T971] bigben 0003:146B:0902.001E: hidraw0: USB HID v0.05 Device [HID 146b:0902] on usb-dummy_hcd.5-1/input0 [ 372.080764][ T2147] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 372.108631][ T971] bigben 0003:146B:0902.001E: missing HID_OUTPUT_REPORT 0 [ 372.117236][ T971] bigben 0003:146B:0902.001E: no output report found [ 372.290521][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 372.295296][ T2147] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 372.307924][ T2147] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 372.320683][ T2147] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 372.440494][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 372.448620][ T9] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 372.457032][ T9] usb 3-1: config 5 has no interface number 0 [ 372.463212][ T9] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 372.474934][ T9] usb 3-1: config 5 interface 123 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 8 [ 372.484983][ T9] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 372.495194][ T9] usb 3-1: config 5 interface 123 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 0 [ 372.505044][ T9] usb 3-1: config 5 interface 123 has no altsetting 0 [ 372.510288][ T2147] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 372.521038][ T9] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 372.530065][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.538119][ T9] usb 3-1: Product: syz [ 372.542355][ T9] usb 3-1: Manufacturer: syz [ 372.546965][ T9] usb 3-1: SerialNumber: syz [ 372.549230][ T5899] usb 6-1: USB disconnect, device number 13 [ 372.570959][T10075] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 372.640431][ T971] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 372.792343][ T971] usb 5-1: Using ep0 maxpacket: 8 [ 372.805811][ T971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 372.819477][ T971] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.829174][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.842800][ T9] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 372.856218][ T971] usb 5-1: config 0 descriptor?? [ 372.862667][ T9] usb 3-1: USB disconnect, device number 28 [ 373.079848][ T971] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 373.410407][ T971] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 373.490133][T10092] sg_write: data in/out 2031668/2 bytes for SCSI command 0x26-- guessing data in; [ 373.490133][T10092] program syz.2.1087 not setting count and/or reply_len properly [ 373.538072][ T2147] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 373.564048][ T971] usb 4-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 373.581374][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.585145][ T2147] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 373.598909][ T971] usb 4-1: Product: syz [ 373.610156][ T971] usb 4-1: Manufacturer: syz [ 373.627230][ T971] usb 4-1: SerialNumber: syz [ 373.636913][ T2147] usb 1-1: USB disconnect, device number 25 [ 373.668911][ T971] usb 4-1: config 0 descriptor?? [ 373.712304][ T971] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 373.873281][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 373.888409][ T5904] usb 5-1: USB disconnect, device number 31 [ 373.889296][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1092'. [ 373.938806][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 373.987610][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 373.995050][T10106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1091'. [ 373.996654][T10103] netlink: 'syz.2.1091': attribute type 11 has an invalid length. [ 374.417528][T10108] netlink: 'syz.4.1093': attribute type 1 has an invalid length. [ 374.444679][ T971] gspca_sn9c20x: Write register 1001 failed -110 [ 374.463805][ T971] gspca_sn9c20x: Device initialization failed [ 375.221652][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 375.330492][ T971] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 375.501621][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.516481][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 375.630404][ T9] usb 6-1: config 1 has no interface number 1 [ 375.636539][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 375.652614][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 375.664237][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.672492][ T971] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 375.690361][ T9] usb 6-1: Product: syz [ 375.694550][ T9] usb 6-1: Manufacturer: syz [ 375.699144][ T9] usb 6-1: SerialNumber: syz [ 375.833273][ T971] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.900389][ T971] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 375.910081][ T971] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.931958][ T9] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 375.939804][ T9] usb 6-1: 2:1 : format type 9 is not supported yet [ 375.958416][ T971] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 375.969262][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.990580][ T9] usb 6-1: USB disconnect, device number 14 [ 376.003696][ T971] usb 5-1: Product: syz [ 376.007888][ T971] usb 5-1: Manufacturer: syz [ 376.040891][ T971] usb 5-1: SerialNumber: syz [ 376.201793][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.253405][ T971] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 376.286784][T10132] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1101'. [ 376.762355][T10140] netlink: 'syz.0.1103': attribute type 1 has an invalid length. [ 376.795203][T10140] 8021q: adding VLAN 0 to HW filter on device bond4 [ 376.822731][ T5899] usb 4-1: USB disconnect, device number 28 [ 377.066017][T10146] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1105'. [ 377.600415][ T971] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 378.263515][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.402176][ T971] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1152, setting to 1024 [ 378.437798][ T971] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 378.447822][ T971] usb 1-1: config 1 interface 0 has no altsetting 0 [ 378.482882][ T2147] usb 5-1: USB disconnect, device number 32 [ 378.489624][ T2147] usblp0: removed [ 378.502682][ T971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 378.520456][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.538383][ T971] usb 1-1: Product: syz [ 378.554867][ T971] usb 1-1: Manufacturer: syz [ 378.559482][ T971] usb 1-1: SerialNumber: syz [ 378.582492][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 378.582504][ T30] audit: type=1400 audit(831.555:920): avc: denied { bind } for pid=10163 comm="syz.4.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 378.607980][T10151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 379.681246][T10167] netlink: 'syz.2.1111': attribute type 1 has an invalid length. [ 380.147900][ T971] usb 1-1: USB disconnect, device number 26 [ 380.171616][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'. [ 380.215996][ T30] audit: type=1400 audit(833.185:921): avc: denied { append } for pid=10178 comm="syz.2.1115" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.843911][T10194] Unsupported ieee802154 address type: 0 [ 381.791367][ T5899] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 381.978030][ T30] audit: type=1400 audit(834.945:922): avc: denied { ioctl } for pid=10203 comm="syz.0.1122" path="socket:[26739]" dev="sockfs" ino=26739 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 381.982256][T10206] netdevsim netdevsim0: Direct firmware load for . [ 381.982256][T10206] failed with error -2 [ 382.013432][T10206] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 382.013432][T10206] [ 382.025216][ T5899] usb 5-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 382.039026][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.124532][ T5899] usb 5-1: Product: syz [ 382.260085][ T5899] usb 5-1: Manufacturer: syz [ 382.270533][ T5899] usb 5-1: SerialNumber: syz [ 382.276844][ T5899] usb 5-1: config 0 descriptor?? [ 382.285500][ T5899] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 382.479692][T10215] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1124'. [ 382.493779][T10216] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1124'. [ 382.560412][ T5898] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 382.754716][T10222] FAULT_INJECTION: forcing a failure. [ 382.754716][T10222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.768034][T10222] CPU: 0 UID: 0 PID: 10222 Comm: syz.2.1125 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 382.768056][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 382.768065][T10222] Call Trace: [ 382.768071][T10222] <TASK> [ 382.768077][T10222] dump_stack_lvl+0x16c/0x1f0 [ 382.768105][T10222] should_fail_ex+0x50a/0x650 [ 382.768134][T10222] _copy_from_user+0x2e/0xd0 [ 382.768152][T10222] sel_write_load+0x300/0x1c60 [ 382.768177][T10222] ? __pfx___lock_acquire+0x10/0x10 [ 382.768209][T10222] ? __pfx_sel_write_load+0x10/0x10 [ 382.768234][T10222] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 382.768258][T10222] ? rcu_is_watching+0x12/0xc0 [ 382.768275][T10222] ? trace_lock_acquire+0x14e/0x1f0 [ 382.768304][T10222] ? __pfx_sel_write_load+0x10/0x10 [ 382.768323][T10222] vfs_write+0x24c/0x1150 [ 382.768351][T10222] ? __fget_files+0x1fc/0x3a0 [ 382.768367][T10222] ? __pfx___mutex_lock+0x10/0x10 [ 382.768391][T10222] ? __pfx_vfs_write+0x10/0x10 [ 382.768422][T10222] ? __fget_files+0x206/0x3a0 [ 382.768447][T10222] ksys_write+0x12b/0x250 [ 382.768463][T10222] ? __pfx_ksys_write+0x10/0x10 [ 382.768491][T10222] do_syscall_64+0xcd/0x250 [ 382.768515][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.768537][T10222] RIP: 0033:0x7fe13838d169 [ 382.768551][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.768567][T10222] RSP: 002b:00007fe139276038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.768584][T10222] RAX: ffffffffffffffda RBX: 00007fe1385a6080 RCX: 00007fe13838d169 [ 382.768594][T10222] RDX: 0000000000002000 RSI: 0000400000000380 RDI: 0000000000000006 [ 382.768605][T10222] RBP: 00007fe139276090 R08: 0000000000000000 R09: 0000000000000000 [ 382.768615][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.768625][T10222] R13: 0000000000000000 R14: 00007fe1385a6080 R15: 00007ffdf52c0478 [ 382.768649][T10222] </TASK> [ 383.047011][ T5899] gspca_sn9c20x: Write register 1001 failed -110 [ 383.193834][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 383.198683][ T5899] gspca_sn9c20x: Device initialization failed [ 383.203591][ T5898] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 383.203617][ T5898] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 383.252348][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 383.261455][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.269447][ T5898] usb 4-1: Product: syz [ 383.273806][ T5898] usb 4-1: Manufacturer: syz [ 383.278516][ T5898] usb 4-1: SerialNumber: syz [ 383.357264][ T5899] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 383.785409][ T5898] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 383.981021][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1128'. [ 384.025411][T10233] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.034596][T10233] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.043484][T10233] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.052333][T10233] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.210666][ T5899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 384.397334][ T5899] usb 1-1: config index 0 descriptor too short (expected 258, got 36) [ 384.422920][ T5899] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 384.487664][ T5899] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 384.499913][ T5899] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 384.516407][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.586991][ T5899] usb 1-1: config 0 descriptor?? [ 384.825006][T10234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.835869][T10234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.846817][ T5830] Bluetooth: hci0: unexpected subevent 0x04 length: 232 > 11 [ 384.855212][ T5899] usb 1-1: string descriptor 0 read error: -71 [ 384.865332][ T5899] usb 1-1: USB disconnect, device number 27 [ 385.032889][ T5898] usb 5-1: USB disconnect, device number 33 [ 385.126240][ T30] audit: type=1400 audit(838.095:923): avc: denied { getopt } for pid=10251 comm="syz.4.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 385.152811][ T30] audit: type=1326 audit(838.125:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10251 comm="syz.4.1133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29cf18d169 code=0x0 [ 385.361634][ T5898] usb 4-1: USB disconnect, device number 29 [ 385.387154][ T5898] usblp0: removed [ 385.615608][ T30] audit: type=1400 audit(838.585:925): avc: denied { read } for pid=10261 comm="syz.0.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 385.826738][ T30] audit: type=1400 audit(838.795:926): avc: denied { map } for pid=10261 comm="syz.0.1138" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 385.994759][T10269] mmap: syz.5.1139 (10269) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 386.092944][ T30] audit: type=1400 audit(839.055:927): avc: denied { mount } for pid=10271 comm="syz.5.1140" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 386.175299][ T30] audit: type=1400 audit(839.145:928): avc: denied { write } for pid=10271 comm="syz.5.1140" lport=45104 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 386.500613][ T5898] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 386.567975][ T30] audit: type=1400 audit(839.535:929): avc: denied { setopt } for pid=10276 comm="syz.3.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.691663][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.706343][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.716227][ T5898] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 386.729726][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.744721][ T5898] usb 6-1: config 0 descriptor?? [ 387.993417][ T5898] usb 6-1: string descriptor 0 read error: -71 [ 388.000706][ T5898] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 388.009492][ T5898] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 388.017666][ T5898] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 388.025887][ T5898] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 388.033578][ T5898] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 388.050486][ T5898] usb 6-1: USB disconnect, device number 15 [ 388.094949][T10302] tmpfs: Unknown parameter '��' [ 388.110562][ T5904] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 388.238404][T10308] lo: entered allmulticast mode [ 388.247698][T10308] lo: left allmulticast mode [ 388.282370][ T5904] usb 3-1: not running at top speed; connect to a high speed hub [ 388.304823][ T5904] usb 3-1: config 1 interface 0 has no altsetting 0 [ 388.316765][ T5904] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.326208][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.363514][ T5904] usb 3-1: Product: syz [ 388.384149][ T5904] usb 3-1: Manufacturer: syz [ 388.397868][ T30] audit: type=1400 audit(841.365:930): avc: denied { mounton } for pid=10307 comm="syz.0.1151" path="mnt:[4026532799]" dev="nsfs" ino=4026532799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 388.423492][ T5904] usb 3-1: SerialNumber: syz [ 388.600228][ T30] audit: type=1400 audit(841.565:931): avc: denied { unmount } for pid=6664 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 388.601636][ T6664] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000056: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 388.632010][ T6664] KASAN: null-ptr-deref in range [0x00000000000002b0-0x00000000000002b7] [ 388.640416][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 388.651261][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.661312][ T6664] RIP: 0010:afs_atcell_get_link+0x33e/0x480 [ 388.667217][ T6664] Code: 89 c3 89 c6 e8 43 a9 3b fe 85 db 75 64 e8 3a ae 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 [ 388.686828][ T6664] RSP: 0018:ffffc9000d197988 EFLAGS: 00010206 [ 388.692894][ T6664] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e452a [ 388.700865][ T6664] RDX: 0000000000000056 RSI: ffffffff837e44b6 RDI: 00000000000002b0 [ 388.708835][ T6664] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 388.716805][ T6664] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 388.724774][ T6664] R13: ffff88805b19c000 R14: 0000000000000003 R15: ffff8880456b9480 [ 388.732739][ T6664] FS: 0000555588db0500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 388.741645][ T6664] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.748208][ T6664] CR2: 0000555588dd3608 CR3: 000000006ad28000 CR4: 00000000003526f0 [ 388.756157][ T6664] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.764114][ T6664] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.772079][ T6664] Call Trace: [ 388.775349][ T6664] <TASK> [ 388.778267][ T6664] ? die_addr+0x3b/0xa0 [ 388.782413][ T6664] ? exc_general_protection+0x155/0x230 [ 388.787941][ T6664] ? asm_exc_general_protection+0x26/0x30 [ 388.793646][ T6664] ? afs_atcell_get_link+0x39a/0x480 [ 388.798918][ T6664] ? afs_atcell_get_link+0x326/0x480 [ 388.804190][ T6664] ? afs_atcell_get_link+0x33e/0x480 [ 388.809472][ T6664] ? afs_atcell_get_link+0x326/0x480 [ 388.814759][ T6664] ? __pfx_afs_atcell_get_link+0x10/0x10 [ 388.820384][ T6664] step_into+0x1982/0x2220 [ 388.824791][ T6664] ? __pfx_step_into+0x10/0x10 [ 388.829541][ T6664] ? lookup_fast+0x153/0x5f0 [ 388.834119][ T6664] path_openat+0x74c/0x2d80 [ 388.838609][ T6664] ? __pfx_path_openat+0x10/0x10 [ 388.843526][ T6664] ? __pfx___lock_acquire+0x10/0x10 [ 388.848710][ T6664] ? lock_acquire.part.0+0x11b/0x380 [ 388.853981][ T6664] ? find_held_lock+0x2d/0x110 [ 388.858729][ T6664] do_filp_open+0x20c/0x470 [ 388.863223][ T6664] ? __pfx_do_filp_open+0x10/0x10 [ 388.868234][ T6664] ? find_held_lock+0x2d/0x110 [ 388.872985][ T6664] ? alloc_fd+0x41f/0x760 [ 388.877301][ T6664] do_sys_openat2+0x17a/0x1e0 [ 388.881963][ T6664] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.887145][ T6664] ? do_unlinkat+0x165/0x760 [ 388.891720][ T6664] ? __virt_addr_valid+0x5e/0x590 [ 388.896726][ T6664] ? __pfx_do_unlinkat+0x10/0x10 [ 388.901646][ T6664] __x64_sys_openat+0x175/0x210 [ 388.906478][ T6664] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.911837][ T6664] do_syscall_64+0xcd/0x250 [ 388.916326][ T6664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.922205][ T6664] RIP: 0033:0x7f85c498bad0 [ 388.926598][ T6664] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 388.946183][ T6664] RSP: 002b:00007ffcf9a62da0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 388.954576][ T6664] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f85c498bad0 [ 388.962526][ T6664] RDX: 0000000000000000 RSI: 00007ffcf9a62ed0 RDI: 00000000ffffff9c [ 388.970475][ T6664] RBP: 00007ffcf9a62ed0 R08: 0000000000000000 R09: 0000000000000000 [ 388.978423][ T6664] R10: 0000000000000000 R11: 0000000000000293 R12: 00007ffcf9a63fc0 [ 388.986371][ T6664] R13: 00007f85c4a0e08c R14: 0000555588db04a8 R15: 00007ffcf9a65090 [ 388.994330][ T6664] </TASK> [ 388.997331][ T6664] Modules linked in: [ 389.001898][ T6664] ---[ end trace 0000000000000000 ]--- [ 389.040388][ T6664] RIP: 0010:afs_atcell_get_link+0x33e/0x480 [ 389.049783][ T5904] usb 3-1: bad CDC descriptors [ 389.050892][ T6664] Code: 89 c3 89 c6 e8 43 a9 3b fe 85 db 75 64 e8 3a ae 3b fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 [ 389.066614][ T5904] usb 3-1: USB disconnect, device number 29 [ 389.120469][ T6664] RSP: 0018:ffffc9000d197988 EFLAGS: 00010206 [ 389.128128][ T6664] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837e452a [ 389.136311][ T6664] RDX: 0000000000000056 RSI: ffffffff837e44b6 RDI: 00000000000002b0 [ 389.144773][ T6664] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 389.153686][ T6664] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 389.162045][ T6664] R13: ffff88805b19c000 R14: 0000000000000003 R15: ffff8880456b9480 [ 389.170064][ T6664] FS: 0000555588db0500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 389.179250][ T6664] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.185943][ T6664] CR2: 00007f9fdd4335e8 CR3: 000000006ad28000 CR4: 00000000003526f0 [ 389.194114][ T6664] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 389.202300][ T6664] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 389.220596][ T6664] Kernel panic - not syncing: Fatal exception [ 389.226854][ T6664] Kernel Offset: disabled [ 389.231164][ T6664] Rebooting in 86400 seconds..