last executing test programs: 6m5.8227304s ago: executing program 3 (id=700): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, 0x0, 0x46) recvmmsg(r1, &(0x7f000000b700), 0x3, 0x40002042, 0x0) 6m5.213799519s ago: executing program 3 (id=702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000100), 0x1001) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(&(0x7f0000000240), 0x1c07fffffc, 0x24302) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000) r2 = syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000380)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r5, 0x0, 0x2fff, 0x2, &(0x7f0000000180)='\x00\x00'}) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "b9dc05cc9591a0e9", "9d597b8566fb9b1ff9e847ef151545d4", "a483a4b2", "b2e71c7c92421350"}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 6m4.060614255s ago: executing program 3 (id=707): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x14}, @NL80211_ATTR_PMKID={0x14, 0x55, "b2bd2139d8ab6c288edc13d2706afa32"}]}, 0x30}}, 0x4000000) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() (async) r4 = socket(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580), &(0x7f00000005c0)='%pK \x00'}, 0x20) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x10001}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x7fffffff}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'pimreg1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) connect$unix(r11, 0x0, 0x0) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) 6m0.362561779s ago: executing program 3 (id=711): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f00000000c0)='fdinfo/3\x00') 6m0.128984161s ago: executing program 3 (id=713): r0 = syz_clone(0x4000000, &(0x7f0000000200)="18e0692660ce344ee9802457012ad7736dc3ea001257135c5c0bb11301907a04cbd62f4be8a84db6f136f44515b675dddca2f17cb8667043d1c23be91de5129348c2485580e0fe3903c29ce37be6a463990ac33f9bd5bb366c7291e07bca5a0a4ce9b8ba807caac745a0f42b8c2a53179a50082c252e40c9f51589e15bfce7069c2912c2dd4af1e8ec6e64d65a84726dc89765ef886920af3477f861576db98b2f083b715d4881b78a81f3a8d93f06901a7f760ea8e1b9de8d4146399b36fdeda53905d213f8fd681c4ab230a091aac328fd12c5d39c", 0xd6, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300)="4eb8eb236f4b01312359b4fb3a0baad950f2154885a1f1fe9063746c0ae155d20052f174bc97b0729991dd8e3e9f57711ea60523636e880ae329f04a") tkill(r0, 0x1a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="73000000000000008b"]) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x80800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf250700000008000300", @ANYRES32, @ANYBLOB="08000500020000001400040070696d36726567300000000000000004"], 0x38}}, 0x24000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0xfc, 0x10, 0x7, 0x0, 0x0, {{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x0, 0x2b}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x3}, {0x20000}, 0x0, 0x0, 0x2, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xa0}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r3, 0xf967b995995be57b, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002f00)}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5m58.388012075s ago: executing program 3 (id=718): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x50) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x80003, 0x0, [0xfffffffc, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000080)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x18603}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1200, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) 5m58.223832403s ago: executing program 32 (id=718): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x50) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x80003, 0x0, [0xfffffffc, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000080)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x18603}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1200, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) 6.726479438s ago: executing program 2 (id=1784): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r3, &(0x7f0000000100)=@ocfs2={0xc, 0xfe, {0x4}}, 0x260040) 5.969980267s ago: executing program 2 (id=1786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x468100, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000c7754a13d700d35796640000017700000000000000002000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.883266278s ago: executing program 4 (id=1787): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, &(0x7f0000000040)={0x7, 0x7, 0x7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10) r2 = memfd_secret(0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000000c0)={0x1, 0x6, 0x7, 0x8000, 0xff, 0xa582, 0x5, 0x4, 0x0, 0x100, 0x4, 0x3}) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000180)={0x2000000000000000, 0x7, 0xffffff09, 0x9081, 0x3, 0xf, "26c6543e2e3d9fcb79a93781b542ff6b", 0x9, 0x3, 0x8a, 0xd, 0x31, 0x4, 0x7}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x118, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x1, 0x4, 0x0, [0x1, 0xb9, 0x2, 0x4, 0x2fc3, 0x8, 0x25b0, 0x8, 0xff, 0x8, 0x0, 0xfff9, 0x3, 0x3, 0x3, 0x3a07], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xffffffff, 0xff0000ff], [], 'dvmrp0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x0, 0x8, 0x3, 0x16}, 0x0, 0x308, 0x328, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d4], 0xfffffffd, 0x81, 0x1}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) write$cgroup_freezer_state(r2, &(0x7f00000007c0)='FREEZING\x00', 0x9) sendmsg$nl_generic(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x2b, 0x100, 0x70bd2c, 0x25dfdbfe, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x40000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={r3, @broadcast, @empty}, 0xc) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000009c0)=0x1, 0x4) vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000a00)="62d7cdbdbb0af33ee740bfca6262ab3d75e6c835eb11c3e2d9ba0e7eecd804d539d678f58c18e89d9971b04c7504e6905f6a9c2d23aee7e72b4506a0d4972b2234a3a10d", 0x44}, {&(0x7f0000000a80)="f10a67ead892abbb15b13f220632ba42e1925725e67b69bff018cfb1eac18b1876cc189c3db4859cdb7b866d6f1592718ac495dbe38a6dd6ca9bab24be76057992758bd5dc3229c4b16f0df687f5687fa93e826eb9a8ee34e8fe01b1ee6c9d0f30de8544582d29de7cedf8b89237c181938a0246a5461ee5fc5fe1f0bcf6eaac51a71eabbf717c1d892a112a1609b2f5f395ec1d9376315f1a2751bc90dc2196339608663f45bb0b2a7ae3fa98a81221d580085915dba5487159a6be2c33d68461946206766dea14d86184", 0xcb}], 0x2, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002e40)={0xa, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/1, 0x1}, {&(0x7f0000001c00)=""/15, 0xf}, {&(0x7f0000001c40)=""/10, 0xa}, {&(0x7f0000001c80)=""/100, 0x64}, {&(0x7f0000001d00)=""/125, 0x7d}, {&(0x7f0000001d80)=""/4096, 0x1000}], &(0x7f0000002e00)=[0x2], 0x7}, 0x20) r4 = syz_open_dev$video4linux(&(0x7f0000002e80), 0x6, 0x80102) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000003f00)={'filter\x00', 0x0, 0x4, 0x1000, [0x2, 0x84c, 0xffff, 0xcbd2, 0xfff, 0x8984], 0x3, &(0x7f0000002ec0)=[{}, {}, {}], &(0x7f0000002f00)=""/4096}, &(0x7f0000003f80)=0x78) bind$bt_sco(r2, &(0x7f0000003fc0)={0x1f, @none}, 0x8) mq_open(&(0x7f0000004000)='filter\x00', 0x40, 0x20, &(0x7f0000004040)={0x8, 0x81, 0x800, 0x5}) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000004080)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000004480)={r5, "c28bd0f30e8fae18d7d0327eb97c6492"}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000005540)={&(0x7f0000005480), 0xc, &(0x7f0000005500)={&(0x7f00000054c0)=@ipmr_delroute={0x1c, 0x19, 0x100, 0x70bd26, 0x25dfdbff, {0x80, 0x0, 0x20, 0x0, 0xfc, 0x3, 0x0, 0xa, 0x100}}, 0x1c}}, 0x4000) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000005580), &(0x7f0000005600)=0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000005700)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000056c0)={&(0x7f0000005680)={0x38, 0x1403, 0x2, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044084}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000005740)={0x4, 0x5}) 5.881899088s ago: executing program 2 (id=1788): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x23, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYBLOB="53f53c34b4218c6574488881236a7c06000000cab7ea57fc2314ece96172860777014a3311633608a262e9c9d5358e4ed40300849c8a620a37b4291cf2b2db354c91b209cdd81f0428079b6febeb4ed8f6b1c14af527e2869d6ace9143da4db80062d06afe8be1d2b22de97e164270fae6a4e10b6655bfb70000000061743cd7e23ec80785bce94a7b8d7ffb069141aefcd199e8117f0e728ba0c42957bb27351560cce938bd503db9f08f3c16689afa25d9369b1e76632477a2605c279982349742954f8060dd67ce7000000000ba46fc3601dd10962e41c34c50e53896df8dd276bb99e9b6945990b3f062d988", @ANYBLOB="021b00001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x48) 5.747876349s ago: executing program 0 (id=1790): syz_open_dev$dmmidi(&(0x7f0000000080), 0xfc, 0x8081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x40000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) set_mempolicy(0x4005, 0x0, 0x9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) userfaultfd(0x80001) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0xff01) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) timer_create(0x1, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.735085619s ago: executing program 4 (id=1791): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip6tnl0\x00', r4, 0x2f, 0xf3, 0xb, 0x10001, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x20, 0x8000, 0x7, 0x7}}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') setns(r6, 0x0) (async) setns(r6, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) (async) r7 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300)=0x6e) (async) r8 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300)=0x6e) recvmsg$unix(r8, &(0x7f0000000840)={&(0x7f0000000340), 0x6e, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000640)=""/66, 0x42}, {&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000740)=""/245, 0xf5}], 0x8, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x102) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303031a6e42a202c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) unlink(&(0x7f00000002c0)='./file0\x00') 5.663876772s ago: executing program 2 (id=1792): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000500, 0x0, &(0x7f00000000c0)={0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000280)={0x6, 0x1ff, 0x9}) chdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_io_uring_setup(0xd5, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f00000000c0)={0x1}) ioctl$int_in(r4, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x0) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x100000) 5.661692788s ago: executing program 1 (id=1794): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x4, 0x3a, 0xffd, 0x3a, 0x1, 0x1f85, 0xba}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1000000001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000280)=0xc) sendmsg$AUDIT_SET(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x356c307b4ed17573, 0x3e9, 0x4, 0x70bd2b, 0x25dfdbfc, {0x5a, 0x0, 0x0, r3, 0x2, 0x2e, 0xe, 0x1, 0x0, 0x7, 0x2}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x100) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x24044010) socket(0x200000000000011, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) syz_emit_vhci(0x0, 0x22) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.10675729s ago: executing program 4 (id=1795): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r5 = epoll_create1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r7, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x1b, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) read(r1, &(0x7f0000000280)=""/234, 0xea) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000380), 0x208e24b) r11 = syz_io_uring_setup(0x565c, &(0x7f0000000100)={0x0, 0xe426, 0x8, 0x2, 0x1d7}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES2(r11, 0xd, &(0x7f0000000380)={0x1, 0xdec35fd78e70d9e5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x0}, 0x20) 5.104637453s ago: executing program 2 (id=1796): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x3504, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) pipe2(&(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=0x0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x3fffffff, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) 4.924313737s ago: executing program 0 (id=1797): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x5f5600, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_usb_connect$cdc_ncm(0x7, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xa, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xd3d}, {0xd, 0x24, 0xf, 0x1, 0x239c, 0x377c, 0xc0, 0x2}, {0x6, 0x24, 0x1a, 0x8, 0x3e}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x7, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0xb, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0x6, 0x1}}}}}}}]}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000800)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20300, 0x0) r3 = open_tree(r2, &(0x7f00000002c0)='./file0\x00', 0x2100) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x1c243811) keyctl$chown(0x4, r4, 0xee00, 0x0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0xee00]) keyctl$chown(0x4, r4, 0xffffffffffffffff, r5) setgroups(0x0, 0x0) keyctl$revoke(0x3, r4) socket$kcm(0xa, 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000200)='./bus\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='svc_alloc_arg_err\x00', r3, 0x0, 0x1000}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) mount$fuse(0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001500)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_connect$uac1(0x6, 0xc0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010902ae0003010080090904000000010100000a24010700060201020c24080400000090e99084b909240505007424f7100b24050601c89a6db4ac000824040d046022f30c240205ff010400090007030c240203000202057e0f080309040100000102000009040101010102000009050109200005077f072501025c000009040200000102000009040201010102000008240201eb01247cc41a1ca6f340c10905820940004d0d0307250180090000"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 4.710418724s ago: executing program 1 (id=1799): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001880)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000100007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ptrace(0x10, 0x0) 4.281919067s ago: executing program 0 (id=1800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000280)=0xc) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x4) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x2) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0x12) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1c07fffffc, 0x24302) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000180)=0x74000000) r5 = syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_SHUTDOWN={0x22, 0x45, 0x0, r2, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0x110) write$dsp(r4, &(0x7f0000000480)="60af8864e64ceaa372facb8bd5b4583472f32b187821c33be4a8f26fd2ccd12b2569ff86029d348831889356d38c2b9d6c4409b0590dd453298ee51ecb5215b8b150d8b6a25e0a362c06857ae62ae3ade3fa250043494ee93d5c14ef843078aebb8bdf4ce481bcb0452fa4040e4b4f74de58c759ec7ca455080ba5654648636b24db1b5fcf2fa3de1d3d783543c08df2e0ae77ddf7d8d22f89eddcdf2b4a5ee5622dd0015b69adad26b459b21b729d0368aa638eb7a83a9e5b96f22d819c0d961ad9d12b5d55", 0xc6) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000080), 0x1c) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r11, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7a4}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f0000000380)={0x28, 0x4, r11, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r11, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r10, 0x3ba0, &(0x7f0000000580)={0x48, 0x8, r12, 0x0, 0x2fff, 0x10, &(0x7f0000000600)='\x00\x00'}) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "b9dc05cc9591a0e9", "9d597b8566fb9b1ff9e847ef151545d4", "a483a4b2", "b2e71c7c92421350"}, 0x28) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r9}, 0x8) 3.959806825s ago: executing program 1 (id=1801): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x5f5600, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180000006a00f9090000000000fbffffffffffffff000000c66b669ff7e1a823e4be419927464794e3f4af21a047ff475062c99fc5f75e5486c1f672b04df40598e94ec22af8ba6aab3fb37d4c4d73b46dc8bccc3dffdae03592fb21"], 0x18}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20300, 0x0) open_tree(r2, &(0x7f00000002c0)='./file0\x00', 0x2100) socket$kcm(0xa, 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000200)='./bus\x00') r3 = syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x80) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) mount$fuse(0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001500)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_DELRULE={0x60, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88ca}]}]}, @NFT_MSG_DELSETELEM={0x2c40, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c14, 0x3, 0x0, 0x1, [{0x268, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x264, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x54, 0x1, "1cf2a5eb826944fb7c08b57f0cc5b8ac71aff906ee3db768e1dda034146f42cbc721e1bcd714270df174ab017f948678b68c437408bb632ff371cfe4043eaded54ce2c6542a9150099cf9f82975cfc27"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "64b3a9c7ad7e704fcc87ccd9fa848bf57cff617a17f2278606e156f64ca7b9805078ee720aa1e50c65bcf5f75868e1e19d5dbdba76367cbaee288decfc9e88134f2c65c3ef7d34cbb0b46b33789bd6f3c1514459e8c4f65c01afa1158f75e220c6727d223f56f799edf43b4ff6ed3827d42467981f238c6d435629acc1e72dd38cd2059053cf7704d62942a88d005f1c1e2fbded5b6abc0375456e3920cc5d4dcdce6dae8002f06531d248f9cd43e385"}, @NFTA_DATA_VALUE={0xbd, 0x1, "03e7dd643940725c8e5660df74c11c77a23ea450f842087734ea4b3391837f291d3e412e8c507584a6298f85c9a2b73490f2e1b26f91287625c3e26835cd66ae73c4519fbcf2722452e44281c15604bd7d9952b7cb660915abdd964aa528ae1c3a1f421e75b6a1ca8a274b7d58b23e97db26b1b362a62f697e94af626a5bddb937340f0113b665616a56231631aae736d65e43c592fd689b783c5fa9ad4ed057f17c490da1e62053af10656051e9b9bc0aca55e189ed0caf94"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x46, 0x1, "646de3168b6b430c6d6ba7cd7a8f0142fc4811691676975bfacab6a30e5174d7c7f328ef7ac941556123fdbd2a9cb92dd7c971bc80a0b24f5d12fa70f37bc45a2164"}]}]}, {0x55c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa5, 0x6, 0x1, 0x0, "58bdb115b0ef79262df03a7049ec6107be73559ecf1c3ca587e6669af1afa8a83bf46047f509df036937eb2499fd591f42a956de6adfc6f37e49842bd6569e8c1d1ce913c88ee4f0d16ffe2164ebfe3b265caab239e963898311b1e42356134843dbb1baa896bcd2003724d8a8db881a523fd816bd140d03ad95b03226a5475bbf435b86fbbf044cdcf009705acd41a7be0415e79b6bac482c10c7db69dce14210"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0xd3, 0x6, 0x1, 0x0, "88f47d308dfad0132af3565b9ad16bbdf8c4cdf2b1b344e1b24d8a1c4b0e108cd348d1d876943e7ff0ac611cd3a11ffd8093531bcb04c0b26ed8da24827a938f1608329e788ec57831be62dc0647739c88349d5681ff59a3b14f95455dad28cbb4a8647c03e18fbe9b7989725654151af3a00dd90d3c5a1538ed653ed6722f03520041fda6e39651c66e1d535dbe46484ef8dc316d142c1c3fc2ce3b050082a18d083c7c55e9fa27bd908d1809db539b57e60629f54a42e21ebc7fb5686df23e564e4d6cf2fcca89e266f2452e5606"}, @NFTA_SET_ELEM_KEY={0x2fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "8f116ae2e32695311f770761e9dc79cb8865f5d494a968791900b707f3c30e53083f1459e048acac6b6b1f5d3a00d900c19dbb659a06dd92e9875e52c0f61ff739afa22fb604471f3b15e9411600529a6434615ef07d9df8c948dd1327ba00824a2e8575c4377be8621b1a9ca880afedee47c127056a5ccc0b51586c9f818e1930bc3e2cce84d4c1039dcb31e668ea16d03a0c4a5ffb01bc7a408b7057a5f35c5800f1daad70137eb1d42177d64bc9bcfac7884b77394665abc8ad21a5165d2d27"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "92d718105f6ab614c62dd18b461962f2dceb3efdbfb1d2ec6cac55ffce89f99a52a143231299c69fef91b9c76abde299accbc91dc528956e0c8d8fc21264e6ece3724c04620eae4e8f10ff44283c43da0c7c2bd3a2accdf2ccd67bb3fa4b9934dbd65fe643f3a8a6aa4301377f25d2993c27766b2cac4e6c9e41fe176711ca9161b25490eed66dc894bec0a251d92f36e45279392660fb29cf9059f0da7338da59222d186e2943fa10a17b56b3a2ae11c3a71713423d415264e987255a2f83a78db77045790781c0982ae3b63372ef2de861d5a6"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa9a}]}, {0x244c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x230, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x71, 0x1, "fd393b80605b940eb1be873e003c2f3b0c57087d713443c299dd06f8839ecd9484d614d7f75e193420ca9130a537d9b1670e21744b8a4bff3a88782a27ab4bfab4dcb8db94ee6dab993139bd14541aead691468aba1e5d0330751fb2bcae529166190b2e5253abb4656c676746"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "6078a4f8bf92fb05fafb4a20ebc69240c46aa0c427d738330bfca543c6c9e1f4d64af58befef46b8d1c175c20c9258b7a3efbefa3b34611e6912c71c6fd34c822f0dfab0f6639d1298a6678c880a606be92c0a2a79a7caa18707ce0ca6157634078ff0c29e6f40c632df0d61354cd5b4a740ef92fc3ef0f965f24e7eb53865005cdc577d13d909c92986de33c7ab1b78846ed5e87093b4c57dcd4880334b89a3"}, @NFTA_DATA_VALUE={0x8e, 0x1, "b225b1cf0c551ac7d30a373b9b4322c8bd616a8adb4fcb2b390bad64c67c503e42df4eec21d40271ff047a57aee1dbb60e41b467fe3696cdbbd000f5d2a1976b7b257112e476881cdbfca1a5f14cfd61752f58e8e00058c098e8f3e8f20bb4b2f267e8521e361c8f5b6f5b2dd88e6cd31545ac47807cf7ca041044c51e5761fac4552015ff1ca46be5b5"}]}, @NFTA_SET_ELEM_USERDATA={0xb9, 0x6, 0x1, 0x0, "bea23040b550849f57c901222c8286a3c8fd1bf6c59be32dbdeb2fa5aaf6aea7cd8607b58b8dca5beff8da875997c3233fe07d5471b8a8d2e7b525a00d904cc7043fe546acfdf5a384c3494465105cea848051bca68d64bb814932ca601f9b1131db67117468ddf8f6e9981d3c170fcb7beda26c6d075c904a4fb79d0a138045ddbe13a205d4466776a79b2b452f95ad4d752cd224bcaa7af84a526515393d6821419e94a1a43b530816effd2b5acbff6638bf0ff7"}, @NFTA_SET_ELEM_KEY={0x1040, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x10fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "5ccadeeb9753d98d727ddf4447e6aadf3e6ebf9aff1e08fb6a3ccf674a75d145eef2f601dd149c84aadadb54fc7964a5494df413ae430cb32e670f76afb5f7a67c79cf010f6210a3ebd71d73f2135a1805524da6130d0d36e049e9c38b9eee2a66df82f1417d0820abb854feb02e3dd8cb3901ba432340124237168cd6fba7b1241e638a774061233fd0325ee11a0f087e793fae8dfcc6928338dcb9d60ed5820d83a219487929a9e389d51f9ab6f9c3d494cae7c03182001c7b2d60839e5c9c95d6b0a23ca9a4ea391216c2154c3256d208e0dcd4c92696f05c1217899d075705a2df9e56d37cdf58224a2909a3e1610e1db89e9ef3790cdcd47b7c4fbc1426efded8e8c2d781ce07db8ce18395d87137687e674f752abe7cfae6b312df193a1ffb99ad8faf21765504b66bcc7725804686a28c2b8500eeacefaba166bef970914263789ea8f8b46b40e523f8c0521e5e1c18db168288bee391d239877a859a90757e6210952269ef81833a539ee8a16fa2645631b31c15cbabe87d90ea79087ce96e1bd23fa4f526b57bdf4b8298f36f08ac90db6834bedfd0560e2c0f72200d596ebc3f3fc1efdcb6829f4a89fba3fa515c8a34b9e63e694664c44b3a53fd6e5f93f42d6cd376f807957b739727a62558ba598dc265c14dbd8fd1465f94fc087b3ed2aa8f3783583a8189ca834a14650d91d38f6504f544c692b8b59e172614bb512ae13d6eea4bf9b7ca3a8da4252ea2a6845d256308aeb77955a1079cd7427f7854c8697af88b8faaef3937eb1a3594da87b223ff8678089ff4311e54184644f87bb52aa76c0034497907d8b3857d154b12724859ab86dea73a3d4799aee93c08af2ef010fa3bc2d61a20315ac30950107e8119918ca6bee9cdaf25e4d79366a4416bce38c7f0a7ffe4f7f590c25671fc1c5edef3d35c362b2b954229146d3e09bbf3eb0c1f95fd434822862777735b0081ca4d75a138c5790d3e38b461837d429e073cda92f7be4414f289121e377019d6186d7e16ae0f936b761b494cc589e33299eee6a4927f1c70eb556713754729cccf7121babc35f35898a00658970726d94cb90fe77e19e62d6fae61ebbadea3125b643e8b66785a3a69972a3afcde44e22e010f9d1bc57a8fa1d35d6edf235b4d1defff6b559ea6348d418ff1bc1433315a2e0358a9c231a99813806336ffe3966e2f3684417cb098361cfea26356fe0deaf317608612c02ad015b9d11767a4582559ae8df42276e9f9396c79bea2fda02da28fe6915c2ab545d5a52a5e36f3d0c76cbce4b69b4866a3f1662104b9e99bc557925e13425923ebe761873186191f3e7ba9efb16836cbc3a720b8edf2bd1016ecb76523bbffcdab26da2304e7d473522452a63ddf3cd4ff6b928f07a68cec16bd62a5cb29efdeee0e0fb8557119be9aceadc574e88e487f5d76756de304690b9060fe713ed53de2934301a9f4925a9332f8782de3de3167c3accf4b4ed2d07e2fda3792fbf4ced2913e4f92b737d2a593c35d5baa96c0ee36cf65ea1df506dc557257a5d72771b8d756f5fe4ee7c2975e24471e3c7be647b039941e8729c4d4dc19817ef947eb26da422c4409da5c324efcc518006761326cecfc508fbb6cc1a0523a1c9f11b020e553a10e9929afc42d2908ee30515bd49aedec6f56b1a8fa6fd8bd18ff15503e5676e33750cc5ce31e02193dbb7c976b84964ac43a3648104f75e4b2878257fc1d6a2909fe703e29a7795d240c89aff38ffe6e89a8283f428aeb424d3dc433c9902ee80004c3eaca0990bfdbf754842117237cf65e2d0da9a6ed43c3b831b0cfa7d5ead06d65cfb6813298c3ea4c137696f4c67eeb929a966dc5ef3672f8d0bb79e2e3406424eb3dfc46894625676ae91bde03d875e9d1c18b3855dd771b8216554945ad13eac477fe102f8d9930c011bf2feefc2527347ba646a2610569eb95a99cf472c1998529136880fad834b08250153f0b89ec085e42ec188a939009348fdbcc1facddd95cc00ba7d8c3d39ef2b0d610b541cb83dec785d2cb20daea6e54fd23eb52ed1fd730f31a39c9984c6c3df9d939365eb750fb7f892bfde54cad2555adb268925ba1bfdc690728707c90699729cb069e9de1b88e0aba4ec2cf8598b95ca47c78f0abfe6fa2de95a4672430b133a2eaa088415d68a301351b406c829e54020f7e6c8853959facfa83f457ef60c3dc8d7d7bbb6ee75554c3b8f73951b9f8ad535fe5bee91303cf7246f73c4d09ea89cc513aa8a0a211b335045579f8d33374f233839f6f51ad3e6bc09be08dcab729b27df555d7fc816e62d7125355c0d9e28f7fba67741f73863f37d0ae4179e742459218b5044afa7cefa70641c0a0a7f6425c919c219f47c321547e3f04f5c5ea15b2b92ece18b07f00348c7648a5d55e9d0462e2020fa40e4607229aa8e91cab1517c1fcf1b2721380b5bf27af693ee3149290064dc19889935f17b99921a63d6dd553fbf3f9f90818d99161e40aa5c2f5b662cb0ac07d3b0baa966a728528b25525725f84bc88a2f3e5e3be9b13e8836e4684a74476a55e7ecc86c502cd638e38588ebcfe3748262e518011c21969c14dcca62335cb0b62de73ab8638bf43a1d693a26faa2b614193a610876b3609ee4cb71b4439607d0908b9256c9c74c991a200dd2a8db314656f1c8f43b6789b248e8133778770bf6cba754ea9471b3fc5752916282c6356e57e10f24a9025b94c6631d015fb8d9120e35a90211fc4791ddf141e1dd4777cbfdfa36ad48949a2d8d4da29b83efea54aafc0464ba636a2fa86d2800828a571a977329ccb379c5cde459b40d46472ad4b4731380f3cee74c8cf1df0d3f2664b2b199c94a7946641521b473113079bd2bcdcb7cb4137f5c0e78d79942a50dd8b9d15f619eb6796717a9f74fda3539ff5523b405120b8744d1fe126977f27cda1a344cb79ac1bb07fcc2193f94d99673f7097aae2e9a9ebe57060ebae5fb140855a25aef844409463c019c63fa1de4d09f6e5fbcb40399ed8f38fd5f979acdc62b2244826a80bf176d9100f8830c02c5f0fe963737fa3795429a1093da15fddc58324b1af9f6340c992255ae8ff3c3032c82c754d40537aaf859da1d970b70d40c62439d388f553386c5063b38d6e82b5e77f7a84f89e40725455ca2f00b4bf6c0721c1139b0c7f1931794139f4289c2bb0e047e0de441edea1705d50441f5eee9cf24e73f9b0e4e4b72460b912723a296d8098db989c59505705d475002cb81ad2f1682d13e70d545debf05b9739f5ebd2a43791c1d5844286926171ee56c5b27607fa670189f65762b1722ce440bf5734025c8413cec1eeeda2748fec479270574a290cc6f34eaeda26c3b6b9202e7b9104bc186bc96947b8e58c26c35d67effddbc8b966542222473a137c3def513be07fab0d29756e80af319fcb866808538d60697536980d3ba2f5482c726d6a40a3f6d038e75ea6e2a026c7ca932b9d71c66f3dfdb8765d69fc3db8e512d03516488049a670fdbee4db6c2e8d414083e724040ebd3a703a6400d68941b771742c267d6f6b5bb74b458e5a906966587e82a9c1d3927103fd6a44d340724bd1b07fd2f6826f93bd2a01c3cb427e8e89eefa0811ea6c64e23f3224312e8cb4fed102c99337b4d44a8907da306cf9843caa9e62044102c85d31628721d236d5610310faa7400aa4effebe267fa2451f4a8ceb70d0960419790f140934d3889788194f4d0f156b44bbb3363c53bbed0796accc90871ea780023ae4e62de230796253b92b3d2de872daa241046dd292a30a91f57facf85729d9f53aa1422bed65eea779ea3842521e217d7d9c8da4a8deb2f2c46552ee14797bc266fb676568a9e0349356c13a7d36574f51f9d1363192ef33e83a91a6f2b1627398f5eaf55e4d6d9f92d187788d61b4c563060a132ba09436f750d82c0fce9c80de6ae94390a5968b47ae1f0f13e5ecb28307e6acb129591276a30cca0b64e6f69652277fd0ed113fd6798395e30ba5549488ee612f41746bd9248ba6d3c05463bb801b69602120685b7faae51f46e63cd3d3e4721655344f9f02481b39ba88d3b5e38739b4b85974f96b09ac2fa072c96719deaad4b54fa2eb40b63d2952510f11222caf5227fc817e71c818df7d0444c176489ed1863e15cac125a52e72683204f2769ab7d36361c5f7dc300c25eac8e2dc16d21834f75fffc3134409466dd058a35f445ec80d2e84c9216a5adee2c27a4b888d28c510d0326f1f7aa0d25979968b0c4d7321e42a1367e59fcf6820e223c994b67cc756c02df33afdae266fef67594f3785980bd5daee2011146d747e210431b3d6bb430751b6eb1dc88a4356afc0c0ccbf825f6f5bf7edb23a0823cbd10380b4c01071f963db8841cf534509556a122f18a0b5a0925693f6028a0c99f2161185cfb99fa2111d533d5723445081a61457bde805b3229685b8aef7e48997812605c83ea6547c0b56751111e0a5ed99486b5fd386526c7f786a1174dc58ea418e25338fd19be483b3cbe03dae67cbe2497e7432894f0f71012f491d7027598495bcb9015f4ed2968ee0498535ffd117b09f69a04d47ad0ed87f89c4faa30dac5f4d4bf474dabe0ce8c9eb5c19c7a9a82eb8068b19c9fb6f9c07ed7b759a7d045e9ff07eb2d9aabf603dc8a95d5b8466f5821b6a6ecfab65368d1bd0a4ec8cf5fdf715388bd03a2cdd358a8f2fdb7a8869995cb6f0d65d12f069541fd9944f80f7f25eaeb547aaed9edf649c7cbcc0bcf8df022eb004caeb5316a28319a8105f7d3dd0add7adf16a83a2c59f0bea03dc59a12b6544e651312c672244d6c7586753c58117fb7c572e60901d94ed7bdcbe00f6f3d97e7dcd00a03980b665752ddbfa77acd33f6076f8264b2a65d897d906abef4753f72c1b8f69d212c77a823ab0555fd3a9812952588d3bead1f1260be1be4a74137659badb43bd81bc4e9c19b0c28554b9423987634b02d1dad40bc5395bb2744776f34b8724c846efa0da3df146ff3e45a1e38a2115cb7a55ae7a8df49e157253e078d187f06c62b37140379b380db613ca6d92bfaa3fd388a0fd90ec395bc02366109a5c9737136c52aa270215925f6d8722467c8d913cad9870205bcd6b1342d9c9ae8f8c6d47847f9f86557274a758efddf704e8013d117380015f9603d6dc82b19b127b9710391d2cef35902f5c6e6d959d3d4ef4f1659a858818331248e086577345e19a98405fbf7e5c73c10764d2e2585641708dc6c0bbe03f0b13186174d1b70aef28d536ffcbadea8c7ba8e6f6094a6eccc0f65618fb294e081248d95da4bfd7103b32ce5b89a731e786891b67f364115154ce62613c36611b2158db0bafb8ffcd5c76ae33bf4d545f8f4146e35b77fe520505f5566cbd8670bb31c794b1558b505ee9ea7d07fe22b05717d1a2b30e60673af298b34357e83ba2ad045a777c6b3e3304cd2bada9ef39845035fd251c822582932d33fc5255ba1c1e78368392e3847a0cb14815747efbbde9c51b84890fcd5517a5df04057bd78edf15279b432d9104d1e1feff75ff57ac3c62adbddd78470527401497b459ceece64c45cba88ea7a213cbfaea057f0b92c1fe2730441225453715fc207c763c75f0b7689cceab6de4f4a66ed11b5d7ddcc1ef0f653c3badb4c8e12102a7078cb7e0eccd473a76d5ef04cd1e70627c14892a4455b4d31f682dcf20493747a828da5f079935f3044bd20b34d78f1731d9c7f4973c81a8df4bf8c24e450cc6f943a7e33973feeae0d164cc7f78911c"}, @NFTA_DATA_VALUE={0xf4, 0x1, "e609e2c63a30da1089e8bc6d256a8d2a5c8e521de9f64135ccf3196d8f5bf03ee1dac76d100ed9d9f1e705a2aeccc62948ac414a6c72330871ee9954f961c05bc1a4a7aefed0bb2bd50912936d11ca3ded0b797b300989e5179f3e888ea1a983ba5bee6d658c71df8eebaf5a17cfa273471975af5b727aea3c9acaec2e5a6e6f8b48351fe350ac3b1a46d3ea1fd49bc7d6c0d07f6cc9b6b48375eeebe3cedf955fa1b7adaaf568276f31b16154b844a0aa78b7d2bdeee50d11373737e9264e826a85896bc7559f52a789968f5d6ab09bc9f9b4b9006e2fdfc894bb692f3e32e9f28b3475d898ccf0b7cf2344f1296969"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10}}, 0x2cc8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 3.958385656s ago: executing program 4 (id=1802): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x11) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) 3.879592464s ago: executing program 5 (id=1803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x700, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121082, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "f83da66c4b6d2b39"}}}, 0x11) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x180, 0x0, 0xffffffffffffff9c, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x800, 0x103) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, &(0x7f00000002c0)='no,e\x00') 3.855097095s ago: executing program 1 (id=1804): r0 = socket(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xffff}, {0xffff, 0x2}, {0xfff1, 0xd}}, [{0x8, 0xb, 0x6}]}, 0x2c}}, 0x40000) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x4008000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x10, 0x2, [@TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x42ba}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) r6 = syz_open_dev$admmidi(0x0, 0x20, 0x10400) read$midi(r6, 0x0, 0x0) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) fchdir(r5) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040200) sendmsg$nl_route_sched(r0, 0x0, 0x0) 3.771867525s ago: executing program 0 (id=1805): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) (async) pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r1 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 32) r2 = dup2(r1, r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev, @val={@void}, {@can={0xc, {{0x1}, 0x1, 0x2, 0x0, 0x0, "3c152338035611f4"}}}}, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aa"], 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) creat(0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x2045280, 0x0, 0x0, 0x0, 0x0, 0x0) 2.590977477s ago: executing program 0 (id=1806): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x1f]}}, 0x5c) 2.543764701s ago: executing program 0 (id=1807): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fcdb5b25020000000800010002"], 0x1c}, 0x1, 0x0, 0x0, 0x8015}, 0x240000c4) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r4, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2003, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r7, @ANYBLOB="200001"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) 2.476360022s ago: executing program 5 (id=1808): r0 = socket(0x22, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x800005, 0x2010, 0xffffffffffffffff, 0xdf683000) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000380)={0x2020}, 0x2020) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) syz_io_uring_setup(0x10b, 0x0, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) pipe(0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0xd43, 0x10003, 0x2, 0x0, [0x6, 0x8], [0x7, 0x64f2], 0x2}}) syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x5a, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x480}, 0x1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x300) 2.465008947s ago: executing program 4 (id=1809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x47c}}, 0x0) 2.401906123s ago: executing program 1 (id=1810): setresuid(0x0, 0x0, 0xee00) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01b, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x69) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="e9743bf46b8590ca61e997d12fc75272e9c797b49f48364f770ae26fd1c1e6", 0x1f}], 0x1, 0x0, 0x0, 0x20008004}], 0x1, 0x200000c0) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$sock(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="d00acfa40176bb790c5b7c2ea9d786c80cae3051c2832f5359ceab55f46ed68201e6941097d20312616edebe0560fe0aed58bef2727d0c0866652e5d5978dfbe90389cb23eb4b42fb365adaf1e", 0x4d}, {&(0x7f0000001100)="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", 0xc00}, {&(0x7f00000000c0)="4a203ebbc25437d24f9ace52e649635b44f19dfc2c3421d52930ae3df9f9a0ac6f18ced0d78241a70e5d", 0x2a}, {&(0x7f0000000580)="818bbbcfc46361fa0cd8f68fda24498b187ae93c455dfca09da706f3a6b616e85a6e256b8718c9fe94207894788c5b6f2e6068db2f6b61d88b515dab1dc42243ea4374727b56f58519e01e0ece4f32f27f21ef76bdcccb2a747f54906dfa39ab8dadbdc906a3244f5d44b35d7fe1bc191a390222e8751e02095c75d6ee536fa89f5f4ed1829d96077023fc80ac5128d61c8dad5967a719494bd1c606eaf9a4e3874319e1177abc6f7aa0c5a6973ca457a29366d21813d061b5bb97399cd12218db3b84433a11673570b0b5d01be5fbc309da3916709761188bfb853169b50440860e7705874f76895dc34a366c0f", 0xee}, {&(0x7f0000000180)="384868861bd806ebdff30cbb6b5c24e281f075676700d8fb6782c1eab3f85b66ad3b7b6f1cef0d8fd76c7b", 0x2b}], 0x5, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0x30}, 0x40) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613cbf1"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x7, 0x7, 0x0, 0x8}}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x79}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x1e83, 0x5, 0xfe0c, 'syz0\x00', {0xbb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) chdir(&(0x7f0000000700)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) 2.095953674s ago: executing program 4 (id=1811): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$cgroup(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree_skb\x00', r1, 0x0, 0x6ae}, 0x18) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 1.717694828s ago: executing program 5 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 902.554605ms ago: executing program 5 (id=1813): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 819.389915ms ago: executing program 5 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000004000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000400000900010073797a30"], 0x100}}, 0x0) 800.017663ms ago: executing program 1 (id=1815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x2, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000280)={0xe0003, 0x0, [0xa, 0xfffffffffffffffe, 0x2, 0x7ffffffffffffffd, 0x9, 0x3, 0xfffffffffffffffb, 0x5]}) 688.145661ms ago: executing program 5 (id=1816): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000002000000000000000000000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x2004d000}, 0x20000000) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x6, 0x7, "c4378b8424ad2b8fd335f78dd314472df4838a624b5e63d5", {0x6, 0x1000}, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b000100000000090408000103"], 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800002, 0xa7db9b4645a309f0, 0xffffffffffffffff, 0xfd206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x8000000000008, 0x4, 0x0, 0xfffffffffffffa5a, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, 0x0) 0s ago: executing program 2 (id=1817): socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x0, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000920200000000000000000000feffffff000000000100ebff00000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000100"], 0xb8}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075b}}]}, 0xc4}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) kernel console output (not intermixed with test programs): T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.426999][ T1213] usb 6-1: config 1 has an invalid descriptor of length 215, skipping remainder of the config [ 370.564355][ T1213] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.705780][ T51] usb 1-1: config 0 descriptor?? [ 370.715179][ T1213] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 370.747663][ T51] pwc: Askey VC010 type 2 USB webcam detected. [ 370.760611][ T1213] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 370.835764][ T1213] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 370.848132][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.869644][ T1213] usb 6-1: Product: syz [ 370.871741][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 370.917350][ T1213] usb 6-1: Manufacturer: syz [ 370.957526][ T51] pwc: send_video_command error -71 [ 371.001232][ T51] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 371.031142][ T1213] usb 6-1: SerialNumber: syz [ 371.197782][ T51] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 371.216273][ T51] usb 1-1: USB disconnect, device number 16 [ 371.251830][ T5906] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 371.401846][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 371.419669][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 371.435796][ T5906] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 371.470605][ T5906] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 371.482217][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.490573][ T5906] usb 5-1: Product: syz [ 371.508967][ T5906] usb 5-1: Manufacturer: syz [ 371.513859][ T51] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 371.523900][ T5906] usb 5-1: SerialNumber: syz [ 371.562886][ T5906] usb 5-1: config 0 descriptor?? [ 371.683908][ T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.727754][ T51] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 371.747976][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.786158][ T51] usb 1-1: config 0 descriptor?? [ 371.797772][ T51] pwc: Askey VC010 type 2 USB webcam detected. [ 371.993602][ T5906] usb 5-1: USB disconnect, device number 31 [ 372.224048][ T51] pwc: recv_control_msg error -32 req 02 val 2b00 [ 372.240379][ T51] pwc: recv_control_msg error -32 req 02 val 2700 [ 372.254840][ T51] pwc: recv_control_msg error -32 req 02 val 2c00 [ 372.272739][ T51] pwc: recv_control_msg error -32 req 04 val 1000 [ 372.287428][ T51] pwc: recv_control_msg error -32 req 04 val 1300 [ 372.305406][ T51] pwc: recv_control_msg error -32 req 04 val 1400 [ 373.343175][ T1213] usb 6-1: unknown interface protocol 0x5b, assuming v1 [ 373.352942][ T1213] usb 6-1: cannot find UAC_HEADER [ 373.376486][ T1213] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 373.388836][ T1213] usb 6-1: USB disconnect, device number 5 [ 373.440778][ T51] pwc: recv_control_msg error -71 req 02 val 2000 [ 373.458905][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.995'. [ 373.473486][ T51] pwc: recv_control_msg error -71 req 02 val 2100 [ 373.480644][ T51] pwc: recv_control_msg error -71 req 04 val 1500 [ 373.487950][ T51] pwc: recv_control_msg error -71 req 02 val 2500 [ 373.495584][ T51] pwc: recv_control_msg error -71 req 02 val 2400 [ 373.502642][ T51] pwc: recv_control_msg error -71 req 02 val 2600 [ 373.509550][ T51] pwc: recv_control_msg error -71 req 02 val 2900 [ 373.525265][ T51] pwc: recv_control_msg error -71 req 02 val 2800 [ 373.546849][ T51] pwc: recv_control_msg error -71 req 04 val 1100 [ 373.566276][ T51] pwc: recv_control_msg error -71 req 04 val 1200 [ 373.586337][ T51] pwc: Registered as video103. [ 373.723913][ T51] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 373.737205][ T51] usb 1-1: USB disconnect, device number 17 [ 373.930351][ T9570] block device autoloading is deprecated and will be removed. [ 375.793679][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 376.668581][ T9601] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1003'. [ 378.522956][ T9621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.090871][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.185324][ T965] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 380.404780][ T1213] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 380.481783][ T965] usb 5-1: Using ep0 maxpacket: 16 [ 380.573651][ T965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.342306][ T1213] usb 2-1: Using ep0 maxpacket: 8 [ 381.364887][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.376004][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 381.385959][ T965] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 381.395918][ T965] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.631706][ T5831] Bluetooth: hci2: link tx timeout [ 381.637382][ T5831] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 382.543243][ T1213] usb 2-1: device descriptor read/all, error -71 [ 382.702817][ T965] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.711976][ T965] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.747852][ T965] usb 5-1: config 0 descriptor?? [ 382.794230][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 382.804681][ T965] usb 5-1: can't set config #0, error -71 [ 382.837920][ T965] usb 5-1: USB disconnect, device number 32 [ 383.007370][ T29] audit: type=1400 audit(1730795232.065:585): avc: denied { append } for pid=9653 comm="syz.2.1020" name="mISDNtimer" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 383.426846][ T29] audit: type=1400 audit(1730795232.285:586): avc: denied { write } for pid=9653 comm="syz.2.1020" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 383.866064][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 384.276567][ T9662] netlink: 'syz.2.1021': attribute type 2 has an invalid length. [ 384.299931][ T29] audit: type=1400 audit(1730795232.285:587): avc: denied { open } for pid=9653 comm="syz.2.1020" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 384.566843][ T9667] netdevsim netdevsim4: Direct firmware load for .Þ failed with error -2 [ 384.576834][ T9667] netdevsim netdevsim4: Falling back to sysfs fallback for: .Þ [ 385.811715][ T9691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1030'. [ 386.351593][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 386.452698][ T29] audit: type=1400 audit(1730795235.605:588): avc: denied { accept } for pid=9702 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 386.507035][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 386.534572][ T29] audit: type=1400 audit(1730795235.605:589): avc: denied { read append } for pid=9702 comm="syz.0.1036" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 386.551641][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 386.593234][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 386.607002][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 386.733553][ T29] audit: type=1400 audit(1730795235.605:590): avc: denied { open } for pid=9702 comm="syz.0.1036" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.299255][ T29] audit: type=1400 audit(1730795235.605:591): avc: denied { ioctl } for pid=9702 comm="syz.0.1036" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x64c7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.325016][ T29] audit: type=1400 audit(1730795236.015:592): avc: denied { write } for pid=9700 comm="syz.1.1035" name="ppp" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 387.358264][ T5910] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=53.c8 [ 387.367486][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.375596][ T5910] usb 3-1: Product: syz [ 388.358096][ T5910] usb 3-1: Manufacturer: syz [ 388.362929][ T5910] usb 3-1: SerialNumber: syz [ 388.369443][ T5910] usb 3-1: config 0 descriptor?? [ 388.433861][ T5910] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_in [ 388.767760][ T965] usb 3-1: USB disconnect, device number 11 [ 389.002930][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.038035][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.067712][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.917721][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 392.468923][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 392.497295][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1054'. [ 392.834921][ T29] audit: type=1400 audit(1730795242.005:593): avc: denied { bind } for pid=9767 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 392.887092][ T29] audit: type=1400 audit(1730795242.055:594): avc: denied { accept } for pid=9768 comm="syz.4.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 393.057687][ T9785] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 393.113504][ T29] audit: type=1400 audit(1730795242.285:595): avc: denied { setopt } for pid=9779 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.303161][ T5906] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 394.493662][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 394.501499][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.569624][ T5906] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 394.613733][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1064'. [ 394.697449][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.975672][ T5906] usb 6-1: config 0 descriptor?? [ 395.001911][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 395.698074][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 395.714578][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 395.778980][ T5906] pwc: send_video_command error -71 [ 395.787154][ T5906] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 395.825911][ T5906] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 395.892864][ T5906] usb 6-1: USB disconnect, device number 6 [ 396.094191][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.134083][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.147123][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.401481][ T5906] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 396.580125][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.661704][ T5876] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 396.764211][ T1094] wlan1: Trigger new scan to find an IBSS to join [ 396.815965][ T5906] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 396.883425][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.906773][ T5906] usb 6-1: config 0 descriptor?? [ 396.917952][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 397.056641][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.067689][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.077676][ T5876] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 397.215909][ T9835] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1073'. [ 397.845072][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.867034][ T5906] pwc: send_video_command error -71 [ 397.873166][ T5876] usb 5-1: config 0 descriptor?? [ 397.878268][ T5906] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 397.886007][ T5906] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 397.911558][ T5906] usb 6-1: USB disconnect, device number 7 [ 398.072099][ T9843] netlink: 'syz.2.1076': attribute type 11 has an invalid length. [ 398.904508][ T9848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.085135][ T965] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 399.285966][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 399.342268][ T965] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 399.543372][ T965] usb 1-1: config 0 has no interface number 0 [ 399.693295][ T965] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 399.702632][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.710644][ T965] usb 1-1: Product: syz [ 399.730923][ T965] usb 1-1: Manufacturer: syz [ 399.750855][ T965] usb 1-1: SerialNumber: syz [ 399.775648][ T965] usb 1-1: config 0 descriptor?? [ 400.016072][ T965] msi2500 1-1:0.246: Registered as swradio24 [ 400.030897][ T965] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 400.037161][ T5876] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input19 [ 400.067457][ T965] usb 1-1: USB disconnect, device number 18 [ 400.653686][ T5876] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input20 [ 400.674679][ T5876] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 400.828448][ T9873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1084'. [ 400.828701][ T9874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.837676][ T5876] usb 5-1: USB disconnect, device number 33 [ 400.903158][ T9874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.926456][ T9874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.177358][ T29] audit: type=1400 audit(1730795250.345:596): avc: denied { lock } for pid=9866 comm="syz.2.1082" path="socket:[22897]" dev="sockfs" ino=22897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 401.502286][ T29] audit: type=1400 audit(1730795250.655:597): avc: denied { read } for pid=9883 comm="syz.4.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 401.519959][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1088'. [ 401.556046][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'. [ 401.562895][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 401.876880][ T6177] wlan1: Trigger new scan to find an IBSS to join [ 401.964109][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 402.986152][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 403.138965][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 403.139126][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1097'. [ 403.171956][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.175873][ T9912] sch_tbf: burst 6758 is lower than device lo mtu (65550) ! [ 403.204376][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 403.215723][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.224810][ T25] usb 5-1: Product: syz [ 403.229080][ T25] usb 5-1: Manufacturer: syz [ 403.233818][ T25] usb 5-1: SerialNumber: syz [ 403.240187][ T25] usb 5-1: config 0 descriptor?? [ 403.454405][ T25] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 403.471721][ T25] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 404.313151][ T29] audit: type=1400 audit(1730795252.895:598): avc: denied { getopt } for pid=9917 comm="syz.5.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 404.345630][ T9918] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1096'. [ 404.471932][ T5951] wlan1: Creating new IBSS network, BSSID f6:73:57:a5:5b:a3 [ 404.499989][ T25] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 404.537799][ T25] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 404.546357][ T9936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.563113][ T25] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 404.581173][ T25] em28xx 5-1:0.0: No AC97 audio processor [ 404.607876][ T25] usb 5-1: USB disconnect, device number 34 [ 404.615013][ T25] em28xx 5-1:0.0: Disconnecting em28xx [ 404.636425][ T25] em28xx 5-1:0.0: Freeing device [ 404.649022][ T9944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.686967][ T9944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.792332][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 405.150682][ T9954] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 405.388523][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 405.853361][ T9966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1111'. [ 405.930693][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 406.217028][ T29] audit: type=1400 audit(1730795255.385:599): avc: denied { mounton } for pid=9967 comm="syz.0.1112" path="/proc/729/task" dev="proc" ino=23102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 406.376212][ T29] audit: type=1400 audit(1730795255.415:600): avc: denied { read } for pid=9967 comm="syz.0.1112" path="socket:[24199]" dev="sockfs" ino=24199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 406.704373][ T29] audit: type=1400 audit(1730795255.515:601): avc: denied { setopt } for pid=9967 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 406.729250][ T29] audit: type=1400 audit(1730795255.515:602): avc: denied { connect } for pid=9967 comm="syz.0.1112" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 406.772009][ T5876] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 406.992620][ T5876] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 407.105942][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.367665][ T9993] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 407.377141][ T5876] usb 6-1: config 0 descriptor?? [ 407.405615][ T5876] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 408.163619][ T9998] x_tables: duplicate entry at hook 2 [ 408.258724][ T9998] netlink: 'syz.1.1120': attribute type 10 has an invalid length. [ 408.752301][ T9998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.764141][ T9998] team0: Port device batadv0 added [ 408.786589][ T5876] gspca_cpia1: usb_control_msg 01, error -71 [ 408.792782][ T5876] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 408.807105][ T5876] usb 6-1: USB disconnect, device number 8 [ 409.651663][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1127'. [ 409.746394][T10023] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1126'. [ 410.399361][ T29] audit: type=1400 audit(1730795259.565:603): avc: denied { ioctl } for pid=10030 comm="syz.4.1130" path="socket:[24291]" dev="sockfs" ino=24291 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 411.336772][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 411.823561][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.834211][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 412.138433][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.155718][ T25] usb 5-1: config 0 descriptor?? [ 412.165017][ T25] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 412.172039][ T25] usb 5-1: No valid video chain found. [ 412.380180][ T25] usb 5-1: USB disconnect, device number 35 [ 412.566134][T10054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 413.698752][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'. [ 413.894359][T10067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1141'. [ 415.418717][T10087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.803917][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 416.812898][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 418.750303][T10114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1151'. [ 419.949256][ T29] audit: type=1400 audit(1730795267.935:604): avc: denied { mount } for pid=10110 comm="syz.2.1151" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 419.991208][ T29] audit: type=1400 audit(1730795267.945:605): avc: denied { mounton } for pid=10110 comm="syz.2.1151" path="/259/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 420.036413][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 420.052064][ T29] audit: type=1400 audit(1730795269.185:606): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 420.397887][T10131] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1154'. [ 420.555752][ T965] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 420.573127][ T29] audit: type=1400 audit(1730795269.735:607): avc: denied { write } for pid=10134 comm="syz.5.1158" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 421.005607][ T965] usb 1-1: Using ep0 maxpacket: 32 [ 421.019921][ T965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.055555][ T965] usb 1-1: config 0 interface 0 has no altsetting 0 [ 421.201459][ T965] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 421.216424][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.279813][T10143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.839474][ T965] usb 1-1: Product: syz [ 421.851462][ T965] usb 1-1: Manufacturer: syz [ 421.856361][ T965] usb 1-1: SerialNumber: syz [ 421.943528][ T965] usb 1-1: config 0 descriptor?? [ 422.082143][ T965] pvrusb2: Hardware description: Terratec Grabster AV400 [ 422.139803][ T965] pvrusb2: ********** [ 422.144319][ T965] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 422.163220][ T965] pvrusb2: Important functionality might not be entirely working. [ 422.174665][ T965] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 422.191695][ T965] pvrusb2: ********** [ 422.241634][ T965] usb 1-1: selecting invalid altsetting 0 [ 422.289550][ T2319] pvrusb2: Invalid write control endpoint [ 422.372157][T10152] syz.4.1163 (10152): /proc/10151/oom_adj is deprecated, please use /proc/10151/oom_score_adj instead. [ 422.502408][ T2319] pvrusb2: Invalid write control endpoint [ 422.508447][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 422.537694][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 422.545456][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 422.556666][ T2319] pvrusb2: Device being rendered inoperable [ 422.563307][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 422.571604][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 422.581046][ T2319] pvrusb2: Attached sub-driver cx25840 [ 422.586857][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 422.597125][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 422.682485][ T5875] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 422.701217][ T5910] usb 1-1: USB disconnect, device number 19 [ 422.811736][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 422.992062][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 423.227463][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 423.237355][ T25] usb 2-1: config 0 interface 0 has no altsetting 1 [ 423.249085][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 423.265529][ T25] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 423.274737][ T5875] usb 5-1: device descriptor read/64, error -71 [ 423.281221][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.289505][ T25] usb 2-1: SerialNumber: syz [ 423.296737][ T25] usb 2-1: config 0 descriptor?? [ 423.304113][ T25] usb-storage 2-1:0.0: USB Mass Storage device detected [ 423.319919][ T25] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 423.513257][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.530059][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.545452][T10148] bridge0: port 3(hsr_slave_1) entered blocking state [ 423.552951][T10148] bridge0: port 3(hsr_slave_1) entered disabled state [ 423.559881][T10148] hsr_slave_1: entered allmulticast mode [ 423.572336][T10148] hsr_slave_1: left allmulticast mode [ 423.589629][ T9316] usb 2-1: USB disconnect, device number 16 [ 423.677651][ T5875] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 423.816850][T10171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.924597][ T5875] usb 5-1: device descriptor read/64, error -71 [ 424.591727][ T5875] usb usb5-port1: attempt power cycle [ 424.808854][T10175] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 425.076456][ T5875] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 425.162156][ T5875] usb 5-1: device descriptor read/8, error -71 [ 429.911541][ T9316] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 430.429567][ T9316] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 430.455710][ T9316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.459863][T10250] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 430.465266][ T9316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.482313][ T9316] usb 2-1: Product: syz [ 430.491605][ T9316] usb 2-1: Manufacturer: syz [ 430.499351][ T9316] usb 2-1: SerialNumber: syz [ 430.506911][T10240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 430.516215][T10250] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 430.689985][ T965] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 430.906977][ T965] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 430.917267][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.067089][ T965] usb 5-1: config 0 descriptor?? [ 431.083999][ T965] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 431.131599][ T5910] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 431.282549][ T965] gp8psk: usb in 128 operation failed. [ 431.290245][ T9316] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 431.304533][ T9316] usb 2-1: USB disconnect, device number 17 [ 431.306827][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 431.333410][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.356707][ T5910] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 431.380334][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.392302][ T5910] usb 1-1: Product: syz [ 431.396744][ T5910] usb 1-1: Manufacturer: syz [ 431.401675][ T5910] usb 1-1: SerialNumber: syz [ 431.409032][ T5910] usb 1-1: config 0 descriptor?? [ 431.417933][ T5910] xr_serial 1-1:0.0: failed to claim sibling interface: -16 [ 431.425789][ T5910] xr_serial 1-1:0.0: probe with driver xr_serial failed with error -16 [ 431.701772][ T965] gp8psk: usb in 137 operation failed. [ 431.708124][ T965] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 431.773119][ T965] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 431.841773][ T9316] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 432.599204][T10276] NILFS (nullb0): couldn't find nilfs on the device [ 432.610451][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 432.760839][ T9316] usb 2-1: device not accepting address 18, error -71 [ 433.695961][ T965] usb 1-1: USB disconnect, device number 20 [ 433.866434][T10283] ebtables: ebtables: counters copy to user failed while replacing table [ 434.041805][ T965] usb 5-1: USB disconnect, device number 40 [ 435.492769][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 438.520429][ T29] audit: type=1400 audit(1730795287.405:608): avc: denied { watch watch_reads } for pid=10360 comm="syz.4.1223" path="/219" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 438.565243][T10366] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1224'. [ 439.143011][T10373] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1226'. [ 439.156216][T10373] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[10373] [ 439.962654][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.901154][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 441.434800][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 443.671461][ T5910] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 443.953473][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 443.966149][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 443.985662][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 443.995546][ T29] audit: type=1400 audit(1730795293.155:609): avc: denied { write } for pid=10424 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 443.996765][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 444.081814][ T5910] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 444.109926][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.135930][ T5910] usb 2-1: config 0 descriptor?? [ 444.299087][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1245'. [ 444.339758][T10435] tipc: Started in network mode [ 444.354469][T10435] tipc: Node identity f7, cluster identity 4711 [ 444.362470][T10414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.382215][T10414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.461786][T10435] tipc: Node number set to 247 [ 444.686723][ T5910] hid (null): invalid report_size 26978 [ 444.727603][ T5910] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0006/input/input21 [ 444.983886][ T5910] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0006/input/input22 [ 445.054331][ T5910] kye 0003:0458:5005.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 445.118315][ T5910] usb 2-1: USB disconnect, device number 20 [ 446.482199][T10454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.936372][T10469] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 449.052008][T10469] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 449.062307][T10469] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 449.128152][T10464] FAULT_INJECTION: forcing a failure. [ 449.128152][T10464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.141307][T10464] CPU: 0 UID: 0 PID: 10464 Comm: syz.5.1250 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 449.152076][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 449.162114][T10464] Call Trace: [ 449.165436][T10464] [ 449.168357][T10464] dump_stack_lvl+0x16c/0x1f0 [ 449.173024][T10464] should_fail_ex+0x497/0x5b0 [ 449.177721][T10464] _copy_from_iter+0x2a1/0x1560 [ 449.182563][T10464] ? __pfx__copy_from_iter+0x10/0x10 [ 449.187828][T10464] ? __virt_addr_valid+0x1a4/0x590 [ 449.192941][T10464] ? __virt_addr_valid+0x5e/0x590 [ 449.197972][T10464] ? __phys_addr_symbol+0x30/0x80 [ 449.202981][T10464] ? __check_object_size+0x488/0x710 [ 449.208260][T10464] netlink_sendmsg+0x813/0xd70 [ 449.213029][T10464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.218348][T10464] ____sys_sendmsg+0xaaf/0xc90 [ 449.223103][T10464] ? copy_msghdr_from_user+0x10b/0x160 [ 449.228552][T10464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.233854][T10464] ? __pfx___lock_acquire+0x10/0x10 [ 449.239039][T10464] ___sys_sendmsg+0x135/0x1e0 [ 449.243706][T10464] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.248903][T10464] ? lock_acquire+0x2f/0xb0 [ 449.253390][T10464] ? __fget_files+0x40/0x3f0 [ 449.257982][T10464] ? fdget+0x176/0x210 [ 449.262066][T10464] __sys_sendmsg+0x117/0x1f0 [ 449.266656][T10464] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.271756][T10464] ? __fget_files+0x244/0x3f0 [ 449.276489][T10464] do_syscall_64+0xcd/0x250 [ 449.281000][T10464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.286887][T10464] RIP: 0033:0x7fd46b77e719 [ 449.291288][T10464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.310890][T10464] RSP: 002b:00007fd46c4d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.319290][T10464] RAX: ffffffffffffffda RBX: 00007fd46b935f80 RCX: 00007fd46b77e719 [ 449.327244][T10464] RDX: 0000000000000040 RSI: 0000000020000340 RDI: 0000000000000006 [ 449.335217][T10464] RBP: 00007fd46c4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.343174][T10464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.351125][T10464] R13: 0000000000000000 R14: 00007fd46b935f80 R15: 00007ffc6954caa8 [ 449.359104][T10464] [ 449.362157][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.465570][T10469] bond2: (slave ipip0): making interface the new active one [ 449.548904][T10469] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 450.756830][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1264'. [ 450.940365][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 450.949719][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1263'. [ 451.817813][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 451.911885][ T29] audit: type=1326 audit(1730795301.045:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10506 comm="syz.1.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x0 [ 452.056671][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 454.215043][T10540] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 454.272201][ T29] audit: type=1400 audit(1730795303.445:611): avc: denied { ioctl } for pid=10523 comm="syz.0.1271" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 454.405947][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 454.436664][T10543] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 454.542320][T10535] kAFS: unparsable volume name [ 454.550155][T10543] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 455.266069][T10257] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 455.421498][T10257] usb 1-1: Invalid ep0 maxpacket: 32 [ 455.421645][ T9316] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 455.504773][T10564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.525749][T10564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.551799][T10257] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 455.603528][T10564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.629077][ T9316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.673164][ T9316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.684197][ T9316] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 455.750690][ T9316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.760747][ T9316] usb 5-1: config 0 descriptor?? [ 455.761890][T10257] usb 1-1: Invalid ep0 maxpacket: 32 [ 455.784403][T10257] usb usb1-port1: attempt power cycle [ 456.141673][T10257] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 456.172218][T10257] usb 1-1: Invalid ep0 maxpacket: 32 [ 456.296562][ T9316] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 456.314021][T10257] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 456.328066][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 456.352000][T10257] usb 1-1: Invalid ep0 maxpacket: 32 [ 456.358695][T10257] usb usb1-port1: unable to enumerate USB device [ 456.568009][ T29] audit: type=1400 audit(1730795305.735:612): avc: denied { write } for pid=10576 comm="syz.5.1284" name="/" dev="ocfs2_dlmfs" ino=25429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.581760][T10578] o2cb: This node has not been configured. [ 456.593093][ T29] audit: type=1400 audit(1730795305.745:613): avc: denied { add_name } for pid=10576 comm="syz.5.1284" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.604151][T10578] o2cb: Cluster check failed. Fix errors before retrying. [ 456.618152][ T29] audit: type=1400 audit(1730795305.745:614): avc: denied { create } for pid=10576 comm="syz.5.1284" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 456.648919][T10578] (syz.5.1284,10578,0):user_dlm_register:674 ERROR: status = -22 [ 456.659887][T10578] (syz.5.1284,10578,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file0" [ 456.728172][ T29] audit: type=1400 audit(1730795305.755:615): avc: denied { associate } for pid=10576 comm="syz.5.1284" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 456.900940][ T29] audit: type=1400 audit(1730795306.065:616): avc: denied { ioctl } for pid=10576 comm="syz.5.1284" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 456.946461][T10577] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1284'. [ 457.282983][ T5876] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 457.452251][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 457.525148][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 457.576778][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 457.685111][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 457.707682][ T5876] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 457.721792][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.740304][ T5876] usb 2-1: Product: syz [ 457.749727][ T5876] usb 2-1: Manufacturer: syz [ 457.759829][ T5876] usb 2-1: SerialNumber: syz [ 457.981607][ T5876] usb 2-1: config 0 descriptor?? [ 457.993652][ T5876] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 458.008080][ T29] audit: type=1400 audit(1730795307.175:617): avc: denied { watch_mount } for pid=10597 comm="syz.2.1290" path="/292" dev="tmpfs" ino=1563 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 458.087830][T10599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.617004][ T9316] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 458.646917][ T9316] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 458.675423][ T9316] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -71 [ 458.698472][ T9316] usb 5-1: USB disconnect, device number 41 [ 458.889969][T10606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.340621][T10618] FAULT_INJECTION: forcing a failure. [ 459.340621][T10618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.363462][T10618] CPU: 0 UID: 0 PID: 10618 Comm: syz.0.1295 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 459.374265][T10618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 459.384339][T10618] Call Trace: [ 459.387626][T10618] [ 459.390563][T10618] dump_stack_lvl+0x16c/0x1f0 [ 459.395259][T10618] should_fail_ex+0x497/0x5b0 [ 459.399958][T10618] _copy_from_iter+0x2a1/0x1560 [ 459.404833][T10618] ? __pfx__copy_from_iter+0x10/0x10 [ 459.410139][T10618] ? __virt_addr_valid+0x1a4/0x590 [ 459.415275][T10618] ? __virt_addr_valid+0x5e/0x590 [ 459.420328][T10618] ? __phys_addr_symbol+0x30/0x80 [ 459.425371][T10618] ? __check_object_size+0x488/0x710 [ 459.427368][T10620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.430660][T10618] netlink_sendmsg+0x813/0xd70 [ 459.430692][T10618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.450467][T10618] ____sys_sendmsg+0xaaf/0xc90 [ 459.455264][T10618] ? copy_msghdr_from_user+0x10b/0x160 [ 459.455390][T10606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.460726][T10618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.460764][T10618] ? __pfx___lock_acquire+0x10/0x10 [ 459.480928][T10618] ___sys_sendmsg+0x135/0x1e0 [ 459.485608][T10618] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.490807][T10618] ? lock_acquire+0x2f/0xb0 [ 459.495306][T10618] ? __fget_files+0x40/0x3f0 [ 459.499897][T10618] ? fdget+0x176/0x210 [ 459.503969][T10618] __sys_sendmsg+0x117/0x1f0 [ 459.508557][T10618] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.513656][T10618] ? __fget_files+0x244/0x3f0 [ 459.518349][T10618] do_syscall_64+0xcd/0x250 [ 459.522841][T10618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.528729][T10618] RIP: 0033:0x7f1f10d7e719 [ 459.533131][T10618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.552731][T10618] RSP: 002b:00007f1f0f1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.561131][T10618] RAX: ffffffffffffffda RBX: 00007f1f10f36058 RCX: 00007f1f10d7e719 [ 459.569091][T10618] RDX: 00000000240000c4 RSI: 0000000020000340 RDI: 0000000000000004 [ 459.577054][T10618] RBP: 00007f1f0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 459.585103][T10618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.593060][T10618] R13: 0000000000000001 R14: 00007f1f10f36058 R15: 00007ffee2b00dd8 [ 459.601116][T10618] [ 460.319404][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 460.446001][ T29] audit: type=1400 audit(1730795309.605:618): avc: denied { write } for pid=10635 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 460.625756][T10646] netlink: 'syz.0.1302': attribute type 24 has an invalid length. [ 460.677148][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 462.247921][ T29] audit: type=1326 audit(1730795311.415:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.0.1311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f10d7e719 code=0x0 [ 463.011012][ T29] audit: type=1400 audit(1730795312.175:620): avc: denied { getopt } for pid=10670 comm="syz.0.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 463.165462][T10685] Cannot find del_set index 286 as target [ 463.469487][T10687] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 463.524373][T10689] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1314'. [ 464.919894][ T5876] usb 2-1: USB disconnect, device number 21 [ 465.884285][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 467.534166][ T29] audit: type=1400 audit(1730795316.705:621): avc: denied { bind } for pid=10719 comm="syz.1.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.766021][ T29] audit: type=1400 audit(1730795316.935:622): avc: denied { setopt } for pid=10724 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 469.441661][ T5873] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 469.633388][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 469.645470][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.656630][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.666710][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.679570][ T5873] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 469.688773][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.719155][ T5873] usb 2-1: config 0 descriptor?? [ 470.234320][T10737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.243162][T10737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.417075][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 470.430636][ T5873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 470.461219][ T5873] usb 2-1: USB disconnect, device number 22 [ 471.908133][ T29] audit: type=1400 audit(1730795321.075:623): avc: denied { accept } for pid=10780 comm="syz.4.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 472.386970][T10789] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 473.000597][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 477.694417][T10826] netlink: 'syz.2.1350': attribute type 1 has an invalid length. [ 478.449624][T10851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.661697][ T965] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 480.040587][T10876] loop6: detected capacity change from 0 to 524287999 [ 480.053501][ T29] audit: type=1400 audit(1730795329.205:624): avc: denied { setopt } for pid=10860 comm="syz.0.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 480.072923][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.073094][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.090222][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.099396][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.112543][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.121732][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.129770][ T29] audit: type=1400 audit(1730795329.205:625): avc: denied { append } for pid=10860 comm="syz.0.1359" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 480.155287][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.155333][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.174566][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.183750][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.207067][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.216309][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.226512][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.235674][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.244252][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.253449][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.261579][T10876] ldm_validate_partition_table(): Disk read failed. [ 480.269060][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.278245][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.287159][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 480.296370][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 480.308361][T10876] Dev loop6: unable to read RDB block 0 [ 480.319831][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'. [ 480.330051][T10876] loop6: unable to read partition table [ 480.335932][T10876] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 481.732178][ T29] audit: type=1400 audit(1730795330.905:626): avc: denied { ioctl } for pid=10886 comm="syz.1.1364" path="socket:[26976]" dev="sockfs" ino=26976 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 481.768878][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 482.319287][T10899] netlink: 'syz.5.1367': attribute type 1 has an invalid length. [ 482.692552][T10911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.516362][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 483.782456][T10915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1368'. [ 485.617918][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 486.117918][T10955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1385'. [ 486.451541][ T5909] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 486.634160][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 486.641075][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 486.664704][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 486.684369][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 486.695712][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.716537][ T5909] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 486.728140][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.738508][ T5909] usb 3-1: Product: syz [ 486.753064][T10968] FAULT_INJECTION: forcing a failure. [ 486.753064][T10968] name failslab, interval 1, probability 0, space 0, times 0 [ 486.792855][ T5909] usb 3-1: Manufacturer: syz [ 486.797553][ T5909] usb 3-1: SerialNumber: syz [ 486.925802][T10968] CPU: 0 UID: 0 PID: 10968 Comm: syz.1.1389 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 486.936608][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 486.946666][T10968] Call Trace: [ 486.949943][T10968] [ 486.952875][T10968] dump_stack_lvl+0x16c/0x1f0 [ 486.957558][T10968] should_fail_ex+0x497/0x5b0 [ 486.962243][T10968] ? fs_reclaim_acquire+0xae/0x150 [ 486.967361][T10968] should_failslab+0xc2/0x120 [ 486.972050][T10968] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 486.977431][T10968] ? getname_flags.part.0+0x4c/0x550 [ 486.982731][T10968] getname_flags.part.0+0x4c/0x550 [ 486.987856][T10968] getname_flags+0x93/0xf0 [ 486.992284][T10968] __x64_sys_mknod+0x74/0xb0 [ 486.996885][T10968] do_syscall_64+0xcd/0x250 [ 487.001398][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.007328][T10968] RIP: 0033:0x7f8a1937e719 [ 487.011758][T10968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.031377][T10968] RSP: 002b:00007f8a1a136038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 487.039803][T10968] RAX: ffffffffffffffda RBX: 00007f8a19535f80 RCX: 00007f8a1937e719 [ 487.047778][T10968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000540 [ 487.055753][T10968] RBP: 00007f8a1a136090 R08: 0000000000000000 R09: 0000000000000000 [ 487.063728][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.071700][T10968] R13: 0000000000000000 R14: 00007f8a19535f80 R15: 00007ffdfcf69988 [ 487.079689][T10968] [ 487.273352][ T5909] usb 3-1: config 0 descriptor?? [ 487.335096][ T5909] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 487.359334][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 487.983536][T10986] random: crng reseeded on system resumption [ 488.140571][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 488.412589][ T5909] imon:send_packet: packet tx failed (-71) [ 488.433292][ T5909] imon 3-1:0.0: panel buttons/knobs setup failed [ 488.611750][ T5909] rc_core: IR keymap rc-imon-pad not found [ 488.618215][ T5909] Registered IR keymap rc-empty [ 488.640951][ T5909] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 488.656864][ T5909] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 488.673810][ T5909] imon:send_packet: packet tx failed (-71) [ 488.709288][ T5909] imon 3-1:0.0: remote input dev register failed [ 488.716062][ T5909] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 488.766722][ T5909] imon 3-1:0.0: unable to initialize intf0, err 0 [ 488.775041][ T5909] imon:imon_probe: failed to initialize context! [ 488.786450][ T5909] imon 3-1:0.0: unable to register, err -19 [ 488.823413][ T5909] usb 3-1: USB disconnect, device number 12 [ 489.587399][ T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 489.641831][T11021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.255466][ T5876] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 491.170570][ T29] audit: type=1400 audit(1730795340.335:627): avc: denied { ioctl } for pid=11044 comm="syz.5.1409" path="socket:[27927]" dev="sockfs" ino=27927 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 493.166823][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 493.707956][T11066] ebtables: ebtables: counters copy to user failed while replacing table [ 494.492170][ T5876] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 494.651611][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 494.715928][T11097] dlm: no locking on control device [ 495.522808][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 495.532641][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 495.563155][ T5876] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice=7e.6b [ 495.577590][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.591510][ T5876] usb 2-1: Product: syz [ 495.597224][ T5876] usb 2-1: Manufacturer: syz [ 495.602059][ T5876] usb 2-1: SerialNumber: syz [ 495.608682][ T5876] usb 2-1: config 0 descriptor?? [ 495.735010][T11104] FAULT_INJECTION: forcing a failure. [ 495.735010][T11104] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 495.751028][T11104] CPU: 1 UID: 0 PID: 11104 Comm: syz.0.1425 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 495.762001][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 495.772073][T11104] Call Trace: [ 495.775343][T11104] [ 495.778262][T11104] dump_stack_lvl+0x16c/0x1f0 [ 495.782934][T11104] should_fail_ex+0x497/0x5b0 [ 495.787600][T11104] ? fs_reclaim_acquire+0xae/0x150 [ 495.792708][T11104] should_fail_alloc_page+0xe7/0x130 [ 495.797985][T11104] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 495.804138][T11104] __alloc_pages_noprof+0x190/0x25a0 [ 495.809419][T11104] ? __pfx_mark_lock+0x10/0x10 [ 495.814179][T11104] ? hlock_class+0x4e/0x130 [ 495.818676][T11104] ? mark_lock+0xb5/0xc60 [ 495.822998][T11104] ? find_held_lock+0x2d/0x110 [ 495.827757][T11104] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 495.833831][T11104] ? hlock_class+0x4e/0x130 [ 495.838332][T11104] ? mark_lock+0xb5/0xc60 [ 495.842647][T11104] ? __pfx_mark_lock+0x10/0x10 [ 495.847415][T11104] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.853306][T11104] ? policy_nodemask+0xea/0x4e0 [ 495.858148][T11104] alloc_pages_mpol_noprof+0x2c9/0x610 [ 495.863602][T11104] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 495.869586][T11104] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.875211][T11104] folio_alloc_mpol_noprof+0x36/0xd0 [ 495.880490][T11104] vma_alloc_folio_noprof+0xee/0x1b0 [ 495.885767][T11104] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 495.891654][T11104] ? find_held_lock+0x2d/0x110 [ 495.896413][T11104] do_pte_missing+0x202d/0x3e70 [ 495.901261][T11104] __handle_mm_fault+0x100a/0x2a10 [ 495.906368][T11104] ? __pfx_mt_find+0x10/0x10 [ 495.910947][T11104] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 495.916566][T11104] ? __pfx___handle_mm_fault+0x10/0x10 [ 495.922028][T11104] ? find_vma+0xc0/0x140 [ 495.926257][T11104] ? __pfx_find_vma+0x10/0x10 [ 495.930922][T11104] ? hlock_class+0x4e/0x130 [ 495.935420][T11104] handle_mm_fault+0x3fa/0xaa0 [ 495.940180][T11104] do_user_addr_fault+0x7a3/0x13f0 [ 495.945295][T11104] exc_page_fault+0x5c/0xc0 [ 495.949800][T11104] asm_exc_page_fault+0x26/0x30 [ 495.954651][T11104] RIP: 0010:filldir+0x29c/0x5f0 [ 495.959494][T11104] Code: db e8 18 ef 86 ff 89 d8 48 83 c4 50 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 fe ee 86 ff 0f 01 cb 0f ae e8 48 8b 04 24 <49> 89 47 08 e8 eb ee 86 ff 4c 8b 7c 24 30 48 8b 44 24 10 49 89 07 [ 495.979092][T11104] RSP: 0018:ffffc9000457fce8 EFLAGS: 00050293 [ 495.985147][T11104] RAX: 0000000000000000 RBX: ffffc9000457fe80 RCX: ffffffff82068bfa [ 495.993105][T11104] RDX: ffff8880282bc880 RSI: ffffffff82068c52 RDI: 0000000000000006 [ 496.001064][T11104] RBP: 0000000020001ad8 R08: 0000000000000006 R09: 0000000020001ac0 [ 496.009023][T11104] R10: 0000000020001ad8 R11: 0000000000000000 R12: 0000000000000001 [ 496.016980][T11104] R13: 0000000000000018 R14: ffffffff8b7e7560 R15: 0000000020001ac0 [ 496.024947][T11104] ? filldir+0x23a/0x5f0 [ 496.029190][T11104] ? filldir+0x292/0x5f0 [ 496.033430][T11104] ? filldir+0x292/0x5f0 [ 496.037675][T11104] ? __pfx_filldir+0x10/0x10 [ 496.042257][T11104] dcache_readdir+0x4c6/0x850 [ 496.046950][T11104] iterate_dir+0x52f/0xb40 [ 496.051367][T11104] __x64_sys_getdents+0x14c/0x2d0 [ 496.056394][T11104] ? __pfx___x64_sys_getdents+0x10/0x10 [ 496.061936][T11104] ? __pfx_filldir+0x10/0x10 [ 496.066530][T11104] do_syscall_64+0xcd/0x250 [ 496.071024][T11104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.076911][T11104] RIP: 0033:0x7f1f10d7e719 [ 496.081314][T11104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.100999][T11104] RSP: 002b:00007f1f11a9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 496.109405][T11104] RAX: ffffffffffffffda RBX: 00007f1f10f35f80 RCX: 00007f1f10d7e719 [ 496.117366][T11104] RDX: 0000000000000075 RSI: 0000000020001ac0 RDI: 0000000000000003 [ 496.125334][T11104] RBP: 00007f1f11a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 496.133297][T11104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.141258][T11104] R13: 0000000000000000 R14: 00007f1f10f35f80 R15: 00007ffee2b00dd8 [ 496.149231][T11104] [ 496.596896][ T5909] usb 2-1: USB disconnect, device number 23 [ 496.635726][T11112] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1429'. [ 496.882307][ T29] audit: type=1400 audit(1730795346.055:628): avc: denied { bind } for pid=11121 comm="syz.1.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 496.955196][T11126] netlink: 'syz.2.1430': attribute type 3 has an invalid length. [ 496.977141][ T29] audit: type=1400 audit(1730795346.145:629): avc: denied { setopt } for pid=11116 comm="syz.2.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 500.631711][ T9316] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 500.791912][ T9316] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 500.800663][ T9316] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 500.809956][ T9316] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 500.865222][ T9316] usb 2-1: config 64 interface 0 has no altsetting 0 [ 501.006864][ T9316] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 501.035150][ T9316] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.088151][ T9316] usb 2-1: config 64 interface 0 has no altsetting 0 [ 501.109394][ T9316] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 501.124297][ T9316] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.140530][ T9316] usb 2-1: config 64 interface 0 has no altsetting 0 [ 501.246887][ T9316] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 501.260595][ T9316] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.280614][ T9316] usb 2-1: config 64 interface 0 has no altsetting 0 [ 501.305226][ T9316] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 501.320193][ T9316] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.341799][ T9316] usb 2-1: config 64 interface 0 has no altsetting 0 [ 501.345616][T11171] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 501.359323][ T9316] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 501.368582][ T9316] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.385813][ T9316] usb 2-1: config 64 interface 0 has no altsetting 0 [ 501.395761][T11171] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 501.396360][ T9316] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 501.422829][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.445861][ T9316] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.463222][ T9316] usb 2-1: config 64 interface 0 has no altsetting 0 [ 501.471126][ T9316] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 501.486236][ T9316] usb 2-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 501.497763][ T9316] usb 2-1: config 64 interface 0 has no altsetting 0 [ 501.513073][ T9316] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 501.527627][ T9316] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 501.536538][ T9316] usb 2-1: Product: syz [ 501.540767][ T9316] usb 2-1: Manufacturer: syz [ 501.545525][ T9316] usb 2-1: SerialNumber: syz [ 501.555578][ T9316] yurex 2-1:64.0: USB YUREX device now attached to Yurex #0 [ 502.331175][ T5906] usb 2-1: USB disconnect, device number 24 [ 502.353896][ T5906] yurex 2-1:64.0: USB YUREX #0 now disconnected [ 502.641476][ T29] audit: type=1326 audit(1730795351.805:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.665017][ T29] audit: type=1326 audit(1730795351.805:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.688656][ T29] audit: type=1326 audit(1730795351.805:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.712192][ T29] audit: type=1326 audit(1730795351.805:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.735633][ T29] audit: type=1326 audit(1730795351.805:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.759265][ T29] audit: type=1326 audit(1730795351.805:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.782711][ T29] audit: type=1326 audit(1730795351.805:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.842524][ T29] audit: type=1326 audit(1730795351.985:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.866030][ T29] audit: type=1326 audit(1730795351.985:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 502.889720][ T29] audit: type=1326 audit(1730795351.985:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11178 comm="syz.5.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46b77e719 code=0x7ffc0000 [ 503.336843][T11190] ubi0: attaching mtd0 [ 503.341334][T11190] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 504.505524][T11201] trusted_key: encrypted_key: insufficient parameters specified [ 504.742694][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 504.911716][ T5906] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 505.451895][ T5906] usb 1-1: device descriptor read/64, error -71 [ 505.723552][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'. [ 505.732769][T11219] netlink: 'syz.1.1456': attribute type 3 has an invalid length. [ 506.439796][ T5906] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 506.571508][ T5906] usb 1-1: device descriptor read/64, error -71 [ 506.681795][ T5906] usb usb1-port1: attempt power cycle [ 507.021530][ T5906] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 507.061933][ T5906] usb 1-1: device descriptor read/8, error -71 [ 507.092108][T11229] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1457'. [ 507.979592][ T5906] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 508.353055][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 508.554625][ T5906] usb 1-1: device not accepting address 28, error -71 [ 508.561865][ T5906] usb usb1-port1: unable to enumerate USB device [ 509.069397][T11252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.140179][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 509.189466][T11252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.225479][T11252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.640929][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 509.932551][ T5875] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 510.001674][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 510.153478][ T5875] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 510.160940][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 510.161681][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 510.174283][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 510.192658][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 510.204154][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 510.377738][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 510.386501][ T5906] usb 2-1: config 3 has an invalid interface number: 220 but max is 1 [ 510.395032][ T5906] usb 2-1: config 3 has an invalid interface number: 9 but max is 1 [ 510.403172][ T5906] usb 2-1: config 3 has no interface number 0 [ 510.409260][ T5906] usb 2-1: config 3 has no interface number 1 [ 510.415664][ T5906] usb 2-1: config 3 interface 9 altsetting 8 endpoint 0x7 has invalid maxpacket 1064, setting to 1024 [ 510.426829][ T5906] usb 2-1: config 3 interface 9 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 510.438135][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 510.441483][ T5875] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 510.457888][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 510.468207][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 510.478333][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 510.489634][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 510.500865][ T5875] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 510.503677][ T5906] usb 2-1: config 3 interface 9 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 510.519220][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 510.524378][ T5906] usb 2-1: config 3 interface 9 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 510.539720][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 510.540123][ T5906] usb 2-1: config 3 interface 9 altsetting 8 endpoint 0xE has invalid maxpacket 1088, setting to 64 [ 510.560892][ T5906] usb 2-1: config 3 interface 9 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 510.571610][ T5906] usb 2-1: config 3 interface 220 has no altsetting 0 [ 510.578390][ T5906] usb 2-1: config 3 interface 9 has no altsetting 0 [ 510.601767][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 510.620982][ T5906] usb 2-1: New USB device found, idVendor=18ef, idProduct=e032, bcdDevice=a4.c2 [ 510.634101][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.643533][ T5906] usb 2-1: Product: syz [ 510.647742][ T5906] usb 2-1: Manufacturer: syz [ 510.655137][ T5906] usb 2-1: SerialNumber: syz [ 510.668625][ T5875] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 510.771465][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 510.779030][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.791687][ T25] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 510.801782][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.809880][ T25] usb 6-1: Product: syz [ 510.814945][ T25] usb 6-1: Manufacturer: syz [ 510.819583][ T25] usb 6-1: SerialNumber: syz [ 510.831906][ T25] usb 6-1: config 0 descriptor?? [ 510.856717][ T5875] usb 3-1: string descriptor 0 read error: -22 [ 510.863212][ T5875] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 510.872183][ T5906] cp210x 2-1:3.220: cp210x converter detected [ 510.872762][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.891454][ T5906] cp210x 2-1:3.220: failed to get vendor val 0x370b size 1: -71 [ 510.905006][ T5875] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 510.936045][ T5906] cp210x 2-1:3.220: querying part number failed [ 511.050312][ T5906] usb 2-1: cp210x converter now attached to ttyUSB0 [ 511.070411][ T25] usb 6-1: ignoring: not an USB2CAN converter [ 511.078774][ T5906] cp210x 2-1:3.9: cp210x converter detected [ 511.091601][ T5906] cp210x 2-1:3.9: failed to get vendor val 0x370b size 1: -71 [ 511.099111][ T5906] cp210x 2-1:3.9: querying part number failed [ 511.208541][ T5875] usb 3-1: USB disconnect, device number 13 [ 511.277125][ T5909] usb 6-1: USB disconnect, device number 9 [ 511.295609][ T5906] usb 2-1: cp210x converter now attached to ttyUSB1 [ 511.317178][ T5906] usb 2-1: USB disconnect, device number 25 [ 511.326095][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.334272][ T5906] cp210x 2-1:3.220: device disconnected [ 511.345228][ T5906] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 511.356937][ T5906] cp210x 2-1:3.9: device disconnected [ 512.509020][T11300] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1475'. [ 514.181861][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 514.181919][ T29] audit: type=1804 audit(1730795363.325:655): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1485" name="/newroot/142/file0/bus" dev="ramfs" ino=28921 res=1 errno=0 [ 514.443164][ T29] audit: type=1800 audit(1730795363.485:656): pid=11321 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1485" name="bus" dev="ramfs" ino=28921 res=0 errno=0 [ 516.460444][ T29] audit: type=1400 audit(1730795365.625:657): avc: denied { write } for pid=11337 comm="syz.1.1489" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 516.532884][T11347] netlink: 'syz.1.1489': attribute type 2 has an invalid length. [ 517.102736][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'. [ 517.553948][T11365] binder: 11359:11365 ioctl c0306201 20000180 returned -14 [ 518.877577][T11374] overlayfs: failed to resolve './file1/file0': -2 [ 519.410193][T11382] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1501'. [ 519.601720][T10895] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 519.851725][T10895] usb 1-1: Using ep0 maxpacket: 16 [ 520.265105][T11391] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 520.283373][T10895] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 520.291786][T10895] usb 1-1: config 0 has no interface number 0 [ 520.301110][T10895] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 520.367749][T10895] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 520.443919][T10895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.587453][T10895] usb 1-1: Product: syz [ 520.612646][T10895] usb 1-1: Manufacturer: syz [ 520.638644][T10895] usb 1-1: SerialNumber: syz [ 520.652006][T10895] usb 1-1: config 0 descriptor?? [ 521.088900][T11395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 521.100124][T11399] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 521.129557][ T29] audit: type=1400 audit(1730795370.295:658): avc: denied { map } for pid=11402 comm="syz.1.1507" path="socket:[29022]" dev="sockfs" ino=29022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 521.303485][T10895] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input26 [ 521.411572][ T5906] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 521.561568][ T5906] usb 3-1: Invalid ep0 maxpacket: 16 [ 521.701552][ T5906] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 521.851684][ T5906] usb 3-1: Invalid ep0 maxpacket: 16 [ 521.867107][ T5906] usb usb3-port1: attempt power cycle [ 522.055003][ T29] audit: type=1400 audit(1730795371.225:659): avc: denied { shutdown } for pid=11417 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 522.075108][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.221500][ T5906] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 522.442003][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 523.002764][ T5906] usb 3-1: Invalid ep0 maxpacket: 16 [ 523.332051][ T5906] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 523.379490][ T5906] usb 3-1: Invalid ep0 maxpacket: 16 [ 523.411957][ T5906] usb usb3-port1: unable to enumerate USB device [ 524.582277][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 525.678438][ T9316] usb 1-1: USB disconnect, device number 29 [ 526.562628][T11457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 527.952827][T11468] netlink: 'syz.4.1525': attribute type 21 has an invalid length. [ 527.991058][T11468] netlink: 'syz.4.1525': attribute type 1 has an invalid length. [ 528.150760][T11474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 528.240068][T11476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 528.943846][ T29] audit: type=1400 audit(1730795378.095:660): avc: denied { write } for pid=11463 comm="syz.4.1525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 529.655374][ T29] audit: type=1326 audit(1730795378.825:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11492 comm="syz.4.1532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x0 [ 530.975786][T11509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.122003][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 532.407669][T11529] syz.1.1541: attempt to access beyond end of device [ 532.407669][T11529] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 532.421640][T11529] syz.1.1541: attempt to access beyond end of device [ 532.421640][T11529] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 532.434817][T11529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 532.447253][T11529] syz.1.1541: attempt to access beyond end of device [ 532.447253][T11529] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 532.460422][T11529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 532.469980][T11529] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 532.477698][T11529] UDF-fs: Scanning with blocksize 512 failed [ 532.486619][T11529] syz.1.1541: attempt to access beyond end of device [ 532.486619][T11529] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 532.500248][T11529] syz.1.1541: attempt to access beyond end of device [ 532.500248][T11529] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 532.513574][T11529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 532.524130][T11529] syz.1.1541: attempt to access beyond end of device [ 532.524130][T11529] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 532.537316][T11529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 532.546883][T11529] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 532.554507][T11529] UDF-fs: Scanning with blocksize 1024 failed [ 532.562329][T11529] syz.1.1541: attempt to access beyond end of device [ 532.562329][T11529] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 532.575792][T11529] syz.1.1541: attempt to access beyond end of device [ 532.575792][T11529] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 532.589084][T11529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 532.599144][T11529] syz.1.1541: attempt to access beyond end of device [ 532.599144][T11529] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 532.612452][T11529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 532.622013][T11529] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 532.629595][T11529] UDF-fs: Scanning with blocksize 2048 failed [ 532.637324][T11529] syz.1.1541: attempt to access beyond end of device [ 532.637324][T11529] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 532.650845][T11529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 532.660567][T11529] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 532.670105][T11529] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 532.677745][T11529] UDF-fs: Scanning with blocksize 4096 failed [ 532.683931][T11529] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 537.241754][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 562.843435][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.441480][T11537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=11537 comm=syz.5.1546 [ 581.442713][ T29] audit: type=1400 audit(1730795430.605:662): avc: denied { ioctl } for pid=11532 comm="syz.5.1546" path="socket:[29305]" dev="sockfs" ino=29305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 581.479772][T11536] netlink: 'syz.2.1545': attribute type 1 has an invalid length. [ 581.490746][T11540] netlink: 'syz.4.1547': attribute type 7 has an invalid length. [ 582.376028][T11556] kernel profiling enabled (shift: 63) [ 582.382115][T11556] profiling shift: 63 too large [ 582.694631][T11561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 583.177939][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 583.212964][T11564] FAULT_INJECTION: forcing a failure. [ 583.212964][T11564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.217090][T11554] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 583.226572][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.1.1551 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 583.226600][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 583.226612][T11564] Call Trace: [ 583.226618][T11564] [ 583.226626][T11564] dump_stack_lvl+0x16c/0x1f0 [ 583.226653][T11564] should_fail_ex+0x497/0x5b0 [ 583.226678][T11564] _copy_from_user+0x2e/0xd0 [ 583.274876][T11564] copy_msghdr_from_user+0x99/0x160 [ 583.280078][T11564] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 583.285873][T11564] ? __pfx___lock_acquire+0x10/0x10 [ 583.291057][T11564] ___sys_sendmsg+0xff/0x1e0 [ 583.295634][T11564] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.300822][T11564] ? lock_acquire+0x2f/0xb0 [ 583.305305][T11564] ? __fget_files+0x40/0x3f0 [ 583.309886][T11564] ? fdget+0x176/0x210 [ 583.313942][T11564] __sys_sendmsg+0x117/0x1f0 [ 583.318532][T11564] ? __pfx___sys_sendmsg+0x10/0x10 [ 583.323633][T11564] ? __pfx___schedule+0x10/0x10 [ 583.328478][T11564] do_syscall_64+0xcd/0x250 [ 583.332969][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.338849][T11564] RIP: 0033:0x7f8a1937e719 [ 583.343347][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.362963][T11564] RSP: 002b:00007f8a1a115038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.371376][T11564] RAX: ffffffffffffffda RBX: 00007f8a19536058 RCX: 00007f8a1937e719 [ 583.379353][T11564] RDX: 0000000000000000 RSI: 0000000020000ac0 RDI: 0000000000000008 [ 583.387309][T11564] RBP: 00007f8a1a115090 R08: 0000000000000000 R09: 0000000000000000 [ 583.395262][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.403213][T11564] R13: 0000000000000000 R14: 00007f8a19536058 R15: 00007ffdfcf69988 [ 583.411178][T11564] [ 583.563304][T11554] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 585.779481][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1562'. [ 586.670258][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1564'. [ 589.974058][ T29] audit: type=1400 audit(1730795439.135:663): avc: denied { accept } for pid=11674 comm="syz.1.1580" lport=3618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 591.514329][ T29] audit: type=1326 audit(1730795440.685:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 592.493605][T11705] ubi0: attaching mtd0 [ 592.497723][T11705] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 592.791872][ T29] audit: type=1326 audit(1730795440.685:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 592.815287][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.091165][ T29] audit: type=1326 audit(1730795440.685:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 593.114605][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.207677][ T29] audit: type=1326 audit(1730795440.685:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 593.235208][ T29] audit: type=1326 audit(1730795440.685:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 593.304568][ T29] audit: type=1326 audit(1730795440.685:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 593.329912][ T29] audit: type=1326 audit(1730795440.685:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 593.353281][ C0] vkms_vblank_simulate: vblank timer overrun [ 593.562119][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.127146][ T29] audit: type=1326 audit(1730795440.685:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 594.343845][ T29] audit: type=1326 audit(1730795440.685:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.1.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 596.426968][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 596.426985][ T29] audit: type=1400 audit(1730795445.595:693): avc: denied { read } for pid=11745 comm="syz.0.1602" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 596.481413][ T29] audit: type=1400 audit(1730795445.635:694): avc: denied { open } for pid=11745 comm="syz.0.1602" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 596.786338][T11765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 597.541640][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 598.300913][ T25] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 598.333079][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.341127][ T25] usb 6-1: Product: syz [ 598.346003][ T25] usb 6-1: Manufacturer: syz [ 598.350702][ T25] usb 6-1: SerialNumber: syz [ 598.355626][ T5876] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 598.386856][ T25] usb 6-1: config 0 descriptor?? [ 598.813087][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 598.915302][ T25] usb 6-1: USB disconnect, device number 10 [ 599.469569][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.486169][ T5876] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 599.495299][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.507868][ T5876] usb 5-1: config 0 descriptor?? [ 599.551690][ T5909] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 599.752939][ T5909] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.767698][ T5909] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.788081][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.797163][ T5909] usb 3-1: Product: syz [ 599.801580][T10895] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 599.809275][ T5909] usb 3-1: Manufacturer: syz [ 599.815028][ T5909] usb 3-1: SerialNumber: syz [ 599.839521][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 600.041781][T10895] usb 1-1: Using ep0 maxpacket: 8 [ 600.050725][T10895] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 600.060062][T10895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.068333][T10895] usb 1-1: Product: syz [ 600.072700][T10895] usb 1-1: Manufacturer: syz [ 600.077336][T10895] usb 1-1: SerialNumber: syz [ 600.084198][T10895] usb 1-1: config 0 descriptor?? [ 600.217180][T10895] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 600.504604][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.665094][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.922807][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.938834][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.950648][T11808] netlink: 'syz.5.1623': attribute type 1 has an invalid length. [ 601.006510][T11810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1622'. [ 601.381809][ T5909] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 601.391487][ T1213] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 601.397791][ T5909] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 601.411409][ T5909] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 601.546422][ T1213] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 601.568021][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.585231][ T1213] usb 2-1: config 0 descriptor?? [ 601.604233][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.629379][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.834277][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.854608][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.878319][ T1213] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 601.905849][ T1213] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 601.947431][ T1213] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 601.967420][ T1213] [drm] Initialized udl on minor 2 [ 601.997089][ T5876] usbhid 5-1:0.0: can't add hid device: -71 [ 602.015347][ T5876] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 602.051473][ T5876] usb 5-1: USB disconnect, device number 42 [ 602.202815][ T5909] cdc_ncm 3-1:1.0: setting tx_max = 32 [ 602.247345][ T5909] cdc_ncm 3-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 602.299653][ T5909] usb 3-1: USB disconnect, device number 18 [ 602.373527][ T5909] cdc_ncm 3-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 603.085106][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 603.400241][ T9316] usb 1-1: USB disconnect, device number 30 [ 604.326673][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 605.333743][T11849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 605.994059][ T1213] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 606.005230][ T1213] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 606.019692][ T9316] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 606.031002][ T9316] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 606.039861][ T9316] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 606.048730][ T1213] usb 2-1: USB disconnect, device number 26 [ 606.173890][ T29] audit: type=1400 audit(1730795455.345:695): avc: denied { getopt } for pid=11855 comm="syz.5.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 607.446488][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1639'. [ 607.722064][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'. [ 607.732543][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 608.332713][ T29] audit: type=1400 audit(1730795457.235:696): avc: denied { ioctl } for pid=11875 comm="syz.5.1641" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 608.656010][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1642'. [ 608.691513][ T25] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 608.841529][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 608.865030][ T25] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 608.874501][ T25] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 608.883624][ T29] audit: type=1326 audit(1730795458.045:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 608.942558][ T25] usb 5-1: Product: syz [ 608.946884][ T25] usb 5-1: Manufacturer: syz [ 608.951905][ T25] usb 5-1: SerialNumber: syz [ 609.133331][ T29] audit: type=1326 audit(1730795458.045:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 609.309190][T11904] ubi0: attaching mtd0 [ 609.313452][T11904] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 609.991692][ T25] usb 5-1: config 0 descriptor?? [ 609.997998][ T29] audit: type=1326 audit(1730795458.165:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 610.171746][ T29] audit: type=1326 audit(1730795458.165:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 610.650494][ T29] audit: type=1326 audit(1730795458.165:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 610.674222][ T29] audit: type=1326 audit(1730795458.165:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 610.679774][ T25] usb 5-1: USB disconnect, device number 43 [ 610.697690][ T29] audit: type=1326 audit(1730795458.175:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 610.697730][ T29] audit: type=1326 audit(1730795458.175:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11898 comm="syz.1.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a1937e719 code=0x7ffc0000 [ 610.750795][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.779112][T11920] netlink: 'syz.1.1650': attribute type 24 has an invalid length. [ 610.794158][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 611.266674][T11901] Bluetooth: hci2: command 0x0406 tx timeout [ 611.293079][T11928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1652'. [ 611.858883][T11921] kvm: emulating exchange as write [ 612.308878][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 612.308894][ T29] audit: type=1326 audit(1730795461.475:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 612.446795][ T29] audit: type=1326 audit(1730795461.475:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 612.618922][T11947] ubi0: attaching mtd0 [ 612.623141][T11947] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 613.221885][ T29] audit: type=1326 audit(1730795461.475:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 613.245589][ T29] audit: type=1326 audit(1730795461.475:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 613.268947][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.275410][ T29] audit: type=1326 audit(1730795461.475:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 613.299053][ T29] audit: type=1326 audit(1730795461.475:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 613.322399][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.328778][ T29] audit: type=1326 audit(1730795461.475:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 613.352156][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.398009][ T29] audit: type=1326 audit(1730795461.475:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 613.421390][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.427619][ T29] audit: type=1326 audit(1730795461.475:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 613.450919][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.457250][ T29] audit: type=1326 audit(1730795461.475:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11942 comm="syz.4.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 613.534700][T11952] FAULT_INJECTION: forcing a failure. [ 613.534700][T11952] name failslab, interval 1, probability 0, space 0, times 0 [ 613.553472][T11952] CPU: 1 UID: 0 PID: 11952 Comm: syz.5.1659 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 613.564273][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 613.574338][T11952] Call Trace: [ 613.577619][T11952] [ 613.580553][T11952] dump_stack_lvl+0x16c/0x1f0 [ 613.585241][T11952] should_fail_ex+0x497/0x5b0 [ 613.589934][T11952] ? fs_reclaim_acquire+0xae/0x150 [ 613.595058][T11952] should_failslab+0xc2/0x120 [ 613.599746][T11952] kmem_cache_alloc_node_noprof+0x71/0x310 [ 613.605569][T11952] ? __alloc_skb+0x2b1/0x380 [ 613.610179][T11952] __alloc_skb+0x2b1/0x380 [ 613.614603][T11952] ? __pfx___alloc_skb+0x10/0x10 [ 613.619550][T11952] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 613.625548][T11952] netlink_alloc_large_skb+0x69/0x130 [ 613.630941][T11952] netlink_sendmsg+0x689/0xd70 [ 613.635721][T11952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.641026][T11952] ____sys_sendmsg+0xaaf/0xc90 [ 613.645799][T11952] ? copy_msghdr_from_user+0x10b/0x160 [ 613.651250][T11952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.656534][T11952] ? __pfx___lock_acquire+0x10/0x10 [ 613.661725][T11952] ___sys_sendmsg+0x135/0x1e0 [ 613.666392][T11952] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.671586][T11952] ? lock_acquire+0x2f/0xb0 [ 613.676074][T11952] ? __fget_files+0x40/0x3f0 [ 613.680666][T11952] ? fdget+0x176/0x210 [ 613.684742][T11952] __sys_sendmsg+0x117/0x1f0 [ 613.689324][T11952] ? __pfx___sys_sendmsg+0x10/0x10 [ 613.694436][T11952] ? __fget_files+0x244/0x3f0 [ 613.699120][T11952] do_syscall_64+0xcd/0x250 [ 613.703615][T11952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.709502][T11952] RIP: 0033:0x7fd46b77e719 [ 613.713903][T11952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.733501][T11952] RSP: 002b:00007fd46c4d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.741908][T11952] RAX: ffffffffffffffda RBX: 00007fd46b935f80 RCX: 00007fd46b77e719 [ 613.749863][T11952] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000006 [ 613.757819][T11952] RBP: 00007fd46c4d6090 R08: 0000000000000000 R09: 0000000000000000 [ 613.765774][T11952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.773729][T11952] R13: 0000000000000000 R14: 00007fd46b935f80 R15: 00007ffc6954caa8 [ 613.781709][T11952] [ 613.784829][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.826510][T11956] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 613.910489][T11959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.291937][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 614.425110][T11961] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 614.433668][T11961] bond4: (slave batadv2): Enslaving as a backup interface with an up link [ 615.359056][T11980] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1664'. [ 615.944919][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 616.071698][ T25] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 616.373343][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.391671][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.412720][ T25] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 616.441797][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.483500][ T25] usb 5-1: config 0 descriptor?? [ 617.126991][ T25] hid-led 0003:0FC5:B080.0008: unknown main item tag 0x0 [ 617.201739][T11984] netlink: 'syz.4.1668': attribute type 10 has an invalid length. [ 618.010056][T11984] hsr0: entered promiscuous mode [ 618.018659][T11984] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 618.076576][T11984] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 618.087814][T11984] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 618.106009][T11984] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 618.119301][ T25] hid-led 0003:0FC5:B080.0008: probe with driver hid-led failed with error -71 [ 618.133595][ T25] usb 5-1: USB disconnect, device number 44 [ 618.464894][T12026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1681'. [ 618.477971][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1681'. [ 618.498272][T12026] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 618.515205][T12026] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 618.539765][T12026] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 618.559287][T12026] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 618.587436][T12026] geneve2: entered allmulticast mode [ 618.742276][T12031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.791263][T12031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.812295][T12031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.172381][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 622.426810][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 622.426827][ T29] audit: type=1400 audit(1730795471.595:747): avc: denied { write } for pid=12057 comm="syz.0.1692" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 622.604560][T10895] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 622.747856][ T29] audit: type=1400 audit(1730795471.915:748): avc: denied { shutdown } for pid=12084 comm="syz.2.1698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 622.767758][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.965955][T10895] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 622.974518][T10895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 622.991389][T10895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 623.031020][T10895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.044128][ T965] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 623.087613][T10895] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.098100][T10895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.132312][T10895] usb 2-1: config 0 descriptor?? [ 623.138589][T12077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 623.157163][T12093] evm: overlay not supported [ 623.209458][ T29] audit: type=1326 audit(1730795472.375:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12091 comm="syz.5.1703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd46b77e719 code=0x0 [ 623.251631][ T965] usb 5-1: Using ep0 maxpacket: 8 [ 623.258674][ T965] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 623.271441][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.289485][ T965] usb 5-1: config 0 descriptor?? [ 623.363365][T12099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.380297][T12099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.394192][T12099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.633606][T12077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.654835][T12077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.977178][T10895] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 623.988658][T10895] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 624.016491][T10895] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 624.085617][T10895] usb 2-1: USB disconnect, device number 27 [ 624.293329][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.701078][T12115] overlayfs: failed to resolve './file1/file0': -2 [ 625.363059][T12125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 626.522668][T12128] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1715'. [ 626.531700][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1715'. [ 626.563613][T12128] bond2: entered allmulticast mode [ 626.568933][T12128] 8021q: adding VLAN 0 to HW filter on device bond2 [ 626.763271][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 626.960635][ T9316] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 627.790513][ T9316] usb 2-1: Using ep0 maxpacket: 16 [ 627.799278][ T9316] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 627.799312][ T9316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.862510][ T9316] usb 2-1: config 0 descriptor?? [ 627.877032][ T965] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 627.894617][ T9316] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 627.902613][ T965] asix 5-1:0.0: probe with driver asix failed with error -71 [ 627.929489][ T965] usb 5-1: USB disconnect, device number 45 [ 628.062956][T12162] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 628.230394][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1727'. [ 628.613777][T12136] netlink: 'syz.1.1716': attribute type 21 has an invalid length. [ 628.871660][T12185] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1731'. [ 629.117932][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 629.127103][T12194] netlink: 'syz.4.1733': attribute type 3 has an invalid length. [ 629.545461][ T965] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 629.616852][T12195] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 629.721966][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 629.741663][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 629.881591][T12197] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 629.944218][T12197] bond5: (slave batadv3): Enslaving as a backup interface with an up link [ 630.001401][ T965] usb 1-1: Using ep0 maxpacket: 16 [ 630.148546][ T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.159543][ T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.169535][ T965] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.182421][ T965] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.191540][ T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.217880][ T965] usb 1-1: config 0 descriptor?? [ 630.511405][ T5875] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 630.614803][ T1213] usb 2-1: USB disconnect, device number 28 [ 631.421524][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 631.434616][ T5875] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 631.453909][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.643209][ T5875] usb 3-1: config 0 descriptor?? [ 631.779513][T12225] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 631.915580][T12225] VFS: Can't find a romfs filesystem on dev nullb0. [ 631.915580][T12225] [ 634.175143][ T29] audit: type=1400 audit(1730795483.345:750): avc: denied { read } for pid=12241 comm="syz.1.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 634.501730][ T5909] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 634.783511][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.802642][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 634.818737][ T5909] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 634.839651][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 634.868008][ T5909] usb 5-1: SerialNumber: syz [ 635.162756][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.171732][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.931978][ T965] usbhid 1-1:0.0: can't add hid device: -32 [ 635.948471][ T965] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 636.007591][ T5875] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 636.017945][ T5875] asix 3-1:0.0: probe with driver asix failed with error -71 [ 636.167953][ T5875] usb 3-1: USB disconnect, device number 19 [ 636.190553][ T1213] usb 1-1: USB disconnect, device number 31 [ 637.185884][ T5909] usb 5-1: skipping empty audio interface (v1) [ 638.020746][ T5909] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 638.348432][ T5909] usb 5-1: USB disconnect, device number 46 [ 638.406950][ T29] audit: type=1326 audit(1730795487.455:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 638.431051][ T29] audit: type=1326 audit(1730795487.455:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 638.461816][ T29] audit: type=1326 audit(1730795487.465:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 638.647842][T12288] ubi0: attaching mtd0 [ 638.652071][T12288] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 639.310468][ T29] audit: type=1326 audit(1730795487.465:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.351475][ T965] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 639.379505][ T29] audit: type=1326 audit(1730795487.465:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.405257][ T29] audit: type=1326 audit(1730795487.465:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.429464][ T29] audit: type=1326 audit(1730795487.465:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.453058][ T29] audit: type=1326 audit(1730795487.465:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.511803][ T1213] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 639.521638][ T965] usb 2-1: Using ep0 maxpacket: 32 [ 639.530962][ T965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.551477][ T29] audit: type=1326 audit(1730795487.465:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.592072][ T965] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 639.611431][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.665228][ T965] usb 2-1: Product: syz [ 639.692222][ T29] audit: type=1326 audit(1730795487.465:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.720861][ T965] usb 2-1: Manufacturer: syz [ 639.729689][ T965] usb 2-1: SerialNumber: syz [ 639.748159][ T965] usb 2-1: config 0 descriptor?? [ 639.758851][ T965] usb 2-1: bad CDC descriptors [ 639.770926][ T965] usb 2-1: unsupported MDLM descriptors [ 639.784370][T12294] netlink: 'syz.2.1757': attribute type 3 has an invalid length. [ 639.796429][ T29] audit: type=1326 audit(1730795487.465:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.836266][T12294] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1757'. [ 639.850612][ T29] audit: type=1326 audit(1730795487.465:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 639.916912][ T29] audit: type=1326 audit(1730795487.465:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz.4.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11d77e719 code=0x7ffc0000 [ 640.073677][ T965] usb 2-1: USB disconnect, device number 29 [ 640.995507][ T1213] usb 1-1: Using ep0 maxpacket: 16 [ 641.016257][ T1213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.550917][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.562104][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 641.571957][ T1213] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 641.582210][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.841013][ T1213] usb 1-1: string descriptor 0 read error: -71 [ 641.847509][ T1213] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 641.856796][ T1213] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 641.873162][ T1213] usb 1-1: config 0 descriptor?? [ 641.881239][ T1213] usb 1-1: can't set config #0, error -71 [ 641.899734][ T1213] usb 1-1: USB disconnect, device number 32 [ 642.354071][T12319] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1771'. [ 642.367579][T12317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1770'. [ 643.250806][T12344] xt_limit: Overflow, try lower: 0/0 [ 644.729241][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1783'. [ 645.059661][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 645.059678][ T29] audit: type=1400 audit(1730795494.225:776): avc: denied { connect } for pid=12366 comm="syz.2.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 645.260823][T12377] macsec1: entered allmulticast mode [ 647.127215][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1803'. [ 647.463458][T12418] 9pnet_fd: Insufficient options for proto=fd [ 648.400104][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 649.219173][T12444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 649.259015][ T965] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 649.834125][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.848881][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.865843][ T965] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 649.980857][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.078327][ T965] usb 5-1: config 0 descriptor?? [ 650.783808][T12460] smc: removing ib device syz2 [ 651.110723][T12460] ------------[ cut here ]------------ [ 651.116282][T12460] WARNING: CPU: 0 PID: 12460 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 651.127106][T12460] Modules linked in: [ 651.131035][T12460] CPU: 0 UID: 0 PID: 12460 Comm: syz.5.1816 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 651.142136][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.152235][T12460] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 651.157800][T12460] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 2d 3c f9 e8 a0 2d 3c f9 90 <0f> 0b 90 5b e9 96 2d 3c f9 e8 a1 b7 9d f9 eb da 66 66 2e 0f 1f 84 [ 651.177725][T12460] RSP: 0018:ffffc9000ce671c8 EFLAGS: 00010246 [ 651.183853][T12460] RAX: 0000000000040000 RBX: ffff8880299752f8 RCX: ffffc90018a5d000 [ 651.191900][T12460] RDX: 0000000000040000 RSI: ffffffff88514db0 RDI: ffff888029975378 [ 651.199924][T12460] RBP: ffffffff884fb6f0 R08: 0000000000000005 R09: 0000000000000001 [ 651.207964][T12460] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029974648 [ 651.215967][T12460] R13: ffff888029973fe0 R14: ffff888029973fe0 R15: ffff888029975058 [ 651.224155][T12460] FS: 00007fd46c4d66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 651.233176][T12460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.239794][T12460] CR2: 000000110c3ce880 CR3: 0000000029eb6000 CR4: 00000000003526f0 [ 651.247835][T12460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 651.255854][T12460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 651.263944][T12460] Call Trace: [ 651.267269][T12460] [ 651.270215][T12460] ? __warn+0xea/0x3d0 [ 651.274382][T12460] ? rxe_pool_cleanup+0x41/0x60 [ 651.279266][T12460] ? report_bug+0x3c0/0x580 [ 651.285140][T12460] ? handle_bug+0x54/0xa0 [ 651.289490][T12460] ? exc_invalid_op+0x17/0x50 [ 651.294217][T12460] ? asm_exc_invalid_op+0x1a/0x20 [ 651.299238][T12460] ? __pfx_rxe_dealloc+0x10/0x10 [ 651.304217][T12460] ? rxe_pool_cleanup+0x40/0x60 [ 651.309071][T12460] ? rxe_pool_cleanup+0x41/0x60 [ 651.313978][T12460] ? rxe_pool_cleanup+0x40/0x60 [ 651.318844][T12460] rxe_dealloc+0x26/0x110 [ 651.323288][T12460] ? __pfx_rxe_dealloc+0x10/0x10 [ 651.328222][T12460] ib_dealloc_device+0x46/0x230 [ 651.333108][T12460] __ib_unregister_device+0x396/0x480 [ 651.338475][T12460] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 651.344386][T12460] ib_unregister_device_and_put+0x5a/0x80 [ 651.350095][T12460] nldev_dellink+0x211/0x300 [ 651.354714][T12460] ? __pfx_nldev_dellink+0x10/0x10 [ 651.359858][T12460] ? cap_capable+0x1cf/0x240 [ 651.364557][T12460] ? bpf_lsm_capable+0x9/0x10 [ 651.369231][T12460] ? security_capable+0x7e/0x260 [ 651.374219][T12460] ? ns_capable+0xd7/0x110 [ 651.378631][T12460] ? __pfx_nldev_dellink+0x10/0x10 [ 651.383804][T12460] rdma_nl_rcv_msg+0x388/0x6e0 [ 651.388570][T12460] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 651.393964][T12460] ? __pfx___lock_acquire+0x10/0x10 [ 651.399155][T12460] ? __pfx___lock_acquire+0x10/0x10 [ 651.404369][T12460] ? hlock_class+0x4e/0x130 [ 651.408874][T12460] ? __lock_acquire+0xbdd/0x3ce0 [ 651.413904][T12460] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 651.420371][T12460] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 651.427350][T12460] ? netlink_deliver_tap+0x1ae/0xd90 [ 651.432665][T12460] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 651.438046][T12460] netlink_unicast+0x53c/0x7f0 [ 651.442832][T12460] ? __pfx_netlink_unicast+0x10/0x10 [ 651.448146][T12460] netlink_sendmsg+0x8b8/0xd70 [ 651.452945][T12460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.458230][T12460] ____sys_sendmsg+0xaaf/0xc90 [ 651.463027][T12460] ? copy_msghdr_from_user+0x10b/0x160 [ 651.468603][T12460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.473946][T12460] ? __pfx___lock_acquire+0x10/0x10 [ 651.479148][T12460] ___sys_sendmsg+0x135/0x1e0 [ 651.483887][T12460] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.489126][T12460] ? __fget_files+0x202/0x3f0 [ 651.493853][T12460] ? fdget+0x176/0x210 [ 651.497932][T12460] __sys_sendmsg+0x117/0x1f0 [ 651.502543][T12460] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.507649][T12460] ? __x64_sys_futex+0x1e1/0x4c0 [ 651.512633][T12460] do_syscall_64+0xcd/0x250 [ 651.517144][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.523068][T12460] RIP: 0033:0x7fd46b77e719 [ 651.527474][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.547116][T12460] RSP: 002b:00007fd46c4d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.555559][T12460] RAX: ffffffffffffffda RBX: 00007fd46b935f80 RCX: 00007fd46b77e719 [ 651.563665][T12460] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 651.571744][T12460] RBP: 00007fd46b7f139e R08: 0000000000000000 R09: 0000000000000000 [ 651.579705][T12460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.587713][T12460] R13: 0000000000000000 R14: 00007fd46b935f80 R15: 00007ffc6954caa8 [ 651.595700][T12460] [ 651.598709][T12460] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 651.605966][T12460] CPU: 0 UID: 0 PID: 12460 Comm: syz.5.1816 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 651.616718][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 651.626754][T12460] Call Trace: [ 651.630027][T12460] [ 651.632940][T12460] dump_stack_lvl+0x3d/0x1f0 [ 651.637512][T12460] panic+0x71d/0x800 [ 651.641402][T12460] ? __pfx_panic+0x10/0x10 [ 651.645836][T12460] ? show_trace_log_lvl+0x29d/0x3d0 [ 651.651048][T12460] ? rxe_pool_cleanup+0x41/0x60 [ 651.655890][T12460] check_panic_on_warn+0xab/0xb0 [ 651.660818][T12460] __warn+0xf6/0x3d0 [ 651.664704][T12460] ? rxe_pool_cleanup+0x41/0x60 [ 651.669542][T12460] report_bug+0x3c0/0x580 [ 651.673876][T12460] handle_bug+0x54/0xa0 [ 651.678013][T12460] exc_invalid_op+0x17/0x50 [ 651.682500][T12460] asm_exc_invalid_op+0x1a/0x20 [ 651.687335][T12460] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 651.692783][T12460] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 2d 3c f9 e8 a0 2d 3c f9 90 <0f> 0b 90 5b e9 96 2d 3c f9 e8 a1 b7 9d f9 eb da 66 66 2e 0f 1f 84 [ 651.712397][T12460] RSP: 0018:ffffc9000ce671c8 EFLAGS: 00010246 [ 651.718446][T12460] RAX: 0000000000040000 RBX: ffff8880299752f8 RCX: ffffc90018a5d000 [ 651.726403][T12460] RDX: 0000000000040000 RSI: ffffffff88514db0 RDI: ffff888029975378 [ 651.734373][T12460] RBP: ffffffff884fb6f0 R08: 0000000000000005 R09: 0000000000000001 [ 651.742331][T12460] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888029974648 [ 651.750287][T12460] R13: ffff888029973fe0 R14: ffff888029973fe0 R15: ffff888029975058 [ 651.758328][T12460] ? __pfx_rxe_dealloc+0x10/0x10 [ 651.763267][T12460] ? rxe_pool_cleanup+0x40/0x60 [ 651.768114][T12460] ? rxe_pool_cleanup+0x40/0x60 [ 651.772955][T12460] rxe_dealloc+0x26/0x110 [ 651.777273][T12460] ? __pfx_rxe_dealloc+0x10/0x10 [ 651.782195][T12460] ib_dealloc_device+0x46/0x230 [ 651.787033][T12460] __ib_unregister_device+0x396/0x480 [ 651.792384][T12460] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 651.798261][T12460] ib_unregister_device_and_put+0x5a/0x80 [ 651.803987][T12460] nldev_dellink+0x211/0x300 [ 651.808571][T12460] ? __pfx_nldev_dellink+0x10/0x10 [ 651.813706][T12460] ? cap_capable+0x1cf/0x240 [ 651.818287][T12460] ? bpf_lsm_capable+0x9/0x10 [ 651.822962][T12460] ? security_capable+0x7e/0x260 [ 651.827888][T12460] ? ns_capable+0xd7/0x110 [ 651.832287][T12460] ? __pfx_nldev_dellink+0x10/0x10 [ 651.837382][T12460] rdma_nl_rcv_msg+0x388/0x6e0 [ 651.842135][T12460] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 651.847407][T12460] ? __pfx___lock_acquire+0x10/0x10 [ 651.852606][T12460] ? __pfx___lock_acquire+0x10/0x10 [ 651.857782][T12460] ? hlock_class+0x4e/0x130 [ 651.862291][T12460] ? __lock_acquire+0xbdd/0x3ce0 [ 651.867212][T12460] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e6/0x450 [ 651.873616][T12460] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 651.880564][T12460] ? netlink_deliver_tap+0x1ae/0xd90 [ 651.885849][T12460] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 651.891234][T12460] netlink_unicast+0x53c/0x7f0 [ 651.896007][T12460] ? __pfx_netlink_unicast+0x10/0x10 [ 651.901312][T12460] netlink_sendmsg+0x8b8/0xd70 [ 651.906079][T12460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.911368][T12460] ____sys_sendmsg+0xaaf/0xc90 [ 651.916174][T12460] ? copy_msghdr_from_user+0x10b/0x160 [ 651.921625][T12460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.926915][T12460] ? __pfx___lock_acquire+0x10/0x10 [ 651.932098][T12460] ___sys_sendmsg+0x135/0x1e0 [ 651.936787][T12460] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.941977][T12460] ? __fget_files+0x202/0x3f0 [ 651.946664][T12460] ? fdget+0x176/0x210 [ 651.950723][T12460] __sys_sendmsg+0x117/0x1f0 [ 651.955298][T12460] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.960391][T12460] ? __x64_sys_futex+0x1e1/0x4c0 [ 651.965328][T12460] do_syscall_64+0xcd/0x250 [ 651.969816][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.975696][T12460] RIP: 0033:0x7fd46b77e719 [ 651.980095][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.999699][T12460] RSP: 002b:00007fd46c4d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.008102][T12460] RAX: ffffffffffffffda RBX: 00007fd46b935f80 RCX: 00007fd46b77e719 [ 652.016060][T12460] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 652.024020][T12460] RBP: 00007fd46b7f139e R08: 0000000000000000 R09: 0000000000000000 [ 652.031976][T12460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.039948][T12460] R13: 0000000000000000 R14: 00007fd46b935f80 R15: 00007ffc6954caa8 [ 652.047916][T12460] [ 652.051177][T12460] Kernel Offset: disabled [ 652.055906][T12460] Rebooting in 86400 seconds..