last executing test programs: 9m15.997598864s ago: executing program 0 (id=922): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x8, 0x0, 0x7f}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 9m9.031711071s ago: executing program 0 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004000) (fail_nth: 5) 9m8.897333351s ago: executing program 0 (id=934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="e737", 0x2}], 0x1}}], 0x1, 0x4055) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 9m8.60685336s ago: executing program 0 (id=936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$inet6(0xa, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff3d, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) ftruncate(0xffffffffffffffff, 0x200) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 9m7.58193191s ago: executing program 0 (id=937): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') lseek(r2, 0xf8, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r4, 0x1ff) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x25, 0x0, 0x0, 0x800, 0x6, 0x0, 0x0, 0xb5, 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r2) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4010) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000140), 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000040)=[{0x0, 0x0, 0xcc, 0x5}, {0x6, 0x9, 0x2, 0x7}, {0xd, 0x7, 0x3c, 0x40}, {0x6, 0xa, 0x10}]}, 0x10) r8 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x8c8a36d2bb39940a, 0x8006, 0x11f}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xc2, 0x22, &(0x7f0000000540)="f107f4f79202202ca28c9fe08862f8794e1b46e5f08cf7c6c568321b2b7b1b332555b951534815c7217a63042f38d6f2ea52997c2f62dbe82573fd6711092c097fb8ebdcf2279733759ded45fb5d8d4c00ca11cc80caf5abda01775b15dac058d7070d1eb26860380207879af486b51923f23d1946859818032aa57b5f34f38568470bc5914131c22fc232bc4201ba1cf269432f92d3fc8b7742233991bf3549553c3ca995ed2915e5aec6e250b27115a859f21a83293973d9fffe5895f36399e88c", &(0x7f0000000640)=""/34, 0xb4b, 0x0, 0x0, 0x3c, 0x0, &(0x7f00000006c0)="ea99394a5f49cab8cef339b7f0def184c373ac8c50a2f4c7f39c9f9db92be8e16dde31179a29927a4c4c7e892c5eda9eec7dfb4bb198d6e470fa3d38", 0x4}, 0x50) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r8, 0x6e2, 0x600, 0x1, 0x0, 0x0) 9m5.503510057s ago: executing program 0 (id=944): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x8, 0x0, 0x7f}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 8m51.055083456s ago: executing program 32 (id=944): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x8, 0x0, 0x7f}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 7m8.311038927s ago: executing program 1 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff5}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x800) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0), 0xc7) syz_io_uring_setup(0x109, &(0x7f0000000240)={0x0, 0x114df, 0x8, 0xffffffdf, 0x4008d}, 0x0, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, 0x0, 0xffffffffffffff9c, 0x0, 0x167) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) 7m4.255307263s ago: executing program 1 (id=1181): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x38) 6m59.051485785s ago: executing program 1 (id=1188): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000880), 0x300, r4}, 0x38) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xffff0001, 0x4, 0x3, 0x1}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 6m57.06044597s ago: executing program 1 (id=1194): mknodat$null(0xffffffffffffff9c, 0x0, 0x800, 0x103) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000010) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000000800060040020000080005000000006f"], 0x2c}}, 0x810) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400080, 0x18c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x22, 0x3788ddd56ac63d1f}, 0x14}}, 0x0) ioctl$PIO_SCRNMAP(r6, 0x4b41, 0xffffffffffffffff) r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000190c0), r9) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000019180)={&(0x7f0000019080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000019140)={&(0x7f0000019100)={0x24, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd460}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r11, 0x1, 0x2e, 0x0, &(0x7f0000000280)) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0xc0405627, &(0x7f0000000140)=0x2) 6m56.077502767s ago: executing program 1 (id=1196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES64, @ANYRESHEX=r3, @ANYRES64], 0xffffffa5) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0xd, 0x6, '9P2000'}, 0x13) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 6m50.665154331s ago: executing program 1 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) 6m36.279723735s ago: executing program 33 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) 1m28.414763671s ago: executing program 5 (id=1910): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0x5}, {&(0x7f0000000440)=""/141, 0x8d}, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000001a00)=""/209, 0xd1}], 0x9, 0xc}}], 0x48}, 0x0) 1m28.30137883s ago: executing program 5 (id=1912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xfffffefd, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xd020, 0x50000}}}}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0xb, 0x100, 0x5, {0x944, 0x1, 0xffffd55b, 0x5}}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="21c54773"}, @chandef_params]}, 0x24}}, 0x0) 1m26.723877236s ago: executing program 5 (id=1917): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000200)={0x10, 0x3f8, 0x10, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x101, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) fanotify_init(0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000140)=0x2000) 1m23.593402992s ago: executing program 5 (id=1924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) (rerun: 32) r0 = socket$l2tp(0x2, 0x2, 0x73) clock_getres(0xfffffffffffffff1, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10) (async) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) fsopen(0x0, 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) (async) prctl$PR_MCE_KILL(0x4e, 0x0, 0x0) (async, rerun: 64) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$clear(0x7, r3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) (async, rerun: 64) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x4001, 0x0) (rerun: 64) fanotify_mark(0xffffffffffffffff, 0x0, 0x8000040, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x61, 0x40001002, r7, 0x0) 1m22.718329465s ago: executing program 5 (id=1929): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb085e73da1702004c000078ac1414000a010100441414088a986fc258449e629f050300000000000000000a0101010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1], 0x48}}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000640)=[{&(0x7f00000001c0)="c2f381729ebf07ffbf75508a5565b9d4772a26fbaa0d810bc1615d7768e5f68e12e78971cec2aa456a1dc79978988d6700d1e702a7cf56968fd3a6211a5ad8", 0x3f}, {&(0x7f0000001900)="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", 0xfc0}, {&(0x7f0000000480)="e62011fe20813f33737656651a64c3ad4930fcc2b7f7c03255b98b774c023ae401ffd49553b65c835fcca23f1c950250a4fb8d1efbecc3e902581825ffce78d37c83384aff18317d756a62f0b74bb50d37c5449dcf556116be3fa6f61391eab656dabfc0178914736a6efba705122bae8028f3e273194ebfa7523a8c4e34fd0cc2b9fa67e2cf0e0cbf70bfddac350603284690dae6140cfd9df10e73b68a31fc6b82fd7b9afa559a9d", 0xa9}, {&(0x7f0000000340)="077219b2c2bf07d369a47cb7359e58fafa4d6b903335b02a2155c256acb2a4f7ea488b986f516a858c83dea91c6a1c29f218a692be23abfedb6469f398cc5d", 0x3f}, {&(0x7f0000000540)="bcadf216e4f6fad6650497dd17407cfe1a14376506a7c373940eb151ae622550926dc82113f6faf632572190a44c0f6fefacd54b1b94a5bd3cc9eb14ddf2e563b92c6ea04585fed8de48e71ac2858a8791424d5e7fcad77b26113a7636c3b4821a9781704fed1da2cd89196d842a8f3df983dc55ed5b43d2fedd9b2273433a754f8881566d192a13d15897eeda7a6efce0d9e0dd8620b8718d241c8c81706466ac4409cd7b5ba7619d16da1b6c0bb359cf694a735092fe2ad41469a5c33f9533c3d5fe521b17c9e5b9a1397485791a18ef6bbb211612ecfe8ea3f1e75ec23c110873f8b636f829f38432a6e7513fc84c93b48f4d", 0xf4}], 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x0, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m22.024288239s ago: executing program 5 (id=1932): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x8, 0x0, 0x7f}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x10, 0x803, 0x0) 1m7.494270243s ago: executing program 34 (id=1932): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x8, 0x0, 0x7f}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) socket$netlink(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x10, 0x803, 0x0) 18.253042908s ago: executing program 4 (id=2053): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)='\x00\x00', 0x2, r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r7, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000400028616573290000000000000000000000000600000000000000000000001400f2d5e3de3d7b4cd07ec3ee777de774fc7987cca4198902025af938cc6aedb8ede70ca5eb45d55c127640b17d7bdbb3b0ec89520927711e98fa432a14fde9f1c554a2bb4a737407eac813c9240b37732c29d539"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 17.131433769s ago: executing program 6 (id=2056): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) epoll_create1(0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) 15.875899544s ago: executing program 6 (id=2057): unshare(0x28040680) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x264000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, r2, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf7}]}, 0x40}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(r0, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_io_uring_setup(0xd77, &(0x7f0000000100)={0x0, 0x17733, 0x80, 0x3, 0x350, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe) r11 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r11, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r8, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 13.976237985s ago: executing program 6 (id=2059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$inet6(0xa, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff3d, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) ftruncate(r7, 0x200) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x5, 0x0}, 0xfffffffffffffc20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, r0, 0x37, 0x202c, 0x0, @void, @void, @value=r12}, 0x20) 12.974037308s ago: executing program 6 (id=2060): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000880), 0x300, r3}, 0x38) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r5 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) recvfrom$unix(r5, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xffff0001, 0x4, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 10.454401115s ago: executing program 4 (id=2063): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 10.424268913s ago: executing program 7 (id=2064): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x6) accept4$x25(r1, 0x0, 0x0, 0x80800) 10.248249283s ago: executing program 4 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00', 0x8000}, 0x0, [0x0, 0x20, 0x4, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffdfffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x20, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x89, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x100000000000000, 0x80]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) socket$netlink(0x10, 0x3, 0x4) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x4, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 9.383359619s ago: executing program 2 (id=2067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4008040) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) open(&(0x7f0000000100)='.\x00', 0x591002, 0x40f) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x180d1}, 0x49010) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) 9.353166563s ago: executing program 3 (id=2068): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) 9.252890983s ago: executing program 7 (id=2069): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)) 8.215419806s ago: executing program 2 (id=2070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r4, 0x0, 0x33, r4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(0x0, 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 7.629100739s ago: executing program 7 (id=2071): syz_emit_ethernet(0x2e, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb81000000080045fc009c7a126e222eda7c1c000000000033907800000000000000010000000000089078685de20c6029ae2ef7d3ecfb1cf10ddf68599ce8b62b56654b9f335d620408a94b888dda6d8f308721c692b5"], 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003140)=@deltfilter={0x4640, 0x2d, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffef, 0xb}, {0xb, 0xffff}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_CHAIN={0x8, 0xb, 0x7edb}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @filter_kind_options=@f_fw={{0x7}, {0x4480, 0x2, [@TCA_FW_POLICE={0x89c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x81, 0x0, 0xd7, {0x1, 0x2, 0x8b16, 0x9, 0xd, 0xfffffffd}, {0x1, 0x0, 0x9, 0x83f, 0x0, 0x8}, 0x4, 0x3, 0x10000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0x80000000, 0x4, 0x9c, 0x8001, 0x6, 0x2, 0x2, 0x7, 0xff, 0x6, 0x4, 0x2, 0x10000, 0x399f, 0x5, 0x60000, 0x29a, 0x5, 0x10, 0x0, 0x0, 0xcbf, 0x10, 0x400, 0x7ff, 0x4, 0x7, 0x0, 0x1, 0x8, 0x2, 0x5, 0xf964, 0x0, 0x7, 0x2, 0x401, 0xd, 0xffff, 0x3, 0x800, 0x10, 0x1d42f747, 0x1, 0x82, 0xdd, 0x1ff, 0x3, 0x9, 0x256, 0x8, 0xa, 0x8, 0x200, 0x93, 0x7c, 0x0, 0x6, 0x0, 0x5, 0x0, 0x8, 0x9, 0x800, 0xfb24, 0xfffffff4, 0x1f6, 0x5, 0x6, 0x49b3, 0x10000, 0x6, 0xfffffff8, 0x1, 0x8, 0x9b, 0x8, 0x4, 0xa971, 0x7fffffff, 0x2, 0x80000000, 0x41b, 0x5, 0x98, 0xd8e, 0x8, 0x3, 0x6962e4af, 0x9, 0x2, 0x8001, 0x7, 0x8, 0xa6d0, 0x6, 0xc, 0x3, 0x7, 0x5, 0x100, 0x42, 0x5, 0x7f, 0x10, 0x30a, 0x81, 0x0, 0x7, 0xda, 0xef7c, 0x4, 0x8, 0x7, 0x4, 0xfd, 0x4b, 0x3, 0xf8d, 0x9, 0x0, 0x2, 0xb, 0x3ff, 0x4, 0x0, 0x3, 0x52b, 0x56, 0x4, 0xf6, 0x37, 0x6, 0x3, 0x401, 0x8000, 0x2, 0x3, 0x3, 0x6, 0x4, 0x5, 0x8, 0x12b, 0x5, 0x800, 0x400, 0xe, 0x433, 0x8, 0x1, 0x7fff, 0x7f, 0x6, 0x6c, 0x4, 0x2, 0xfffffffe, 0x8000, 0x6, 0xc, 0x9, 0xe0000000, 0x8, 0x4, 0x0, 0x0, 0x6, 0x5dc3, 0x2, 0x7fffffff, 0x2, 0x2f, 0x3, 0x4f2b497e, 0x9, 0x2, 0x0, 0x5, 0x6, 0x1, 0x0, 0x6, 0x10, 0x7, 0x0, 0x320, 0xcbe, 0x5b4, 0x3, 0x40, 0x0, 0x7fffffff, 0x204, 0x10000, 0x4, 0x90a, 0x20, 0xc, 0x4, 0x3, 0x4, 0x80000000, 0x0, 0x6c, 0x6, 0x248, 0x2, 0x1ff, 0x3ff, 0x9, 0x7f, 0x8, 0xfffff129, 0x4, 0x7, 0x3, 0x4, 0xc6, 0x2e, 0x0, 0x3ff, 0x1, 0x1, 0xffffffff, 0x1, 0x101, 0x9b, 0x10001, 0x40, 0x8f8, 0x100, 0x8000, 0xfffffeff, 0xe2, 0xbb06, 0x7ff, 0x9, 0x2, 0x0, 0x4ac, 0xff4f, 0x5, 0x9, 0xffff, 0x123, 0x0, 0x5, 0x400, 0x7, 0x8, 0x9, 0x4b, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x0, 0x6, 0xff3f, {0x0, 0x1, 0x1c, 0x9, 0xff, 0xb50}, {0x3, 0x0, 0xfffe, 0x0, 0x3, 0x5bf}, 0x1, 0x2c74, 0x600}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x401, 0x7f, 0x5, 0x2, 0x81, 0x2, 0x3, 0x8, 0x4, 0x0, 0x4, 0x401, 0x9, 0x3fd, 0x7, 0xfffffffd, 0x4, 0xfff, 0x81, 0xffffffff, 0x7, 0x5, 0xfffffffb, 0xf3, 0x40, 0x8, 0x0, 0xffffffff, 0x6, 0x2, 0xe, 0x6, 0x200, 0x3, 0xcb6d, 0x7, 0x4, 0x7, 0x0, 0xec7, 0x5, 0x2a6, 0xf017, 0xfffffffa, 0xfffffff8, 0xf16f, 0x2, 0x10, 0x6, 0x3, 0x6, 0x4, 0x8001, 0x40, 0xf64, 0x4, 0x2, 0x7, 0x0, 0x40, 0x5, 0x9, 0xf, 0x7, 0xe, 0x1, 0x0, 0x9, 0x5, 0x3c8d9a3f, 0x4, 0x5, 0x8, 0x80000001, 0x1, 0xffff0000, 0x10000, 0x2, 0x287e, 0xd4, 0x1, 0xef, 0xc, 0x2, 0x170, 0x1, 0x8, 0x1, 0x0, 0x0, 0x6, 0x7f, 0x9, 0x0, 0x9, 0xec44, 0xfff, 0x5, 0x8, 0x6, 0x170, 0x7f, 0x10, 0x9, 0x200, 0x4, 0x7, 0x9, 0x3, 0x4, 0x2, 0x2, 0x6, 0x5, 0x101, 0x8001, 0x81, 0x2, 0x17, 0x0, 0x6, 0x7fff, 0x80000000, 0x6, 0x1ff, 0x48f7, 0xee, 0x1, 0xf76, 0xffffffff, 0x8, 0x2, 0x0, 0x1, 0x3, 0x4, 0x2, 0x9, 0x7, 0xa, 0x0, 0x8, 0x2, 0x1, 0x0, 0x7, 0xfffffffd, 0x4, 0xe, 0x70e, 0xe, 0x6, 0x1, 0x9, 0x80000001, 0x1, 0x1, 0x2, 0x7, 0x4, 0xff, 0x7, 0x4, 0x2, 0xc9c, 0x9, 0x5, 0x3, 0xfffffff9, 0xe, 0x4, 0x0, 0x11f, 0x1, 0xb3, 0x2, 0x0, 0x5, 0xfffff801, 0x7fff, 0x200, 0xff41, 0x80000001, 0xacdf4b78, 0x8, 0x6, 0x4, 0x9, 0x7, 0xf, 0x5, 0x10000, 0x0, 0x7, 0x7, 0x5, 0xef81, 0x200, 0x7, 0x0, 0x9, 0x50, 0x5, 0x9, 0x9, 0x800, 0x1, 0x7fe4, 0x800, 0xffff, 0x7261, 0x2, 0x0, 0x6, 0x8001, 0x100, 0x100, 0x8, 0xfff, 0x9, 0xd, 0x9, 0x6, 0x3, 0x3, 0x6a9b, 0x54abae4, 0x10001, 0xe0000000, 0x8, 0xfffffffe, 0xffffffff, 0x100, 0x81, 0xa992, 0x6, 0x3, 0xfffffeff, 0x3, 0x35db, 0x5, 0x8, 0x6, 0x9, 0x8, 0x800, 0x2, 0x80000000, 0xb, 0x7fffffff, 0xf, 0x7a, 0x3, 0xfffe, 0x10]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}]}, @TCA_FW_ACT={0x2f6c, 0x4, [@m_police={0x26d4, 0x18, 0x0, 0x0, {{0xb}, {0x2680, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x7, 0x80000001, 0x1, 0x5, {0x8, 0x2, 0x4, 0x9, 0x7, 0x9}, {0x0, 0x1, 0x1, 0x1ff, 0x380, 0x9}, 0x7ff, 0x9, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x4e1, 0x88c1, 0x0, 0x0, 0x72e, 0x4, 0x2, 0x8, 0xfffffffd, 0xb, 0x3, 0x3, 0xff90, 0x9, 0xfffffff1, 0x27, 0x7fff, 0xff, 0x10000, 0x7, 0x1, 0x80, 0x3e9, 0x7, 0x3, 0x8, 0x1, 0x9, 0x80000001, 0x7, 0x5, 0x9, 0x4, 0x5b, 0x3, 0x6, 0x203e, 0x2, 0x0, 0xb, 0xaf, 0x8, 0x8, 0x7fffffff, 0x7f, 0x9, 0x3d44, 0x0, 0x5, 0xd00, 0x6, 0x10000, 0xeba, 0x5, 0x8001, 0xffff0ce2, 0x4, 0x7, 0x80, 0xffff, 0x0, 0x0, 0x7f, 0x3, 0x7, 0x0, 0x5, 0x8001, 0x3, 0xfb4, 0x100, 0x7, 0x2, 0x4, 0x4, 0xd69, 0x101, 0x9, 0x8, 0xd7cc7be6, 0x5, 0x2, 0xc, 0x8, 0xd03, 0x5, 0x8, 0x8192, 0x0, 0x7, 0x3, 0x8, 0x8, 0x8, 0xfff, 0x4, 0x4, 0x5, 0x6, 0x6, 0x800, 0x7c2, 0xc6c4, 0xe81, 0x9, 0x9, 0x3ff, 0x0, 0x6, 0x3, 0x4, 0xbc, 0x9, 0x46, 0x4, 0xffff793c, 0x81, 0x400, 0x5, 0x5, 0x6, 0x8a3, 0x7, 0x7a2, 0x7, 0x2, 0xe, 0xa7, 0xfffffff7, 0x81, 0x8000, 0x7fffffff, 0x8001, 0x101, 0x9, 0xfffffffe, 0x0, 0x6, 0x19df, 0x1000, 0x5, 0x3, 0x0, 0x10000, 0xdc0, 0x4, 0xffff0000, 0xfffffffb, 0x7, 0xfffffff6, 0x4a58, 0x2, 0x1, 0x7fff, 0x1ff, 0x3, 0x4, 0x40, 0x0, 0x1, 0x9, 0x400040, 0x4, 0x8, 0x0, 0x9, 0x79, 0x0, 0x8b7, 0x0, 0x6, 0x3, 0x8, 0xea, 0x80000001, 0x8, 0x7fffffff, 0x5, 0x7fff, 0x9, 0xe20, 0x3, 0x5, 0x2, 0x5, 0x3, 0x8, 0x2, 0x8, 0x8, 0x7, 0x101, 0x2, 0xfffffff9, 0x7, 0x7, 0x9b, 0x401, 0x677759ba, 0x9, 0x120000, 0x4, 0x3, 0x57c8, 0x400, 0x0, 0x2ba77eb2, 0xc560, 0x3, 0xfffffffc, 0x6, 0x65ef, 0x1ff, 0x0, 0xd, 0x4, 0x4000000, 0x6, 0x7, 0x80000000, 0x3, 0x5, 0x7, 0x846, 0x65, 0x2, 0x6, 0x2, 0x5, 0x7, 0x1, 0xffff, 0x81, 0x6, 0xb2, 0xc, 0x100, 0xffffffff, 0xf, 0x2, 0xee2, 0x0, 0xffffc3a3, 0x7, 0x7, 0x5, 0xf, 0x6, 0x3, 0x0, 0x9, 0x80000000, 0x0, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6c0d}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7ea, 0x400, 0xfffffffe, {0x3, 0x1, 0xb8db, 0xb, 0xa1, 0x10}, {0x0, 0x2, 0x8001, 0x4, 0x7, 0xfa4e}, 0x9, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x100, 0x0, 0x831, {0xff, 0x0, 0xe, 0x6, 0x3ff, 0x7}, {0x0, 0x1, 0x5, 0x9, 0x9a, 0x1}, 0xcd9, 0x1000, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x100, 0x0, 0xa, 0x7, 0xc1f, 0x6, 0x6, 0x8, 0xffff, 0x3, 0x8, 0x8, 0xff, 0x7, 0x5, 0xffffffff, 0x8, 0x9, 0x9, 0x2189, 0x0, 0x2, 0x8, 0x2, 0xffffffff, 0xfffffffc, 0x100, 0x8, 0x2, 0x4, 0x81, 0xce0, 0x5, 0xfffffff8, 0x3, 0x80000001, 0x8, 0xfffffffe, 0x7, 0x3, 0x5, 0x2, 0x8, 0x4, 0x1, 0x5, 0x8001, 0x6, 0x9, 0x4, 0x1000, 0x7, 0x3, 0x81, 0x1ff, 0x8, 0x9, 0x4a7d9afc, 0x2, 0x4, 0xe, 0x1ff, 0x10, 0xcdca, 0x8, 0x9, 0x9, 0x9, 0x5, 0x3, 0x9, 0x5, 0x4, 0xfff, 0x400, 0x3, 0x3, 0x1, 0xd0, 0x401, 0x9, 0x1000, 0x10, 0x6a, 0x4, 0x7, 0x2, 0x7, 0x7fff, 0x100, 0x2, 0x5, 0x1, 0x8000000, 0x2, 0x3e7, 0x6, 0x90, 0xfffffff8, 0x6, 0x8, 0x80000001, 0xb7200000, 0x7f, 0x400, 0xfc, 0xfffffffa, 0x40, 0x9, 0x9, 0x9, 0x80000000, 0x7, 0x2, 0x8, 0x3ff, 0x8, 0x4, 0x7, 0x7ff, 0x4, 0x4, 0xfffff838, 0x7fffffff, 0x7ff, 0x9, 0x1, 0xbd, 0x1, 0x2, 0x4, 0x9, 0x1, 0x1, 0x1, 0x0, 0x47e5b218, 0x7, 0x6, 0x4, 0x8000, 0x10001, 0x7fff, 0xffffffff, 0x4, 0xa, 0x8, 0x2, 0x9, 0x80000000, 0x3, 0x7f, 0x8c, 0x4c1, 0x94, 0x2, 0x80000000, 0x6, 0xfffffffe, 0x7, 0x4, 0x6, 0x6, 0xffff, 0x6c, 0x6, 0x3, 0x10, 0x75, 0x8, 0x4, 0x8, 0x0, 0xfdf, 0x5, 0x3, 0x2, 0x8, 0x5, 0x7fffffff, 0x80, 0xfffffff0, 0xfd, 0xfffffff8, 0x8, 0x3, 0x2, 0xfff, 0x8, 0x6, 0x3, 0x140, 0x9, 0x800, 0x4, 0x8, 0x0, 0xfffffff9, 0x7a2f, 0x8, 0x80, 0x3, 0x800, 0xfffffffa, 0x6, 0x3ff, 0x2, 0x5, 0x4, 0x9, 0x5, 0x1, 0x2, 0xfffffff7, 0x8, 0xfffffffe, 0x3, 0xfffffffa, 0x8, 0x9, 0x8, 0x5, 0xa, 0x5b4, 0x10002, 0x80, 0x6, 0x6, 0x2, 0x0, 0x3, 0x0, 0xe, 0xa8, 0xfff, 0x0, 0x3, 0x2fb5, 0x3, 0x8e31, 0x1, 0x7, 0x0, 0x401, 0xb4, 0x10000, 0xe, 0x3, 0xed2, 0x0, 0x7, 0x8, 0x6, 0x8000, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcd9f, 0xad, 0x81, 0x2, 0x4, 0x0, 0x8, 0x1, 0x2, 0xa87b, 0x6, 0x8001, 0x9, 0x8, 0xfffffffb, 0x9, 0x9, 0x7ff, 0x7f, 0xa5cd, 0x7ff, 0x0, 0x0, 0x5, 0x6, 0x6, 0x7, 0xeab8, 0x3, 0x0, 0x7f, 0x3, 0x9, 0x100, 0x5, 0xffff49f6, 0x8, 0x2, 0x64, 0x7, 0x0, 0x8, 0x81, 0xe, 0xf122, 0x7, 0xa203, 0x7a73, 0x3, 0x3, 0x1f57, 0x1, 0x14, 0x0, 0x2, 0xfffffffe, 0x9, 0x7, 0x5, 0xfff, 0x87d2, 0x2, 0x9, 0xea, 0x7fffffff, 0x933, 0x2, 0xb4, 0x1a, 0x4, 0x10000, 0x81, 0xe, 0x0, 0xfff, 0x23, 0x10, 0x8b4, 0x1, 0x4, 0x0, 0x7f, 0x1, 0x0, 0x81, 0xffff, 0x6a09, 0x5, 0x9, 0x0, 0x892d, 0x9f, 0x9, 0x80, 0x400, 0x0, 0x0, 0x10001, 0xd943, 0x7fffffff, 0x8c2, 0x9, 0xfff, 0xc8fc, 0x1, 0x0, 0x7, 0x9, 0x2d3d, 0x5, 0x5, 0x4, 0xa, 0xa1, 0x2, 0x6, 0x6, 0x0, 0x10, 0x0, 0x7ffe92ff, 0x7, 0x9d, 0x702e, 0x2, 0x3d04, 0x2, 0x2, 0x6, 0x5, 0x4, 0x200, 0xfffffffa, 0x2, 0x6, 0x3, 0x3, 0xffffffff, 0x0, 0x6, 0x6, 0x5, 0x5, 0xfffffffb, 0x5, 0x3, 0x6, 0x6, 0x5, 0x7, 0x3b5, 0x2, 0x9, 0x5, 0x9, 0x9, 0xf, 0x9, 0x7, 0xc6, 0x9, 0x9, 0x0, 0x6, 0x0, 0x2, 0x1, 0x850, 0x6, 0x3a, 0x400, 0x1c000000, 0x0, 0x3, 0x10000, 0x2, 0x73, 0xd, 0x401, 0x9, 0xafaf, 0x7f, 0x8, 0x6, 0x59d, 0x0, 0xc, 0x80000001, 0x0, 0x8, 0xb16d, 0x3, 0x1ea83dfb, 0x5, 0xffffffff, 0x9, 0x6, 0x4, 0x4, 0x7, 0x59a7, 0x9, 0x80, 0x770, 0x6047, 0x3, 0x9, 0x4, 0x8, 0xff, 0x6, 0x4, 0x7, 0x7f, 0x4, 0x5, 0x8, 0x7, 0x800, 0x6, 0xffffffe4, 0x355b23fc, 0x7ff, 0x4, 0xfffffff8, 0x0, 0x3, 0x8, 0x1800, 0x3, 0x4, 0x252239b4, 0x6, 0xae91, 0xb, 0x101, 0x8, 0x10, 0x3, 0x6efe4ada, 0x0, 0x8, 0x90, 0x10, 0x6, 0x6, 0x6, 0x9, 0x10001, 0x9, 0xb, 0x81, 0x7f, 0xffffba9e, 0x6, 0xffffffff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc00000000000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb489}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc00000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3f, 0xfffffffffffffff9, 0x1, 0x4, 0x5, {0x5, 0x1, 0xe, 0x4, 0x8, 0xf33}, {0x0, 0x1, 0x100, 0x400, 0xe, 0x4}, 0x0, 0x7fff, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x58, 0xc9, 0x5, 0x2, 0x1, 0xfffffff9, 0x7fff, 0x0, 0x7, 0x1, 0xfffffff8, 0x1, 0xf, 0xc, 0x1, 0x48e1, 0x0, 0x4, 0x2, 0x8, 0xe0, 0x1, 0x27c8, 0x8, 0x7, 0x872, 0x1, 0x7, 0xc68c, 0x3, 0x6, 0x7, 0xffffff01, 0x9, 0x100, 0x0, 0x5, 0x3, 0x1000, 0x1800, 0xd9c, 0x0, 0x5, 0x9, 0x6, 0x9, 0x3, 0x5, 0xffffbf0b, 0xd7, 0x4, 0x80000001, 0x787, 0x7, 0x1, 0x8001, 0x392, 0x8, 0x1000, 0x8ed4, 0x4, 0x0, 0x2, 0x81, 0x80, 0x5, 0x6, 0x7fff, 0x800, 0x0, 0x8, 0x2, 0x7, 0x1, 0x4, 0x200, 0x2, 0x31, 0x6, 0xffff, 0x0, 0x100, 0xa0, 0x10001, 0xf, 0xffffffff, 0x7fff, 0x9, 0x5, 0xe, 0x9, 0x867, 0x101, 0x8, 0x2, 0x7fff, 0x5, 0x2, 0x7f, 0x80, 0x8, 0x4, 0x9, 0x7f, 0x81, 0x8, 0x7, 0x0, 0x0, 0xfffffff7, 0xa, 0x8001, 0x2, 0x0, 0x2, 0x8b50, 0x6, 0xfffffff9, 0x8, 0xfffffff4, 0x4, 0x4, 0x1, 0x9, 0xb5, 0xfffffffd, 0x9, 0x42, 0x5, 0x8, 0x101, 0x1000, 0x4, 0x4, 0x40, 0x2, 0x2, 0x0, 0xfff, 0x1, 0x7c, 0x92, 0x0, 0x3, 0xf, 0x1, 0x9, 0x80, 0x7ff, 0x400, 0x1, 0x9, 0x1, 0x9, 0xd, 0xb1ca, 0x10000, 0x101, 0x6, 0x4e, 0x7, 0x9, 0x417, 0x350, 0x0, 0x6, 0x6, 0x423, 0xf62, 0x4, 0x1, 0x5, 0x10, 0x6, 0x6, 0x5, 0x68, 0x13, 0x50, 0x4a3, 0x4, 0x3, 0x5, 0x5, 0x0, 0x5, 0x1fc000, 0x2, 0x401, 0x1, 0xd8, 0x8, 0xbdb, 0x1ff, 0xfff, 0x8, 0x2, 0x9, 0x6d, 0xd, 0xffffffff, 0x8b54, 0x9, 0x8, 0x2, 0x81, 0xe, 0x7, 0x6, 0xdc, 0xce4, 0x4, 0x7fff, 0x7fff, 0xff, 0x8001, 0x5, 0x7, 0x101, 0x8, 0x7fffffff, 0x2, 0x200, 0x7fffffff, 0x81, 0x5b6, 0x5, 0x80000000, 0x9, 0x153, 0x2293, 0x7, 0x3, 0xb, 0xec, 0x5, 0x4, 0x2, 0x9, 0x8, 0x81, 0x8, 0xa, 0x6, 0xc, 0x0, 0x10001, 0x6, 0x5, 0xfffffffe, 0x700b, 0x1, 0x924, 0xc63, 0x6, 0x7fff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x7fc, 0x9, 0x6, 0x3, 0x8, 0x3973, 0x4, 0x400, 0x10001, 0xe658, 0x6, 0x0, 0x9ed, 0x6, 0x86dd, 0x7, 0x4, 0x7d51, 0x9, 0x9, 0x7, 0xf, 0xffffffd2, 0xa936, 0x0, 0xf, 0x5, 0x5, 0x6, 0xb, 0x0, 0x5, 0x1, 0x8, 0xfffffff9, 0xf7, 0x2, 0x5, 0x6, 0x4, 0x4, 0x2d27, 0x9, 0x6, 0x6, 0x2, 0x6, 0x4, 0x6, 0xffffff7f, 0x6, 0xffffff1c, 0x44ca, 0x3, 0x1, 0x8, 0xc3, 0x7, 0x5, 0xab, 0x2, 0x3, 0x40, 0x4, 0x1, 0xf37, 0x5, 0x1000, 0x7, 0x3, 0x8, 0xfffffffc, 0xc2, 0x1ff, 0xffff86cb, 0x9, 0x0, 0x8, 0x6, 0x9c447b0, 0x2, 0x401, 0x6635, 0x1, 0xed0, 0x10, 0x6, 0x6, 0x6, 0x7, 0x100, 0x9, 0x6, 0x9, 0x6, 0xffff, 0x88, 0x7, 0x9f, 0x3, 0x3, 0x1, 0x5, 0xbcd, 0x1, 0xb, 0x9, 0x9, 0x3, 0x5, 0x0, 0x8, 0xd, 0xec, 0x8, 0xff, 0x2d1, 0x1, 0x7, 0x10000, 0xa394, 0x7, 0x0, 0x40, 0x8, 0xd, 0x8, 0x9d, 0x80000000, 0xc4bc, 0xd6d3, 0xfffffffa, 0x9976, 0xbdd1, 0x6, 0x0, 0xd, 0x0, 0x10, 0x7, 0x9, 0x2, 0x9, 0x7ff, 0x5, 0x7, 0x4c, 0x6, 0x5, 0x100, 0x0, 0x0, 0x2, 0xffff23e8, 0x5, 0x2, 0x1, 0x2, 0xfffffe00, 0x2, 0x5, 0x3d244, 0xe6a, 0x8000, 0x9a, 0x200, 0x3, 0x1, 0x40, 0x6, 0x7fffffff, 0x8, 0x0, 0x7, 0x0, 0x6, 0x3, 0x2, 0xe5e, 0x2b, 0x35, 0x5, 0x8, 0x1, 0x2, 0x60000, 0xfffffffa, 0x200, 0x80, 0x10000, 0x1000, 0x7fff, 0x3, 0x5, 0x3, 0x5, 0x1, 0x9ee3, 0x2, 0x200, 0x4, 0x6, 0x0, 0x1, 0x8, 0x9, 0x2, 0x9f, 0xcd, 0x2, 0xf, 0xfffffffc, 0xb1, 0x7d64404b, 0x4, 0x6, 0x9, 0x9, 0x4, 0x2, 0x2, 0x2, 0x400, 0x800, 0x0, 0xe, 0xffffffff, 0x6, 0x1, 0x66, 0x9, 0x7e24, 0x7, 0x7, 0x3, 0xf8ca, 0x40, 0x5, 0x7fffffff, 0x10, 0x9, 0x999, 0x5, 0x36e, 0x10001, 0x8, 0x4, 0x5, 0x8, 0x8, 0x2, 0x3, 0x6b, 0xc3, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fffffff, 0x8, 0x3, 0x0, 0x100, {0x3, 0x2, 0x6, 0x401, 0x4, 0x6}, {0x0, 0x1, 0xfff8, 0xff26, 0x40, 0x9}, 0x709, 0x5, 0x7fff}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xd, 0x8000004, 0x3ff, 0x2, 0x5, 0xb, 0x1, 0x1000, 0x400004, 0x8, 0x10000, 0x4, 0x7616, 0x4, 0xd, 0x8001, 0x7, 0x2, 0x9, 0x5, 0xf, 0x2, 0x0, 0x11, 0x2, 0x8, 0x100, 0x9, 0x3, 0x3, 0x1, 0xd398, 0x0, 0x6, 0x6, 0x4, 0x4, 0x5, 0x81, 0x15ca0d3b, 0x22, 0x5, 0xffff, 0x5, 0x55ea, 0x7, 0x100, 0x5, 0x3, 0x5, 0x8001, 0x5, 0x4, 0x8, 0x3, 0xf, 0x5, 0x1, 0x3, 0x8, 0xffffffff, 0x4, 0x7fff, 0xfff, 0x401, 0x447151f6, 0x8, 0x3, 0x7, 0x0, 0x1000, 0x8, 0x800, 0x8001, 0xe, 0x9, 0x3, 0x3, 0x992, 0x2, 0xc10, 0x0, 0x2, 0x4, 0x0, 0x9, 0x3, 0x40, 0x1, 0x8, 0xa03, 0x9, 0x8, 0x5b7, 0x8, 0x4, 0x0, 0xd, 0x8d, 0x5, 0x3, 0x6, 0x6, 0x0, 0x0, 0x7fffffff, 0x6560, 0x3, 0xffff, 0xffffff81, 0x200, 0x3, 0xc, 0x79700, 0x2, 0x7, 0x73, 0x6, 0x9, 0x10001, 0x6, 0x0, 0x358876c0, 0x8000, 0xb, 0xffffffff, 0x10000, 0x7, 0x39b, 0x7, 0x7, 0x15, 0xdb1b, 0x2, 0x7ff, 0xf, 0x10, 0x0, 0xfffffff8, 0x5, 0x0, 0x1, 0x10, 0x8000, 0x3ff, 0xeda, 0x40, 0x4, 0x0, 0x0, 0xffffffff, 0x7, 0x9, 0x0, 0x4c, 0xcc1, 0x7fffffff, 0x81, 0x8, 0x5, 0x2, 0x5f, 0x4, 0x80000000, 0xff, 0x6, 0x10001, 0x5, 0x8001, 0x4e, 0x2, 0x8, 0x0, 0x4, 0x3, 0x81, 0x1, 0x0, 0x0, 0x6, 0x800, 0xd773, 0x3ff, 0x4, 0x8, 0x8001, 0x2, 0x60e, 0x90, 0x9, 0x3, 0xfffffffe, 0x2, 0x1, 0xc8e0, 0x8, 0x24, 0x8001, 0x7, 0x80000000, 0x6, 0x5, 0x8, 0x8, 0x7, 0x3, 0x687bf089, 0x7ff, 0x7fffffff, 0x2, 0x3, 0x5fd, 0xb, 0x4, 0xfffffffc, 0x80, 0x3, 0x0, 0x80, 0x800, 0xfffffffd, 0x2d9d3c6c, 0x4, 0x7fffffff, 0xf12, 0xd93, 0x24, 0x6, 0x8, 0xadd, 0x2, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x1, 0x8, 0x401, 0x7, 0x7, 0xf4a4, 0x1, 0x1, 0x80000000, 0x7fff, 0x2, 0x5, 0x1, 0x5, 0x72, 0x6, 0x4, 0x9df]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf159, 0x0, 0x8, 0x7, 0xfffffffe, {0x3, 0x1, 0x6, 0x1, 0x7, 0x7}, {0x0, 0x2, 0x5, 0x7f, 0x400, 0x100}, 0x0, 0x1, 0x2}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x42, 0x2, 0x0, 0x4, 0x400, 0x9, 0x5, 0xd4, 0x7cd, 0x4fd, 0xff, 0x1, 0x8, 0xed1e, 0x8, 0x6, 0x9, 0xffffffff, 0x10000, 0x7, 0x9, 0x9, 0x3, 0x8, 0xfffffffd, 0x10001, 0x800, 0x9, 0x3, 0x4eb, 0xfffffffc, 0x0, 0x7, 0x5e, 0x7, 0x842f, 0x1000, 0xfffffff9, 0x1, 0x0, 0x3, 0x1, 0x10000, 0x8, 0x9, 0x2895, 0x5, 0x8, 0x2, 0x9, 0x8001, 0x4, 0x4, 0x806, 0x7, 0x500, 0x6, 0x6, 0x5, 0xf54, 0x1e18c0, 0x4, 0xa, 0xffffffff, 0x2, 0x142edd8c, 0x5, 0xfffffffb, 0x7ff, 0xbc2, 0x4, 0xa000, 0x2, 0x9, 0x200, 0xceb, 0x1, 0x3, 0x8, 0xfffffff8, 0xfffffff7, 0x25, 0x5, 0x9, 0x9, 0x401, 0x9, 0xe9d, 0x4, 0x10001, 0x40, 0x8, 0x7da3, 0x0, 0x80000001, 0x7fe, 0x401, 0x1, 0x2, 0x7fff, 0x80000000, 0x8000, 0x6, 0x1, 0x2, 0x7, 0x8, 0x7fff, 0x3, 0x9, 0x8, 0x8, 0x4a8d, 0x17, 0x7, 0xffffff81, 0x8, 0x8000, 0x5, 0x8, 0x7, 0x8, 0x0, 0x3, 0xfffffff5, 0xd72d, 0x1ff, 0x3, 0x2, 0x80000001, 0x3f, 0xae4, 0x80000000, 0x2, 0x4, 0x6, 0x80, 0x2b6, 0x9, 0x33c, 0x8, 0x5, 0x2, 0x300, 0x7f, 0xfffffff7, 0x8bb55d7, 0x5, 0x5, 0x1ff, 0x1, 0x4, 0x7, 0x180, 0x200, 0x80000001, 0x8, 0xcc7, 0xc, 0x4, 0x7b5e, 0x3, 0x9, 0x4, 0x5, 0x7f, 0x4, 0xecef, 0x8, 0x34cc8bf6, 0x7, 0x9, 0x6, 0xa, 0x1, 0x8, 0x2, 0xffffffff, 0x2, 0xd7, 0x3363, 0xffff8001, 0x80, 0x5, 0x5, 0xef19, 0x8, 0x6, 0x8, 0x9, 0xa, 0x7, 0x6b3, 0x2, 0x7fff, 0x8, 0x7, 0x400, 0x8, 0x200, 0x6, 0xd, 0xff, 0x2, 0xf, 0x101, 0x1, 0x7fff, 0x3, 0x1000, 0x2, 0xfa, 0x8, 0x6, 0x2, 0x4, 0x10001, 0x40, 0x5, 0x7, 0x6, 0xffff, 0xffffffff, 0x40, 0x3, 0x1f1, 0x7, 0x3ea16671, 0x8, 0x2, 0x8113, 0x4, 0x33a2, 0xb, 0x0, 0x8, 0x2, 0x9, 0x7d4010ed, 0x54ac0000, 0xad17, 0x6, 0x8, 0x7, 0x9, 0x4, 0x7, 0x6, 0xe, 0x1, 0x7fff, 0x4, 0xff, 0x7, 0x29]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff8, 0x10000000, 0xf3a, 0x1, 0x0, {0xf9, 0x0, 0xfff, 0x1, 0x3ff, 0x9}, {0xd, 0x0, 0xf, 0x78ce, 0x4, 0x7}, 0x1, 0x1, 0x80}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x21, 0x9, 0x7f, 0x1ff, 0x6, 0x1, 0x2, 0x7, 0x3009, 0x4, 0x10000, 0x6, 0x4cc0, 0x5cb, 0x4, 0x3ff, 0x200, 0x3ff, 0x2, 0xff, 0x8, 0x5, 0x6, 0x8, 0xe, 0xfffffff8, 0x16d, 0x2, 0xd, 0x8, 0x7ff, 0x8, 0x6, 0x5, 0xfffff933, 0x1, 0x1, 0x6, 0x7fffffff, 0x4, 0x2, 0x3, 0x9, 0x6a, 0x7, 0x2, 0x1, 0x1ff, 0x4, 0x5, 0x8, 0x208b5d89, 0x4, 0x6, 0x7, 0x3, 0x1, 0xfffffffe, 0xa8b3, 0x8, 0x81, 0x4, 0x10, 0xf9, 0x7, 0x9, 0x1, 0x5, 0x9, 0xfffffffd, 0x4d, 0x0, 0xd93, 0x1000, 0x3, 0x472, 0x0, 0x9, 0x8, 0x80000000, 0x4, 0x5, 0xf60c, 0x8, 0x6, 0x6, 0x3, 0x6, 0x4, 0xe, 0x6, 0xffffffff, 0x83a, 0x1, 0x8000, 0x3, 0x3ff, 0x1, 0x6, 0x81, 0x11, 0x9, 0x40, 0x401, 0x107, 0x3, 0x4, 0x80, 0xd, 0x2, 0xc8, 0x20, 0x9, 0x9, 0xfffffff8, 0x3ea, 0xc, 0x6, 0x5, 0x8, 0x8001, 0x4, 0x7, 0x7, 0xfff, 0x3, 0x4, 0x4, 0x8, 0x111, 0xa46, 0x3, 0x9, 0x7, 0x0, 0x9, 0xd, 0x8, 0x7fff, 0x3, 0xff6, 0x1, 0x20, 0xde, 0x400, 0x100, 0x3, 0xed92ae10, 0x2, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x80000000, 0x4, 0x8d, 0x9, 0xffff, 0x80000001, 0x1, 0x7fffffff, 0x5, 0x1, 0x3, 0x10001, 0x3, 0x1256, 0x9, 0xfffffffa, 0x5fd, 0xc1d3, 0xfff, 0x80000000, 0x80000000, 0x72, 0x5, 0x66d8, 0x7, 0x4, 0x6, 0x7, 0xf, 0x8a64, 0x9, 0x5a, 0x7, 0x3, 0x9d980000, 0x1, 0x1ff, 0x63f4, 0x5, 0x9, 0x6, 0x5297, 0x9, 0x84, 0x0, 0x800, 0x5, 0x1, 0x1, 0x1, 0x200, 0x8, 0xba87, 0x6, 0x3, 0x1, 0x5d, 0x10001, 0xfff, 0xf, 0x22, 0x5, 0x0, 0xc8cc, 0x6, 0xa, 0x2, 0x9, 0x6, 0x800, 0xfffffffc, 0x7, 0x400, 0x0, 0x5, 0x3ff, 0x1, 0xffff, 0x1, 0x40, 0x6, 0x5, 0x0, 0x7, 0x6, 0x4, 0x6, 0x0, 0x2, 0x4, 0x7ff, 0x40, 0x80, 0xffff, 0xae, 0x7, 0xc5, 0x3, 0x7fffffff, 0x0, 0x3ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x80000000, 0x8, 0xd, 0x5, 0x80000, 0x7ba, 0x6, 0x4, 0x8c, 0x2, 0x3, 0x2, 0x5, 0x8, 0xced, 0x9, 0xac3, 0x4, 0x2, 0x9, 0x4, 0x2, 0x3, 0x7, 0x6, 0x73, 0x7, 0x7, 0x3, 0x0, 0x2, 0x4, 0x10001, 0x3, 0x2, 0x5, 0x5d, 0x4, 0x5, 0x1, 0x922, 0xffff467f, 0xd02d, 0x5, 0x4, 0xf9bb, 0x7, 0x8, 0x200009, 0x1, 0x1, 0xa, 0x3, 0x401, 0x9, 0x0, 0x59900000, 0x200, 0x2fcc, 0xa06, 0x0, 0x1000, 0x2, 0x4, 0x0, 0x9, 0x0, 0x292, 0x817f, 0x800, 0x7fff, 0x9, 0x6, 0x8001, 0xa, 0x401, 0x4, 0x0, 0x9, 0x81, 0xc00000, 0xfffffffc, 0x8, 0x8, 0x4, 0x7, 0x0, 0x9, 0x779, 0x10, 0x81, 0xc, 0xe, 0x4, 0x9, 0x6, 0x7, 0x2, 0x2, 0x3, 0x2, 0x0, 0x7, 0x8000, 0x81, 0x7fff, 0x5, 0x5c65acf6, 0x8, 0x9, 0x84, 0x100, 0x3, 0xfff, 0x3, 0x2, 0xb, 0xd4b, 0x9, 0x6c000, 0x3, 0x7f, 0x3, 0x0, 0x80, 0x3, 0x8001, 0x80000000, 0x1, 0x180, 0xe000000, 0x8, 0x1, 0x3c, 0x6, 0x3, 0x30, 0x2, 0x2bed, 0xfff, 0xa, 0x80000000, 0x5, 0x8000, 0x7fffffff, 0x6, 0x400, 0x3ff, 0x6, 0x0, 0x8, 0x8, 0x7, 0xfffffff8, 0x3, 0xff, 0x0, 0x6, 0x9, 0x9, 0x400, 0x78e7, 0x5, 0x5, 0xffffffff, 0x6, 0x2, 0x7, 0x1, 0x0, 0x1, 0x8, 0x1, 0xd, 0x5, 0x7, 0x7b3, 0x76, 0x9, 0x20, 0x85, 0x5, 0x3, 0x7, 0x6, 0x4, 0x2, 0x8, 0x5a42, 0x56, 0xffff, 0x7, 0x6, 0x81, 0x8, 0x0, 0x7, 0x6, 0x0, 0x7, 0xee58, 0x3ff, 0x81, 0x0, 0x7, 0x7, 0xfffff0f8, 0x3, 0xe80, 0x1, 0x4, 0xe, 0x2, 0x2, 0x6, 0x68a5, 0xfffffffa, 0x9, 0x4, 0x2, 0x2, 0xa9e, 0x2, 0x7, 0x3, 0x6, 0x2, 0x7, 0x6, 0x8, 0x6, 0xfffffffb, 0x72, 0x3, 0xe, 0x7, 0x9, 0x7, 0x0, 0x0, 0x3, 0x7, 0x68, 0x3, 0x1, 0xe07, 0x2, 0x4, 0x1d22, 0x8ba, 0x3, 0x9, 0x3, 0x1, 0x3]}]]}, {0x2b, 0x6, "e1c39f31afa5ee3b2b8d2ce347e1a57a187606d47d34b264b1e01e5d7bbe97171ad32650880db7"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x148, 0x17, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x19}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf6}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9200}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x7fff, 0x8, 0x8, 0x7}, 0x3}}]}, {0xdf, 0x6, "174bfba4ccedef6c00237094d60b09046b5c8f924c1e273a6354b461bebbdb42f87d9b7c23bf6dba45a8a8491eeee2a59305bd28c4eeeafaf42c6fb136cc4af623d96d1f27de766fbd847f5546e18112994004c8c4db3973134202331eaae7f156ec78f6e599a3f251fd07c07900598c89ca693440475549638e7e2054991b46627b005b0a241539b806c3303fb7e39ad9cc9ebaa53ba7f5fbec5a5f5ec54d7935b92e5eb0ba150b85d13f866f27f28c854dcc072d2022ad27ad02b4b9db1aba02ac4eeb1965292b7256150147c7d120ff4e40d18124776e86b8df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x150, 0x1a, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x8, 0x6, 0x200, 0x10}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff1}}]}, {0xe9, 0x6, "5bb629ed6aff22f3d3a803deba2c495c08f079382f0cef80bd2cbc28e117634a2558bd6e1bf9b17f23aa81f766651ecda9277296d56b4d7d4c87954bf65a97081a64c61ee1b39ff7416b91bb2957fa4048ac746d906d11b546cb6d7bd14f842b281d0f438788920431a81257cb2cb0d5e478590dca60f1e779794649700c17d12e774d9b4e54b2b2f2b1a081f22c1dd0f9eabbfea2e42fe246b4b9307463d24a6630557fa78319c11acb370d267e8791dfd9b5e0d0852b7872f1390346ff3a7866abc6a121bb7a0e1f801fa34c53da3cddb8f56071998a42a1a3f3193a206b940f08ae3238"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x2b0, 0x1e, 0x0, 0x0, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xef36, 0xc, 0x20000000, 0x4, 0x400}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x20000000, 0x4c, 0x9}, @empty, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0x10000000, 0x34832724, 0x8}, @remote, @private=0xa010102, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x10000, 0x3, 0x0, 0xbbe}, @local, @remote, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x200, 0x5, 0x8001, 0xa9}, @remote, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe87, 0x6, 0x5, 0x4, 0x7}, @dev={0xac, 0x14, 0x14, 0x6}, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0xaea3, 0x6, 0x7, 0x8}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x8, 0x5, 0xfffffffb}, @broadcast, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0xd, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x9, 0xffffffffffffffff, 0x3800, 0x1ff}, @rand_addr=0x64010101, @rand_addr=0x64010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffffff9, 0xffffffffffffffff, 0x101, 0x7}, @broadcast, @remote}}]}, {0xce, 0x6, "3b5322effd2fc5eab947d52cdc8c8a75b0074e35009e13c3028d426934f16fcb4eff154644d7d3be873dcd061753a099a079b867988c3859ecfa91f933acc16f6a2ca97b47e082a46820d0ccd7e4a3f575494a1ea4834717d2d278638b201446bb20909a8d7da44d8df8f409aaf63ac1e4836850dc2490aa1613709d30775d641ed9c08d2cbade167037a31c9b63a54116678f547ee1fd3d6d12c3e428ea945e6f1a1ea01fcdce77da37de838fd8c499b54b58152707425cf797aa2bcb6a06cd18e42868d9d28cf1ffb3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x140, 0xb, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x10}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8267, 0x4f, 0x3, 0x7, 0x7f}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100, 0x4, 0x3, 0xffffffff, 0x80000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}]}, {0xa4, 0x6, "816c83cf23aa5e56915f2040644894681f835b926321c29534c63698dd499676420bf35777f1f0ff24a470d1b1ef40b268f1dca0bfe20c086aed2c8c2ab850f0c4f37af8727c5fe82846cfe1879772df8e8d4cdc21d0b8abc257ee807ba4422a81044218da7b84e71b778c80fa1dce72d0056b2c21283a13ae71f7b150f3c6e1f6ddd4a430ba822b81552d4b9154f762986305dbb3bae90feea719dc6305e41b"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0x20c, 0xf, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x6, 0x0, 0xff, 0x80000000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x5, 0x0, 0x7fffffff, 0x40}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x10, 0xffffffffffffffff, 0xeaf, 0x362}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x1, 0x0, 0x80000001, 0xe}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x6, 0x6, 0x0, 0x3}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x607, 0x8db4, 0x4, 0x7c0, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff8, 0x9, 0x5, 0x8, 0x47}, 0x2}}]}, {0xfd, 0x6, "26645b48876c657a2d93044117b2544153fe02cb9ad05d7e5156f5e19ff919e6e1d4ccb42a0fb9ad9e88ff43378f81819bae69211af4af0b4945dd1acab4d227c67633f54e94a099499909c30b9531806c0ac503a3cc668702ea5fbafa610ab82f430626554383e3b4a5ea2394655d9156fe326f423820e0a1d3e9ce38e6a5de94d887c1a8a13bfd693bd65a393d82c6f0fe4fd4401c7e6cf32f31b8279dae20e6787e3c3ea834dbfc4534fce0f6de6bc427137a1be435db3dcd112154fcba446136b1e58334f335b6bd3e38607089ac773431c1cfe0ad3c38ee517a07e27e414cb0b76ca3db091862c2705d8e41e91b827103c1fe65c6c826"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FW_POLICE={0xc40, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1f}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xcf, 0x2, 0x3, 0xfcff, 0x8, 0x4, 0x7e1fe9f7, 0x6, 0x3, 0x2, 0x7ff, 0x4, 0x213, 0x5, 0xffff7fff, 0xb52, 0x1ff, 0x7567, 0x58, 0xffffffff, 0x0, 0x400, 0x10001, 0x7, 0x7, 0xfffffff7, 0x6, 0x80000000, 0x7, 0x493, 0xbbd, 0x5, 0x6, 0x2, 0x803f, 0x0, 0x5172, 0x7, 0x0, 0x2, 0x9, 0x6, 0x2, 0xfff, 0x10000, 0x7, 0x65, 0xfffffff7, 0x38, 0x7f, 0x9, 0xff, 0x8, 0x4, 0x1, 0x6, 0x2, 0x3b7d, 0xffff, 0xfffffffc, 0x2, 0x8, 0x100, 0x3, 0x6, 0x40, 0x8000, 0x0, 0x80, 0x9, 0xffffffff, 0x600, 0x1, 0x7f, 0x913e, 0x8, 0x6, 0x800000, 0x4, 0x8, 0x6, 0x41, 0x8, 0x7, 0xa9b, 0xd, 0x7, 0x6ec, 0xa3, 0x9, 0xbc5, 0x7, 0xffffff8f, 0x3, 0x5, 0x2, 0x2, 0x1, 0x5, 0x5, 0x1, 0x8c, 0x80000001, 0x2, 0xe, 0x2, 0xffffffff, 0x6, 0x2, 0x92, 0x8, 0x5, 0x9, 0x3, 0x5, 0x0, 0x8, 0x8000, 0x0, 0x2, 0x9, 0x9, 0x6, 0x1, 0x100, 0x9, 0xffff, 0x8b, 0x6, 0x5, 0x1, 0x0, 0x7, 0x9, 0x7, 0x101, 0x6, 0x5, 0x3, 0xe82b, 0x1, 0x5, 0x6, 0x9, 0xd118, 0x5, 0x9, 0xca7a, 0x80000001, 0x101, 0x8000, 0x5, 0x400, 0x21, 0x8, 0x80000000, 0x81, 0x200, 0x7, 0x58, 0xf5a9, 0x40, 0x4, 0x200, 0xc, 0x10, 0x80000001, 0xb4, 0x200, 0x4, 0x1, 0x2, 0x0, 0x3, 0x2, 0xfffffff6, 0x4, 0x8, 0x10, 0x3, 0x6, 0xffffff81, 0x7ca, 0x8, 0x6, 0x4, 0x95, 0x595, 0x4, 0x2, 0xffffff7f, 0xf, 0x100, 0xfffffffa, 0xfff, 0xff, 0xff, 0xfffffffd, 0x0, 0x2, 0x44, 0x0, 0x4, 0x7fffffff, 0xea8, 0x1, 0x5, 0x6, 0x80, 0x6, 0x401, 0x8, 0x3, 0x9, 0xe, 0x10000, 0x2, 0x2, 0x6, 0xc, 0x0, 0xe, 0x6, 0x9, 0x3, 0x9, 0x6, 0xff, 0x2, 0xff, 0x3, 0x0, 0x3, 0xd8, 0x8, 0x2, 0x8001, 0x9, 0x0, 0x94d, 0x1, 0x0, 0x6ece8983, 0x6, 0x7, 0xffff, 0xfe, 0x400, 0x6, 0xfffff001, 0x4, 0x14, 0x8, 0x2, 0x1000, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x101, 0x8, 0x4, 0x41, 0xe4, 0x4, 0x1e2f, 0x3, 0x2, 0x2, 0x83e, 0x1000, 0x3, 0xb, 0x8, 0x4, 0x9, 0x8000, 0xe62b, 0xcb, 0x9, 0x3, 0xf8, 0x2, 0x6, 0xf, 0x101, 0x5, 0x2, 0xb444, 0xd5, 0x1, 0x4, 0x1, 0x5, 0x1, 0x5c, 0x8, 0x0, 0x9, 0x1, 0x7, 0x3f, 0x0, 0x7, 0x7, 0x4, 0x4, 0x4, 0x9, 0xffff8609, 0x7, 0xb1e9, 0x1, 0x7, 0x5, 0x7, 0x6, 0x10001, 0x3, 0x2, 0x2, 0xffffff4d, 0xa, 0x0, 0x4, 0x3, 0x21, 0x3, 0x10000, 0xc04, 0x1, 0x80000001, 0x0, 0xfffffff9, 0xc, 0x8000, 0x6, 0x2, 0x2a446baf, 0x0, 0x7ff, 0x400, 0x0, 0xa, 0xd, 0x2, 0x66d, 0x17d, 0x3, 0x9, 0x9, 0x401, 0x2, 0x0, 0xc1b, 0x101, 0x6, 0x10, 0x0, 0x6200, 0xa0, 0xd97f, 0x75, 0x1, 0xc, 0x3, 0x0, 0x8, 0x2, 0x4, 0x200, 0x967, 0x6, 0x40000000, 0x2d6, 0xb17, 0x6, 0x1000, 0x7f, 0x2, 0x4, 0x10001, 0x96, 0xffffffff, 0x1, 0xef, 0x8, 0xc, 0xf0b, 0x6451, 0x1, 0x4, 0xffff9463, 0xc, 0x6, 0x4, 0x9, 0x9, 0x3, 0x6, 0x70, 0xd, 0x1ff, 0x40, 0x2364, 0x9, 0x5, 0x10000, 0xe7, 0x80, 0x0, 0x2, 0x200, 0x8, 0x5, 0x40, 0x5, 0x5, 0x1, 0x200, 0x6, 0x81, 0x4, 0x5, 0x17, 0x2, 0xfffffffc, 0x4, 0x2, 0x4, 0x44, 0x7, 0x7f, 0x4, 0x9, 0x4a, 0x3cc9cef0, 0x1ff, 0x101, 0xffffffff, 0x6, 0x7f, 0x5, 0x8, 0x4, 0xffffffff, 0x1, 0x6, 0x2, 0x0, 0x5, 0x9, 0x6, 0x3, 0xe8a, 0x0, 0x100, 0x9, 0x0, 0x8, 0x9, 0xb792, 0x7, 0x8001, 0x0, 0xe, 0xfffffffd, 0x4, 0x9, 0x1000, 0x2, 0xfffff440, 0x81, 0x3ff, 0x1, 0x9, 0x5de, 0x1, 0xfff, 0x4, 0x7, 0x7a9d, 0x5, 0xa, 0x6, 0x8000, 0xffff, 0x7, 0xe99, 0xfffffff9, 0x351, 0x6, 0x2, 0x8, 0x9, 0xd5, 0x0, 0x9, 0x2, 0x4, 0x800, 0xf, 0x0, 0x4, 0x2, 0x81, 0x0, 0x0, 0x0, 0x4, 0x9, 0x6, 0x6, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x9, 0x4, 0x8, 0x2, 0x5, 0x5f57ecfa, 0x7, 0x2, 0x0, 0x5a8914d7, 0xc, 0x3, 0x1000, 0xffffffff, 0xf118, 0x101, 0x4, 0x5, 0x4, 0xfffffffe, 0x5, 0xffffff00, 0x8000, 0x400, 0x7, 0x6f79, 0x0, 0xfffffffa, 0x0, 0x8001, 0x7, 0x6, 0x8, 0xffff, 0x6, 0xa2bc, 0x1, 0x101, 0x8, 0x4, 0x6, 0x0, 0x9, 0x3ff, 0x5, 0x3, 0x0, 0x9, 0x18400000, 0x2, 0x9, 0x1, 0x2, 0x1, 0x80000000, 0x4dd9bbf9, 0x7ff, 0x3, 0xb100, 0xf5, 0xee, 0x3, 0x1, 0x6, 0x96, 0xfffeffff, 0x6, 0x1, 0xd, 0x1000, 0x9, 0xb, 0x7fffffff, 0xe6, 0x9, 0x401, 0x9, 0x2, 0x4, 0x9, 0x6, 0x8, 0x4, 0xe5, 0x0, 0x9, 0x9, 0x1, 0x91, 0x8000, 0x5, 0x8, 0x6, 0x2, 0x9, 0x0, 0xffff, 0x7, 0x3, 0xcaf, 0xa, 0x2, 0x2, 0xc, 0x40, 0x8c82, 0xdd4, 0x6bdd, 0x3, 0x8, 0x6, 0xb, 0x3, 0x3, 0xe, 0x7, 0x9, 0x80000000, 0x5, 0x7, 0x81, 0x6, 0x11, 0x3, 0xef56, 0xeb3, 0x4, 0x200b5397, 0x1ff, 0x7f, 0x200, 0x3ab, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x6, 0x3698, 0x3, 0x4, 0x7, 0x6, 0xd, 0x4, 0x9, 0x2f61, 0x2, 0x6, 0x5, 0x2ea2a58b, 0x7f, 0x9e5b, 0x8, 0x203, 0x800, 0xe, 0xd, 0x3, 0xd, 0x99, 0x9, 0x0, 0x8000, 0x400, 0x200, 0x7, 0x3f80, 0x4, 0x200, 0x8, 0x2, 0x3bee7760, 0xfffffff9, 0xb, 0x0, 0x9c, 0x4, 0x4, 0x8, 0x9, 0x86f4, 0x1ff, 0x8, 0x80, 0x2, 0xe, 0xfffffeff, 0x2, 0x9, 0x81, 0x0, 0xfff, 0x2, 0x80, 0xfffffffc, 0x5, 0x33b, 0xffff, 0x6, 0x1, 0x7ff, 0xfffffffc, 0x6, 0x8001, 0x1, 0x7f, 0x10, 0xfffffffb, 0x1, 0x7, 0x2, 0x8, 0xffffffff, 0x9, 0x5, 0x4, 0x9, 0x7, 0xdd6, 0x87, 0x5, 0x6, 0xfffff801, 0x68c7, 0x9, 0x0, 0xdb89, 0xfffffffc, 0xa, 0x8, 0xffffffff, 0x100, 0x0, 0x9, 0x4, 0x8, 0x8, 0x3, 0x80000000, 0x35a, 0x815, 0x1, 0x1a800000, 0xe, 0x21b9, 0x7, 0x8, 0x80000000, 0x9, 0xfffffffe, 0x5, 0x81, 0x8, 0xf]}]}, @TCA_FW_MASK={0x8, 0x5, 0x78}, @TCA_FW_MASK={0x8, 0x5, 0x2}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xfff2}}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xffe0}}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_matchall={{0xd}, {0x144, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xf}}, @TCA_MATCHALL_ACT={0x128, 0x2, [@m_vlan={0x124, 0x19, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x3, 0x5, 0x5, 0x3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xad4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x1c, 0x4, 0x100, 0x10}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xb, 0x3, 0x5, 0x1, 0xe229}, 0x3}}]}, {0x8b, 0x6, "d16a930e3c129332bef50d08efbaf4360ec08a6ac563150a07bfb3c32bb66277235721d9db403a5d7b83de07c6b275ec7d080740eb2da9e34aa21fe5ab0529416091cecedfc3defb11de2200c545088d3380d39f4e7fa7fbe213b4647f9e71ac280add0e383e31b732d75241bb808b1e22055c944ae49781705758143b5bf8c8801ae3ab2317b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xa}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x4640}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0x5}, {&(0x7f0000000440)=""/141, 0x8d}, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000001a00)=""/209, 0xd1}], 0x9, 0xc}}], 0x48}, 0x0) 7.469148864s ago: executing program 4 (id=2072): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 7.029469374s ago: executing program 2 (id=2073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r2 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000200)={0x20, 0x8, 0x11, {0x11, 0x30, "133257f6c7fa0500000000000000a8"}}, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x8, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffdf1, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 6.90930913s ago: executing program 3 (id=2074): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f0000000200)='m', 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, 0x0, 0x0) syz_io_uring_setup(0x9ee, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 5.92406934s ago: executing program 4 (id=2075): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x27, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x8, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x15}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r5, 0x0, 0x4) getpgrp(0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a800f9ff090003400200050000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8018cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970166c42c9bddbf37be84ba37", 0xe3}], 0x1}, 0x60044884) 5.850638424s ago: executing program 7 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000001680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSLCKTRMIOS(r1, 0x89f2, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000ac0)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)=""/104, 0x68}], 0x1}, 0x80}], 0x1, 0x92, 0x0) 5.498951398s ago: executing program 6 (id=2077): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r1, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x8, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x21, 0xbe, {0xbe, 0x21, "121c27b6fb9ab91743ea147006de5fcaa6bd5de7756609e1c96689bb74221664133b0b75441e9dc7850b51e78a04150ec296eb2ce27b486a484e2eaf2e99184f1e855387bc2808dee320c35e2574337d4ffbdef3b49b655f644350c3d4d23367d0e4720aab6e1107e1c814516de5e5d60bfcdcac54af5db89e01ee67632bade8917c325b461d99f82af0b1405c629596dec41bf8fdc6515c9b25109188f00929a323226d55e3c43ebf66ac9520dd6f3d30f6f5636c133517f94ead6d"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x30, 0xb5, "06237bfcaa3accacbec31018f39c62a2099f06c9815e21d2c78093bd7a20f77ac3334c92b28344cfbe7c2c0075fda6ce5f3cf9af7ce0957fb133ed1c2b3cb75714a2565d4a9e3471f678fddcb5f9dda28b01bc0fcc652b579f1e263c78d0a19cd65cd9020fcead2d08af9427b50990a4322874934dba592e39c5e65bf6d6a092710cb662021138c762f9f18016ffcfcf668f669adfd4b71e0fa9a71f74abddfb6dac31a40c608ab957d3c36caed4b4eb22e8466401"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) 5.228783328s ago: executing program 3 (id=2078): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x33, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYRES64, @ANYRESHEX=r2, @ANYRES64], 0xffffffa5) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 3.873338378s ago: executing program 3 (id=2079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x7}}, 0x50) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) prctl$PR_SET_THP_DISABLE(0x29, 0x2) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x18003) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.10204478s ago: executing program 7 (id=2080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0xff2, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x3841b273) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040004) 3.027527276s ago: executing program 4 (id=2081): socket$kcm(0x21, 0x2, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000880), 0x300, r3}, 0x38) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0), 0x0) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) recvfrom$unix(r5, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 2.985500305s ago: executing program 3 (id=2082): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 2.741534923s ago: executing program 2 (id=2083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r4, 0x0, 0x33, r4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(0x0, 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 1.906806364s ago: executing program 7 (id=2084): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x20, 0xa7e, 0x70}, 0x2c) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31c66505701b7d6df7375f4272f4ec7f1f4c718875e08cb6005f8d89f22f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000040)='P') ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c8c797c6b4c61ff17239fd34d3ee6bbf9ffec", 0x7, 0x200}) write(r1, &(0x7f0000000200)='G', 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8) 1.353893669s ago: executing program 2 (id=2085): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r0, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 1.342165674s ago: executing program 3 (id=2086): r0 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe4000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_udp(0x2, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = epoll_create1(0x0) epoll_wait(r4, 0x0, 0x0, 0x7ffe) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000007}) read$usbfs(r4, &(0x7f00000001c0)=""/185, 0xb9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7, 0x1]}}, 0x5c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r7, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4) 336.573397ms ago: executing program 6 (id=2087): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000880), 0x300, r4}, 0x38) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r6 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xffff0001, 0x4, 0x3, 0x1}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r7, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000481000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 0s ago: executing program 2 (id=2088): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000780000061", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61783d30303030573e2b67ee3030303030"]) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x3, 0x8) mount$cgroup(0x7000000, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioprio_set$pid(0x1, r3, 0x2004) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) kernel console output (not intermixed with test programs): n [ 983.602473][ T5933] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 983.775105][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 983.795506][ T5933] usb 3-1: config 0 has no interfaces? [ 984.156961][ T5925] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 984.215080][ T5933] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 984.239663][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.298591][ T5933] usb 3-1: Product: syz [ 984.302787][ T5933] usb 3-1: Manufacturer: syz [ 984.313860][ T5933] usb 3-1: SerialNumber: syz [ 984.355651][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 984.361977][ T5933] usb 3-1: config 0 descriptor?? [ 984.382748][ T5925] usb 5-1: too many configurations: 31, using maximum allowed: 8 [ 984.446350][ T5925] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 984.473866][ T5925] usb 5-1: can't read configurations, error -61 [ 984.600340][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 984.600359][ T30] audit: type=1400 audit(1758094252.691:2790): avc: denied { create } for pid=14671 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 984.631552][ T5925] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 984.752117][ T30] audit: type=1400 audit(1758094252.712:2791): avc: denied { bind } for pid=14671 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 984.805784][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1866'. [ 984.831213][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 985.425396][ T5925] usb 5-1: too many configurations: 31, using maximum allowed: 8 [ 985.435218][ T5925] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 985.450633][ T5925] usb 5-1: can't read configurations, error -61 [ 985.457125][ T30] audit: type=1400 audit(1758094252.911:2792): avc: denied { read write } for pid=14671 comm="syz.3.1866" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 985.482542][ T5925] usb usb5-port1: attempt power cycle [ 985.490056][ T30] audit: type=1400 audit(1758094252.911:2793): avc: denied { open } for pid=14671 comm="syz.3.1866" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 985.525209][ T30] audit: type=1400 audit(1758094252.984:2794): avc: denied { create } for pid=14671 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 985.552195][ T30] audit: type=1400 audit(1758094252.984:2795): avc: denied { ioctl } for pid=14671 comm="syz.3.1866" path="socket:[37495]" dev="sockfs" ino=37495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 985.647981][ T30] audit: type=1400 audit(1758094252.984:2796): avc: denied { write } for pid=14671 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 985.731434][ T30] audit: type=1400 audit(1758094252.984:2797): avc: denied { map_create } for pid=14671 comm="syz.3.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 985.830977][ T5925] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 985.861027][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 985.990529][ T5925] usb 5-1: too many configurations: 31, using maximum allowed: 8 [ 986.022224][ T5925] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 986.067732][ T5925] usb 5-1: can't read configurations, error -61 [ 986.099088][ T30] audit: type=1400 audit(1758094254.255:2798): avc: denied { write } for pid=14683 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 986.375447][ T30] audit: type=1400 audit(1758094254.255:2799): avc: denied { nlmsg_write } for pid=14683 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 986.396158][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.910019][ T5933] usb 3-1: can't set config #0, error -71 [ 987.018518][ T5933] usb 3-1: USB disconnect, device number 67 [ 990.927576][ T6286] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 991.100545][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 991.100566][ T30] audit: type=1400 audit(1758094259.525:2870): avc: denied { sys_module } for pid=14712 comm="syz.6.1875" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 991.138834][T14721] Invalid ELF header magic: != ELF [ 991.177708][ T6286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.210819][ T30] audit: type=1400 audit(1758094259.556:2871): avc: denied { module_load } for pid=14712 comm="syz.6.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 991.253500][ T6286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.344301][ T6286] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 991.455995][ T6286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.461612][ T30] audit: type=1400 audit(1758094259.861:2872): avc: denied { read } for pid=14723 comm="syz.2.1877" dev="nsfs" ino=4026532808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 991.763152][ T30] audit: type=1400 audit(1758094259.861:2873): avc: denied { open } for pid=14723 comm="syz.2.1877" path="net:[4026532808]" dev="nsfs" ino=4026532808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 991.871414][ T6286] usb 5-1: config 0 descriptor?? [ 991.916827][ T30] audit: type=1400 audit(1758094259.861:2874): avc: denied { create } for pid=14723 comm="syz.2.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 992.163875][ T6286] usbhid 5-1:0.0: can't add hid device: -71 [ 992.190939][ T30] audit: type=1400 audit(1758094259.871:2875): avc: denied { map_create } for pid=14723 comm="syz.2.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 992.210154][ C0] vkms_vblank_simulate: vblank timer overrun [ 992.222691][ T6286] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 992.305371][ T30] audit: type=1400 audit(1758094259.871:2876): avc: denied { create } for pid=14723 comm="syz.2.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 992.788466][ T30] audit: type=1400 audit(1758094260.144:2877): avc: denied { write } for pid=14720 comm="syz.3.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 993.011290][ T6286] usb 5-1: USB disconnect, device number 73 [ 993.059492][ T30] audit: type=1400 audit(1758094260.144:2878): avc: denied { read } for pid=14720 comm="syz.3.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 993.131040][ T30] audit: type=1400 audit(1758094260.155:2879): avc: denied { ioctl } for pid=14720 comm="syz.3.1874" path="socket:[38116]" dev="sockfs" ino=38116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 993.729814][T14741] Unknown options in mask b7f2 [ 994.412382][ T5925] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 994.576256][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 994.772085][ T5925] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 994.849951][ T5925] usb 6-1: config 0 has no interface number 0 [ 994.999832][ T5925] usb 6-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 995.044439][ T5925] usb 6-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 995.059885][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.088502][ T5925] usb 6-1: Product: syz [ 995.100669][ T5925] usb 6-1: Manufacturer: syz [ 995.108623][ T5925] usb 6-1: SerialNumber: syz [ 995.134832][ T5925] usb 6-1: config 0 descriptor?? [ 995.167248][T14749] comedi comedi0: reset error (fatal) [ 995.192968][T14745] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 995.371557][ T5925] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 995.909055][ T6286] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 996.393157][ T5925] usb 6-1: USB disconnect, device number 30 [ 997.534800][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 997.534816][ T30] audit: type=1400 audit(1758094266.264:2932): avc: denied { read write } for pid=14765 comm="syz.5.1888" name="vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 999.133372][ T30] audit: type=1400 audit(1758094266.264:2933): avc: denied { open } for pid=14765 comm="syz.5.1888" path="/dev/vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 999.157408][ T30] audit: type=1400 audit(1758094266.275:2934): avc: denied { ioctl } for pid=14765 comm="syz.5.1888" path="/dev/vbi1" dev="devtmpfs" ino=955 ioctlcmd=0x565d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 999.185377][ T30] audit: type=1400 audit(1758094266.275:2935): avc: denied { ioctl } for pid=14765 comm="syz.5.1888" path="socket:[38183]" dev="sockfs" ino=38183 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 999.276570][ T30] audit: type=1400 audit(1758094266.285:2936): avc: denied { getopt } for pid=14765 comm="syz.5.1888" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 999.316901][ T6286] usb 3-1: device descriptor read/all, error -71 [ 999.325217][ T30] audit: type=1400 audit(1758094267.073:2937): avc: denied { read write } for pid=14762 comm="syz.4.1887" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 999.454097][ T30] audit: type=1400 audit(1758094267.073:2938): avc: denied { open } for pid=14762 comm="syz.4.1887" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 999.479522][ T30] audit: type=1400 audit(1758094267.073:2939): avc: denied { mounton } for pid=14762 comm="syz.4.1887" path="/356/file0" dev="tmpfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 999.566524][ T30] audit: type=1400 audit(1758094267.083:2940): avc: denied { mount } for pid=14762 comm="syz.4.1887" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 999.790626][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'. [ 1000.023440][ T30] audit: type=1400 audit(1758094267.272:2941): avc: denied { create } for pid=14765 comm="syz.5.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1001.847696][T14796] Invalid ELF header magic: != ELF [ 1002.689613][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1002.689627][ T30] audit: type=1400 audit(1758094271.681:2964): avc: denied { read } for pid=14808 comm="syz.5.1901" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1002.749079][ T30] audit: type=1400 audit(1758094271.681:2965): avc: denied { open } for pid=14808 comm="syz.5.1901" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1003.193913][ T30] audit: type=1400 audit(1758094272.217:2966): avc: denied { ioctl } for pid=14808 comm="syz.5.1901" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1003.848761][ T30] audit: type=1400 audit(1758094272.899:2967): avc: denied { create } for pid=14809 comm="syz.4.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1003.878226][ T30] audit: type=1400 audit(1758094272.931:2968): avc: denied { setopt } for pid=14809 comm="syz.4.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1004.668914][ T30] audit: type=1400 audit(1758094273.645:2969): avc: denied { block_suspend } for pid=14823 comm="syz.2.1903" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1004.700526][ T30] audit: type=1400 audit(1758094273.655:2970): avc: denied { create } for pid=14823 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1004.734664][ T30] audit: type=1400 audit(1758094273.655:2971): avc: denied { setopt } for pid=14823 comm="syz.2.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1005.339161][ T30] audit: type=1400 audit(1758094274.463:2972): avc: denied { ioctl } for pid=14837 comm="syz.5.1905" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1005.458476][ T30] audit: type=1400 audit(1758094274.463:2973): avc: denied { write } for pid=14837 comm="syz.5.1905" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1006.182754][T14847] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1907'. [ 1006.440126][T14855] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1006.503003][T14858] IPVS: stopping backup sync thread 14855 ... [ 1007.495925][T14863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1912'. [ 1007.769572][T14867] Invalid ELF header magic: != ELF [ 1007.801077][T14863] vxcan3: entered promiscuous mode [ 1007.829664][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1007.830406][ T30] audit: type=1400 audit(1758094277.088:2977): avc: denied { bind } for pid=14864 comm="syz.4.1914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1008.163209][ T30] audit: type=1400 audit(1758094277.424:2978): avc: denied { create } for pid=14876 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1008.188416][ T30] audit: type=1400 audit(1758094277.434:2979): avc: denied { bind } for pid=14876 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1008.212153][ T30] audit: type=1400 audit(1758094277.434:2980): avc: denied { setopt } for pid=14876 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1008.234242][ T30] audit: type=1400 audit(1758094277.434:2981): avc: denied { accept } for pid=14876 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1008.264627][ T30] audit: type=1400 audit(1758094277.434:2982): avc: denied { write } for pid=14876 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1008.390811][ T30] audit: type=1400 audit(1758094277.434:2983): avc: denied { read } for pid=14876 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1008.521738][ T30] audit: type=1400 audit(1758094277.739:2984): avc: denied { setopt } for pid=14884 comm="syz.2.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1008.550229][T14887] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1008.556762][T14887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1008.575239][T14887] vhci_hcd vhci_hcd.0: Device attached [ 1008.589136][ T30] audit: type=1400 audit(1758094277.886:2985): avc: denied { bind } for pid=14884 comm="syz.2.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1008.645505][ T30] audit: type=1400 audit(1758094277.917:2986): avc: denied { write } for pid=14866 comm="syz.3.1915" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1008.800235][ T5976] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 1008.950294][ T5998] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1009.056519][T14893] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1911'. [ 1009.084243][T14893] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1911'. [ 1009.243998][ T5998] usb 4-1: Using ep0 maxpacket: 16 [ 1009.270658][ T5998] usb 4-1: config 0 has no interfaces? [ 1009.284078][ T5998] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1009.285251][T14888] vhci_hcd: connection reset by peer [ 1009.361571][ T34] vhci_hcd: stop threads [ 1009.365920][ T34] vhci_hcd: release socket [ 1009.371304][ T34] vhci_hcd: disconnect device [ 1009.730937][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.749135][ T5998] usb 4-1: Product: syz [ 1009.780746][ T5998] usb 4-1: Manufacturer: syz [ 1009.819196][ T5998] usb 4-1: SerialNumber: syz [ 1010.530305][ T5998] usb 4-1: config 0 descriptor?? [ 1011.118002][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1921'. [ 1011.886145][ T5998] usb 4-1: can't set config #0, error -71 [ 1011.917549][ T5998] usb 4-1: USB disconnect, device number 84 [ 1012.009639][T14920] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1928'. [ 1012.254888][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1012.617578][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1012.649648][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.729058][ T24] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1012.952944][T14937] validate_nla: 30 callbacks suppressed [ 1012.952981][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1012.968453][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1012.976673][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1012.986947][T14935] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1012.993462][T14935] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1013.027314][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.086490][ T24] usb 7-1: config 0 descriptor?? [ 1013.181340][T14935] vhci_hcd vhci_hcd.0: Device attached [ 1013.269433][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1013.325743][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1013.392946][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1013.418226][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1013.426578][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1013.454099][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1013.466014][T14937] netlink: 'syz.3.1930': attribute type 2 has an invalid length. [ 1013.487609][ T5925] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 1013.534258][T14936] vhci_hcd: connection closed [ 1013.590558][ T34] vhci_hcd: stop threads [ 1013.695736][ T5976] vhci_hcd: vhci_device speed not set [ 1013.741011][ T34] vhci_hcd: release socket [ 1013.751395][ T34] vhci_hcd: disconnect device [ 1014.326748][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1014.326763][ T30] audit: type=1326 audit(1758094283.901:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.6.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c298eba9 code=0x7ffc0000 [ 1014.388219][ T30] audit: type=1326 audit(1758094283.943:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.6.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c298eba9 code=0x7ffc0000 [ 1014.425462][ T30] audit: type=1326 audit(1758094283.943:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.6.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f77c298eba9 code=0x7ffc0000 [ 1014.462456][ T30] audit: type=1326 audit(1758094283.943:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.6.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c298eba9 code=0x7ffc0000 [ 1014.496390][ T30] audit: type=1326 audit(1758094283.943:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14914 comm="syz.6.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c298eba9 code=0x7ffc0000 [ 1015.252312][ T30] audit: type=1400 audit(1758094284.405:3003): avc: denied { mounton } for pid=14948 comm="syz.4.1934" path="/366/file0" dev="tmpfs" ino=2160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1015.276227][ T30] audit: type=1400 audit(1758094284.405:3004): avc: denied { mount } for pid=14948 comm="syz.4.1934" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1015.481329][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 1015.491191][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1015.514582][ T30] audit: type=1400 audit(1758094284.436:3005): avc: denied { unlink } for pid=14948 comm="syz.4.1934" name="#101" dev="tmpfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1015.598432][ T24] usb 7-1: USB disconnect, device number 32 [ 1015.621411][ T30] audit: type=1400 audit(1758094284.447:3006): avc: denied { mount } for pid=14948 comm="syz.4.1934" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1015.651546][ T30] audit: type=1400 audit(1758094284.877:3007): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1015.881898][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'. [ 1016.722870][T14970] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1018.032716][T14980] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1018.132643][T14974] overlayfs: overlapping lowerdir path [ 1018.573925][ T5925] vhci_hcd: vhci_device speed not set [ 1020.089393][T14999] fuse: Bad value for 'fd' [ 1022.330386][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1022.330397][ T30] audit: type=1400 audit(1758094292.299:3014): avc: denied { map_create } for pid=15006 comm="syz.3.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1022.430948][ T30] audit: type=1400 audit(1758094292.331:3015): avc: denied { create } for pid=15006 comm="syz.3.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1022.433088][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1022.467410][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1022.499762][ T30] audit: type=1400 audit(1758094292.488:3016): avc: denied { read write } for pid=5853 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1022.648464][ T30] audit: type=1400 audit(1758094292.509:3017): avc: denied { open } for pid=5853 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1022.835634][ T30] audit: type=1400 audit(1758094292.509:3018): avc: denied { ioctl } for pid=5853 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1022.938944][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1950'. [ 1023.283556][ T30] audit: type=1400 audit(1758094292.709:3019): avc: denied { create } for pid=15012 comm="syz.6.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1023.695877][ T30] audit: type=1400 audit(1758094292.709:3020): avc: denied { write } for pid=15012 comm="syz.6.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1023.716312][ C1] vkms_vblank_simulate: vblank timer overrun [ 1023.722778][ T30] audit: type=1400 audit(1758094292.709:3021): avc: denied { read } for pid=15012 comm="syz.6.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1023.743230][ T30] audit: type=1400 audit(1758094292.709:3022): avc: denied { execmem } for pid=15012 comm="syz.6.1950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1023.762496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1023.866287][ T30] audit: type=1400 audit(1758094292.887:3023): avc: denied { read } for pid=15010 comm="syz.4.1949" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1023.888996][ C1] vkms_vblank_simulate: vblank timer overrun [ 1025.581376][T15028] comedi comedi0: reset error (fatal) [ 1027.596125][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1027.596141][ T30] audit: type=1400 audit(1758094297.832:3083): avc: denied { create } for pid=15064 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1027.678943][ T30] audit: type=1400 audit(1758094297.832:3084): avc: denied { getopt } for pid=15064 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1028.692753][ T30] audit: type=1400 audit(1758094298.987:3085): avc: denied { write } for pid=15082 comm="syz.6.1962" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1028.958756][ T3005] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.987643][ T30] audit: type=1400 audit(1758094299.291:3086): avc: denied { create } for pid=15064 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1028.988155][T10356] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1029.018238][ T30] audit: type=1400 audit(1758094299.291:3087): avc: denied { ioctl } for pid=15064 comm="syz.4.1960" path="socket:[39324]" dev="sockfs" ino=39324 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1029.044661][ T30] audit: type=1400 audit(1758094299.291:3088): avc: denied { ioctl } for pid=15086 comm="syz-executor" path="socket:[38832]" dev="sockfs" ino=38832 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1029.047004][T10356] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1029.120761][ T24] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1029.134717][T10356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1029.147743][T10356] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1029.156634][T10356] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.170979][ T3005] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.241858][ T30] audit: type=1400 audit(1758094299.533:3089): avc: denied { mounton } for pid=15086 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1029.343917][ T30] audit: type=1400 audit(1758094299.669:3090): avc: denied { create } for pid=15088 comm="syz.2.1963" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1029.398420][ T30] audit: type=1400 audit(1758094299.669:3091): avc: denied { map } for pid=15088 comm="syz.2.1963" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=39342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1029.441494][ T30] audit: type=1400 audit(1758094299.669:3092): avc: denied { read write } for pid=15088 comm="syz.2.1963" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=39342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1029.513141][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.523529][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1029.532638][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.551172][ T3005] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.561599][ T24] usb 7-1: config 0 descriptor?? [ 1029.571565][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1030.083968][T15096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1965'. [ 1030.093856][T15086] vxcan1 speed is unknown, defaulting to 1000 [ 1030.101301][ T5976] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1030.121224][T15096] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1965'. [ 1030.271616][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1030.278021][ T5976] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1030.288162][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1030.313259][ T3005] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.329597][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 13570, setting to 64 [ 1030.356904][ T5976] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 1030.367523][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.388514][ T5976] usb 3-1: config 0 descriptor?? [ 1030.403654][T15089] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1030.490089][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 1030.519980][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 1030.524983][ T5976] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 1030.546695][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 1030.558215][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 1030.576041][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.584733][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.592302][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.599624][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.606990][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.614313][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.621720][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.629060][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.636363][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.646043][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.654270][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.663261][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.671079][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.681923][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.690082][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.699078][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.707439][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.715430][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.723711][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 1030.730321][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.730681][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.737911][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.745112][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.752320][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.759590][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.766779][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.773972][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.781127][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.789066][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.796333][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.803605][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.810852][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.818080][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.825303][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.832518][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.839742][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.846945][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.854135][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.861351][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.868578][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.875794][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.884022][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.891313][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.898552][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.905697][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.912922][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.920150][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.927406][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.934574][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.941782][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.949038][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.956235][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.963406][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.970557][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.977762][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.985544][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.992745][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1030.999933][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.007168][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.014346][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.021493][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.028625][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.035806][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.042979][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.050176][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.057347][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.064533][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.071717][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.079566][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.086806][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.093997][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.101175][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.108344][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.115499][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.122643][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.129822][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.137015][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.144166][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.151310][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.158577][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.165744][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.172954][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.188111][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.195274][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.202423][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.209580][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.216758][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.223946][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.231478][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.239073][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.246379][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.250330][T10356] Bluetooth: hci1: command tx timeout [ 1031.253600][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.267033][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.274600][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.281912][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.293281][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.300725][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.308033][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.315384][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.322703][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.330712][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.338038][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.345376][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.352705][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.360068][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.373441][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.381175][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.388722][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.396073][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.403393][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.410712][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.418031][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.425358][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.432680][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.440025][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.447367][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.448319][T15106] block nbd3: Attempted send on invalid socket [ 1031.454678][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.454889][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.455092][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.455287][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.455479][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.455663][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.465147][T15106] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1031.478642][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.524084][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.531426][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.538761][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.546044][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.553333][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.563553][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.571050][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.578325][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.585601][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.592896][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.600178][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.607450][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.614708][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.621979][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.629252][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.636524][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.643807][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.651066][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.658756][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.666101][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.673379][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.680662][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.687967][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.695301][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.702600][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.709899][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.717190][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.724454][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.731744][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.739016][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.746325][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.764084][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.771423][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.778709][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.785981][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.793272][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.800531][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.807813][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.815079][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.822366][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.829635][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.836917][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.844283][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.859290][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.866834][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.874148][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.881428][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.888706][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.895973][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.903275][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.910554][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.917879][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.925151][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.932404][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.939694][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.946981][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.956466][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.963959][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.971337][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.978671][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.986008][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1031.993358][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.000694][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.008030][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.015327][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.022609][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.029910][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.037214][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.044524][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.052395][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.059734][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.067053][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.074525][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.081836][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.089172][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.096499][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.103732][T15106] hfsplus: unable to find HFS+ superblock [ 1032.109587][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.116865][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.124071][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.131316][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.139656][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.147143][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.155221][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.162433][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.169752][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.176999][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.184261][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.191478][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.198876][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.206115][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.213372][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.220622][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.227830][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.235565][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.243408][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.251389][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.258642][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.265831][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.273014][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.280181][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.287326][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.294510][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.301797][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.308990][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.316220][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.323395][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.330556][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.337739][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.345622][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.352769][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.359950][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.367137][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.374325][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.381468][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.388640][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.395818][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.402994][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.410154][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.417393][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.424587][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.431767][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.438920][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.446591][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.453794][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.460984][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.468168][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.475323][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.482503][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.489672][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.496868][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.504070][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.511233][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.518392][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.525829][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.533024][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.540800][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.547988][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.555167][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.562302][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.569469][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.576643][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.583843][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.590989][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.598158][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.605354][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.612520][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.619666][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.626844][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.634026][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.641600][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.648727][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.655869][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.663023][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.670177][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.677294][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.684440][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.691595][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.698757][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.705899][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.713056][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.720214][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.727378][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.734527][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.735021][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.742162][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.749339][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.756544][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.763679][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.770810][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.777966][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.785131][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.792306][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.799538][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.806777][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.813927][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.821085][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.828244][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.835837][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.843051][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.850224][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.857378][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.864531][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.871688][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.878869][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.886037][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.893201][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.900358][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.907536][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.914700][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.921858][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.929036][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.936632][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.943761][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.950919][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.958067][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.965206][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.972326][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.979465][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.986630][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1032.993769][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.000885][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.008025][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.015159][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.022326][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.036949][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.044141][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.051294][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.058415][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.065584][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.072746][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.079890][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.087015][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.094175][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.101337][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.108497][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.115621][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.122785][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.130353][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.137561][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.144696][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.151826][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.158986][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.166143][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.173281][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.180433][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.187588][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.194725][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.201855][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.209323][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.216878][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.224810][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.231971][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.239103][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.246283][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.253449][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.260615][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.267771][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.275030][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.282235][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.289480][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.296678][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.303950][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.311169][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.318379][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.326331][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.333544][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.340780][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.348013][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.355359][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.358131][T10356] Bluetooth: hci1: command tx timeout [ 1033.362542][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.375469][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.382931][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.390212][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.397529][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.404831][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.412967][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.420480][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.427862][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.435195][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.442537][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.449897][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.457314][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.464662][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.471999][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.479421][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.486688][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.493976][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.501260][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.509076][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.516595][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.523906][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.531237][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.538501][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.545764][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.553055][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.560332][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.567587][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.574864][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.582117][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.589374][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.596685][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.603954][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.611744][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.619050][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.626338][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.633605][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.640890][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.648223][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.655481][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.662869][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.670221][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.677358][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 1033.683849][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.691107][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.698313][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.705458][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.713242][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.720407][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.727550][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.734683][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.741901][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.749074][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.756250][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.763381][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.770587][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.777776][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.784940][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.792076][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.799280][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.806477][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.814334][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.821688][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.828874][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.836051][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.843220][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.850387][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.857580][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.864775][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.871961][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.879215][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.886422][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.893688][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.901063][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.909349][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.916713][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.923943][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.931192][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.938422][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.945628][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.952816][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.959991][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.967248][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.974429][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.981603][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.988789][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1033.996020][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.004025][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.011180][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.018359][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.025540][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.032701][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.039857][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.047006][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.054180][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.061350][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.068502][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.075635][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.082808][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.089968][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.097123][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.106805][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.114118][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.121409][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.128727][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.136032][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.143352][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.150669][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.158227][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.165538][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.172844][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.180190][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.187501][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.195559][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.203768][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.211101][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.218421][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.225798][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.233111][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.240426][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.247740][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.255119][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.260095][ T5208] usb 3-1: control msg error: -71 [ 1034.262420][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.274736][ C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1034.307107][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 1034.313956][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 1034.498321][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 1034.506176][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 1034.539435][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1034.549414][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1034.549428][ T30] audit: type=1400 audit(1758094305.139:3102): avc: denied { mounton } for pid=15116 comm="syz.2.1968" path="/397/file0" dev="tmpfs" ino=2251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1034.583786][T15119] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1034.628497][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.636371][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.644990][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.651822][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1034.652278][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.668671][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.676521][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.680318][ T5208] usb 3-1: control msg error: -71 [ 1034.685368][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.697124][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.704965][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.713285][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.721125][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.729342][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.737686][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.746177][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.753504][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.761812][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.770159][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.784693][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.803498][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.810846][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.819226][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.827552][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.835897][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.843420][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.850764][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.858105][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.865456][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.873825][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.882852][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.890910][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.899272][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 1034.906459][ C0] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1034.935070][ T5976] usb 3-1: USB disconnect, device number 70 [ 1034.945847][ T30] audit: type=1400 audit(1758094305.139:3103): avc: denied { mount } for pid=15116 comm="syz.2.1968" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1035.017771][ T24] pwc: Registered as video103. [ 1035.040177][T15125] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1035.049137][T15125] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1035.464561][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 1035.471244][T10356] Bluetooth: hci1: command tx timeout [ 1035.479590][ T24] usb 7-1: USB disconnect, device number 33 [ 1035.484065][ T30] audit: type=1400 audit(1758094305.170:3104): avc: denied { unlink } for pid=15116 comm="syz.2.1968" name="#105" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1035.583477][ T30] audit: type=1400 audit(1758094305.170:3105): avc: denied { mount } for pid=15116 comm="syz.2.1968" name="/" dev="overlay" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1035.739647][ T30] audit: type=1400 audit(1758094306.094:3106): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1035.853568][ T30] audit: type=1400 audit(1758094306.346:3107): avc: denied { unmount } for pid=11784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1036.175984][ T30] audit: type=1400 audit(1758094306.629:3108): avc: denied { read write } for pid=15130 comm="syz.4.1972" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1036.664509][T15140] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1036.673450][T15140] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1037.166656][ T30] audit: type=1400 audit(1758094306.629:3109): avc: denied { open } for pid=15130 comm="syz.4.1972" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1037.195699][ T30] audit: type=1400 audit(1758094306.650:3110): avc: denied { mount } for pid=15130 comm="syz.4.1972" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1037.265531][ T30] audit: type=1400 audit(1758094307.984:3111): avc: denied { read write } for pid=15130 comm="syz.4.1972" name="file0" dev="fuse" ino=144115188075855875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1037.403006][T10356] Bluetooth: hci1: command tx timeout [ 1037.873008][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1974'. [ 1038.052037][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1975'. [ 1038.936540][ T24] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1039.222105][ T24] usb 7-1: device descriptor read/64, error -71 [ 1039.311012][ T3005] bond0 (unregistering): Released all slaves [ 1039.345015][T15167] validate_nla: 70 callbacks suppressed [ 1039.345167][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.368637][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1039.368664][ T30] audit: type=1400 audit(1758094310.199:3123): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1039.376952][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.443685][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.542509][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.593465][ T24] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1039.606256][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.608854][ T30] audit: type=1400 audit(1758094310.440:3124): avc: denied { read write } for pid=15173 comm="syz.2.1978" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1039.673391][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.690281][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.706764][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.718669][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.731366][T15167] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 1039.863826][ T24] usb 7-1: device descriptor read/64, error -71 [ 1039.875493][ T30] audit: type=1400 audit(1758094310.472:3125): avc: denied { open } for pid=15173 comm="syz.2.1978" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1039.882678][ T3005] tipc: Disabling bearer [ 1039.904546][ T30] audit: type=1400 audit(1758094310.482:3126): avc: denied { ioctl } for pid=15173 comm="syz.2.1978" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1039.930338][ T30] audit: type=1400 audit(1758094310.702:3127): avc: denied { create } for pid=15173 comm="syz.2.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1039.933855][ T3005] tipc: Disabling bearer [ 1039.958766][ T30] audit: type=1400 audit(1758094310.702:3128): avc: denied { setopt } for pid=15173 comm="syz.2.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1039.966930][T15176] tipc: Bearer : already 2 bearers with priority 10 [ 1039.988854][ T24] usb usb7-port1: attempt power cycle [ 1039.990320][ T3005] tipc: Left network mode [ 1039.999317][T15176] tipc: Bearer : trying with adjusted priority [ 1040.008428][T15176] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1040.050905][T15176] tipc: Enabled bearer , priority 9 [ 1040.317302][ T24] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1040.337287][ T24] usb 7-1: device descriptor read/8, error -71 [ 1040.754750][ T24] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1040.774974][ T30] audit: type=1400 audit(1758094311.626:3129): avc: denied { block_suspend } for pid=15185 comm="syz.4.1981" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1040.883399][ T30] audit: type=1400 audit(1758094311.626:3130): avc: denied { create } for pid=15185 comm="syz.4.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1040.982347][ T24] usb 7-1: device descriptor read/8, error -71 [ 1041.037941][ T30] audit: type=1400 audit(1758094311.626:3131): avc: denied { setopt } for pid=15185 comm="syz.4.1981" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1041.104117][ T30] audit: type=1400 audit(1758094311.700:3132): avc: denied { setopt } for pid=15185 comm="syz.4.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1041.125025][ T24] usb usb7-port1: unable to enumerate USB device [ 1041.996343][T15212] fuse: Bad value for 'fd' [ 1042.450634][T15086] chnl_net:caif_netlink_parms(): no params data found [ 1042.992167][T15218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1986'. [ 1043.022425][T15218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1986'. [ 1043.345113][ T3005] hsr_slave_0: left promiscuous mode [ 1043.417930][ T3005] hsr_slave_1: left promiscuous mode [ 1043.543036][ T3005] veth1_macvtap: left promiscuous mode [ 1043.591256][ T3005] veth0_macvtap: left promiscuous mode [ 1043.671920][ T3005] veth1_vlan: left promiscuous mode [ 1043.677273][ T3005] veth0_vlan: left promiscuous mode [ 1044.146867][ T3005] pim6reg (unregistering): left allmulticast mode [ 1044.636470][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1044.636504][ T30] audit: type=1400 audit(1758094315.647:3141): avc: denied { read } for pid=15239 comm="syz.3.1990" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1044.856185][ T30] audit: type=1400 audit(1758094315.647:3142): avc: denied { open } for pid=15239 comm="syz.3.1990" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1044.968545][ T30] audit: type=1400 audit(1758094315.679:3143): avc: denied { mount } for pid=15239 comm="syz.3.1990" name="/" dev="ramfs" ino=40382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1045.593112][ T30] audit: type=1400 audit(1758094316.728:3144): avc: denied { read write } for pid=5853 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1045.633467][ T30] audit: type=1400 audit(1758094316.728:3145): avc: denied { open } for pid=5853 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1045.689150][ T30] audit: type=1400 audit(1758094316.728:3146): avc: denied { ioctl } for pid=5853 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1045.723901][ T30] audit: type=1400 audit(1758094316.865:3147): avc: denied { write } for pid=15248 comm="syz.4.1992" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1045.753667][ T30] audit: type=1400 audit(1758094316.865:3148): avc: denied { open } for pid=15248 comm="syz.4.1992" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1045.782560][ T30] audit: type=1400 audit(1758094316.865:3149): avc: denied { prog_load } for pid=15248 comm="syz.4.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1045.817221][ T30] audit: type=1400 audit(1758094316.865:3150): avc: denied { bpf } for pid=15248 comm="syz.4.1992" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1045.999998][T15251] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1045.999998][T15251] program syz.4.1992 not setting count and/or reply_len properly [ 1049.039289][T15280] Invalid ELF header magic: != ELF [ 1049.619638][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1049.631390][ T30] audit: type=1400 audit(1758094320.875:3187): avc: denied { setopt } for pid=15281 comm="syz.3.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1049.781800][ T30] audit: type=1400 audit(1758094320.907:3188): avc: denied { write } for pid=15281 comm="syz.3.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1049.812638][ T30] audit: type=1400 audit(1758094320.907:3189): avc: denied { connect } for pid=15281 comm="syz.3.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1049.832289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.841298][ T30] audit: type=1400 audit(1758094320.907:3190): avc: denied { name_connect } for pid=15281 comm="syz.3.1999" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1049.863475][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.871686][T15086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.885034][T15086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.898320][T15086] bridge_slave_0: entered allmulticast mode [ 1049.910589][T15086] bridge_slave_0: entered promiscuous mode [ 1049.945623][T15086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.955377][T15086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.963913][T15086] bridge_slave_1: entered allmulticast mode [ 1049.973908][T15086] bridge_slave_1: entered promiscuous mode [ 1050.104698][ T30] audit: type=1400 audit(1758094321.452:3191): avc: denied { search } for pid=5518 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.268888][ T30] audit: type=1400 audit(1758094321.452:3192): avc: denied { search } for pid=5518 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.290497][ C0] vkms_vblank_simulate: vblank timer overrun [ 1050.299105][T15286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2000'. [ 1050.308860][ T30] audit: type=1400 audit(1758094321.452:3193): avc: denied { search } for pid=5518 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.340040][ T30] audit: type=1400 audit(1758094321.452:3194): avc: denied { read } for pid=5518 comm="dhcpcd" name="n167" dev="tmpfs" ino=10549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1050.363441][ T30] audit: type=1400 audit(1758094321.452:3195): avc: denied { open } for pid=5518 comm="dhcpcd" path="/run/udev/data/n167" dev="tmpfs" ino=10549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1050.386571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1050.394874][ T30] audit: type=1400 audit(1758094321.452:3196): avc: denied { getattr } for pid=5518 comm="dhcpcd" path="/run/udev/data/n167" dev="tmpfs" ino=10549 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1050.418280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1050.468554][T15290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2001'. [ 1050.496715][T15086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.556824][T15086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.821111][T15299] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1050.821111][T15299] program syz.2.2003 not setting count and/or reply_len properly [ 1051.687564][T15086] team0: Port device team_slave_0 added [ 1051.724989][T15086] team0: Port device team_slave_1 added [ 1052.197088][T11354] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1052.486376][T11354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.592286][T11354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.660865][T11354] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1052.681106][T15086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.863094][T15086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.863849][T11354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.018947][T11354] usb 3-1: config 0 descriptor?? [ 1053.079800][T15086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.150081][T15086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.543685][T11354] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 1053.567901][T15086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.573555][T11354] hid-steam 0003:28DE:1142.0016: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1053.601642][T15329] Invalid ELF header magic: != ELF [ 1053.651798][T15086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.974969][T11354] hid-steam 0003:28DE:1142.0016: Steam wireless receiver connected [ 1054.353573][T15335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2009'. [ 1054.399710][T11354] hid-steam 0003:28DE:1142.0016: No HID_FEATURE_REPORT submitted - nothing to read [ 1054.418351][T11354] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 1054.438053][T11354] hid-steam 0003:28DE:1142.0017: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1054.484096][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 1054.484112][ T30] audit: type=1400 audit(1758094326.061:3241): avc: denied { remove_name } for pid=15336 comm="rm" name="resolv.conf.eth11.link" dev="tmpfs" ino=10748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.620859][ T30] audit: type=1400 audit(1758094326.093:3242): avc: denied { unlink } for pid=15336 comm="rm" name="resolv.conf.eth11.link" dev="tmpfs" ino=10748 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1054.826479][T11354] usb 3-1: USB disconnect, device number 71 [ 1054.836820][T15338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2009'. [ 1054.931877][T15086] hsr_slave_0: entered promiscuous mode [ 1054.983251][T11354] hid-steam 0003:28DE:1142.0016: Steam wireless receiver disconnected [ 1054.992614][T15086] hsr_slave_1: entered promiscuous mode [ 1055.016322][T15086] debugfs: 'hsr0' already exists in 'hsr' [ 1055.022052][T15086] Cannot create hsr debugfs directory [ 1055.647240][ T30] audit: type=1400 audit(1758094327.279:3243): avc: denied { mounton } for pid=15349 comm="syz.3.2012" path="/406/file0" dev="tmpfs" ino=2283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1056.118603][ T30] audit: type=1400 audit(1758094327.279:3244): avc: denied { mount } for pid=15349 comm="syz.3.2012" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1056.304222][ T30] audit: type=1400 audit(1758094327.279:3245): avc: denied { unlink } for pid=15349 comm="syz.3.2012" name="#107" dev="tmpfs" ino=2289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1056.482846][ T30] audit: type=1400 audit(1758094327.279:3246): avc: denied { mount } for pid=15349 comm="syz.3.2012" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1056.508453][T15360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2014'. [ 1057.586600][ T30] audit: type=1400 audit(1758094327.699:3247): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1057.610531][ T30] audit: type=1400 audit(1758094328.213:3248): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1057.631166][ T30] audit: type=1400 audit(1758094328.329:3249): avc: denied { create } for pid=15363 comm="syz.3.2013" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1057.655003][ T30] audit: type=1400 audit(1758094328.329:3250): avc: denied { map } for pid=15363 comm="syz.3.2013" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1059.078031][T15386] Invalid ELF header magic: != ELF [ 1059.360247][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 1059.463521][T15086] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1059.867334][T15086] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1060.486217][ T5933] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1060.534887][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1060.534903][ T30] audit: type=1400 audit(1758094331.982:3258): avc: denied { read write } for pid=15392 comm="syz.2.2019" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1060.675938][T15086] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1060.732008][ T5933] usb 5-1: device descriptor read/64, error -71 [ 1060.806306][T15086] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1060.902644][ T30] audit: type=1400 audit(1758094331.982:3259): avc: denied { open } for pid=15392 comm="syz.2.2019" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1061.255339][ T5933] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1061.322992][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1061.379888][ T5933] usb 5-1: device descriptor read/64, error -71 [ 1061.513766][ T5933] usb usb5-port1: attempt power cycle [ 1061.589062][T15416] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1062.095353][ T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1062.198204][ T24] usb 3-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config [ 1062.209543][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1062.219008][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1062.322498][ T5933] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1062.342946][ T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1062.373417][ T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1062.525134][T15086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.030413][ T24] usb 3-1: Product: syz [ 1063.038856][ T30] audit: type=1400 audit(1758094334.659:3260): avc: denied { mounton } for pid=15418 comm="syz.3.2022" path="/409/file0" dev="tmpfs" ino=2314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1063.042084][ T24] usb 3-1: Manufacturer: syz [ 1063.101472][ T30] audit: type=1400 audit(1758094334.680:3261): avc: denied { mount } for pid=15418 comm="syz.3.2022" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1063.103407][T15086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.188192][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.195351][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.226127][ T5933] usb 5-1: device descriptor read/8, error -71 [ 1063.343460][ T24] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1063.347321][ T30] audit: type=1400 audit(1758094335.362:3262): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1063.415227][T15086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1063.426874][T15086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1063.444957][ T30] audit: type=1400 audit(1758094335.467:3263): avc: denied { module_request } for pid=15086 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1063.490581][ T3037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.497828][ T3037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.601402][ T30] audit: type=1400 audit(1758094335.625:3264): avc: denied { read write } for pid=15424 comm="syz.4.2023" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1063.840822][ T30] audit: type=1400 audit(1758094335.625:3265): avc: denied { open } for pid=15424 comm="syz.4.2023" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1064.036487][ T30] audit: type=1400 audit(1758094335.761:3266): avc: denied { map } for pid=15428 comm="syz.3.2024" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1064.178429][T15437] tipc: Enabling of bearer rejected, already enabled [ 1064.681298][ T30] audit: type=1400 audit(1758094335.761:3267): avc: denied { execute } for pid=15428 comm="syz.3.2024" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1065.431137][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1065.431153][ T30] audit: type=1400 audit(1758094337.546:3274): avc: denied { watch watch_reads } for pid=15453 comm="syz.3.2028" path="/411" dev="tmpfs" ino=2321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1065.547459][T15086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.946716][ T30] audit: type=1400 audit(1758094337.714:3275): avc: denied { read } for pid=15459 comm="syz.3.2029" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1066.417067][ T30] audit: type=1400 audit(1758094337.714:3276): avc: denied { open } for pid=15459 comm="syz.3.2029" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1066.456613][T14311] usb 3-1: USB disconnect, device number 72 [ 1066.499074][ T30] audit: type=1400 audit(1758094338.659:3277): avc: denied { map_create } for pid=15459 comm="syz.3.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1066.532865][ T30] audit: type=1400 audit(1758094338.659:3278): avc: denied { create } for pid=15459 comm="syz.3.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1066.600362][ T30] audit: type=1400 audit(1758094338.659:3279): avc: denied { read write } for pid=5852 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1066.634371][ T30] audit: type=1400 audit(1758094338.659:3280): avc: denied { open } for pid=5852 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1066.711117][ T30] audit: type=1400 audit(1758094338.659:3281): avc: denied { ioctl } for pid=5852 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1066.747452][ T30] audit: type=1400 audit(1758094338.711:3282): avc: denied { sys_module } for pid=15086 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1066.840839][ T30] audit: type=1400 audit(1758094338.711:3283): avc: denied { module_request } for pid=15086 comm="syz-executor" kmod="netdevsim7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1067.370929][T15478] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1067.654654][T15472] binder: Bad value for 'max' [ 1067.715485][T15472] bridge0: entered allmulticast mode [ 1067.757401][T15472] bridge_slave_1: left allmulticast mode [ 1067.763420][T15472] bridge_slave_1: left promiscuous mode [ 1067.770781][T15472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.039101][T15487] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1068.039101][T15487] program syz.6.2034 not setting count and/or reply_len properly [ 1068.246586][ T5998] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1068.438150][T15472] bridge_slave_0: left allmulticast mode [ 1068.444077][T15472] bridge_slave_0: left promiscuous mode [ 1068.449858][T15472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.684601][ T5998] usb 5-1: Using ep0 maxpacket: 16 [ 1068.711325][ T5998] usb 5-1: config 0 has no interfaces? [ 1068.815044][ T5976] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1069.208799][T15497] Invalid ELF header magic: != ELF [ 1069.210677][ T5998] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1069.475204][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 1069.481368][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.499709][ T5998] usb 5-1: Product: syz [ 1069.509632][ T5976] usb 3-1: config 0 has no interfaces? [ 1069.548670][ T5998] usb 5-1: Manufacturer: syz [ 1069.553411][ T5998] usb 5-1: SerialNumber: syz [ 1069.701320][ T5998] usb 5-1: config 0 descriptor?? [ 1069.737964][ T5976] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1069.748974][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.789808][ T5976] usb 3-1: Product: syz [ 1069.818391][ T5976] usb 3-1: Manufacturer: syz [ 1069.830415][ T5976] usb 3-1: SerialNumber: syz [ 1070.079435][ T5976] usb 3-1: config 0 descriptor?? [ 1070.274550][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1070.274569][ T30] audit: type=1400 audit(1758094342.627:3324): avc: denied { bind } for pid=15499 comm="syz.3.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1070.332072][ T5998] usb 5-1: can't set config #0, error -71 [ 1070.357768][ T5998] usb 5-1: USB disconnect, device number 78 [ 1070.403847][T15086] veth0_vlan: entered promiscuous mode [ 1070.431019][T15086] veth1_vlan: entered promiscuous mode [ 1070.475178][ T30] audit: type=1400 audit(1758094342.837:3325): avc: denied { create } for pid=15485 comm="syz.2.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1070.495739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1070.503424][T15490] tipc: Enabling of bearer rejected, already enabled [ 1070.621400][ T30] audit: type=1400 audit(1758094342.847:3326): avc: denied { write } for pid=15485 comm="syz.2.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1070.658138][ T30] audit: type=1400 audit(1758094342.847:3327): avc: denied { read } for pid=15485 comm="syz.2.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1071.257578][ T30] audit: type=1400 audit(1758094343.068:3328): avc: denied { create } for pid=15512 comm="syz.6.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1071.285788][ T30] audit: type=1400 audit(1758094343.068:3329): avc: denied { bind } for pid=15512 comm="syz.6.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1071.305089][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.310164][T15086] veth0_macvtap: entered promiscuous mode [ 1071.360925][T15086] veth1_macvtap: entered promiscuous mode [ 1071.500924][ T30] audit: type=1400 audit(1758094343.068:3330): avc: denied { setopt } for pid=15512 comm="syz.6.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1071.567514][T15086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.649406][ T30] audit: type=1400 audit(1758094343.068:3331): avc: denied { accept } for pid=15512 comm="syz.6.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1071.688598][ T30] audit: type=1400 audit(1758094343.068:3332): avc: denied { write } for pid=15512 comm="syz.6.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1071.736246][T15086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.765937][ T30] audit: type=1400 audit(1758094343.068:3333): avc: denied { read } for pid=15512 comm="syz.6.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1071.993339][ T34] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.002947][ T34] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.061838][ T34] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.106881][ T34] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.650953][ T5998] usb 3-1: USB disconnect, device number 73 [ 1073.513034][T15531] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1073.819376][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.892069][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.224451][T15541] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1074.224451][T15541] program syz.2.2046 not setting count and/or reply_len properly [ 1074.442501][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1074.573044][T15543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2045'. [ 1074.853818][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.951072][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.292541][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1075.293654][ T30] audit: type=1400 audit(1758094347.897:3383): avc: denied { read write } for pid=15548 comm="syz.6.2048" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1075.500054][T15553] FAULT_INJECTION: forcing a failure. [ 1075.500054][T15553] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.525387][T15553] CPU: 0 UID: 0 PID: 15553 Comm: syz.2.2049 Not tainted syzkaller #0 PREEMPT(full) [ 1075.525406][T15553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1075.525414][T15553] Call Trace: [ 1075.525419][T15553] [ 1075.525425][T15553] dump_stack_lvl+0x16c/0x1f0 [ 1075.525446][T15553] should_fail_ex+0x512/0x640 [ 1075.525462][T15553] ? fs_reclaim_acquire+0xae/0x150 [ 1075.525480][T15553] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1075.525498][T15553] should_failslab+0xc2/0x120 [ 1075.525513][T15553] __kmalloc_noprof+0xd2/0x510 [ 1075.525528][T15553] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1075.525547][T15553] ? tomoyo_profile+0x47/0x60 [ 1075.525560][T15553] tomoyo_path_number_perm+0x245/0x580 [ 1075.525574][T15553] ? tomoyo_path_number_perm+0x237/0x580 [ 1075.525591][T15553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1075.525607][T15553] ? find_held_lock+0x2b/0x80 [ 1075.525635][T15553] ? find_held_lock+0x2b/0x80 [ 1075.525648][T15553] ? hook_file_ioctl_common+0x145/0x410 [ 1075.525664][T15553] ? __fget_files+0x20e/0x3c0 [ 1075.525680][T15553] security_file_ioctl+0x9b/0x240 [ 1075.525699][T15553] __x64_sys_ioctl+0xb7/0x210 [ 1075.525718][T15553] do_syscall_64+0xcd/0x4e0 [ 1075.525735][T15553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.525747][T15553] RIP: 0033:0x7f7bd178eba9 [ 1075.525758][T15553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1075.525770][T15553] RSP: 002b:00007f7bd269f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.525782][T15553] RAX: ffffffffffffffda RBX: 00007f7bd19d5fa0 RCX: 00007f7bd178eba9 [ 1075.525790][T15553] RDX: 0000200000000bc0 RSI: 000000008004510b RDI: 0000000000000003 [ 1075.525797][T15553] RBP: 00007f7bd269f090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.525804][T15553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.525811][T15553] R13: 00007f7bd19d6038 R14: 00007f7bd19d5fa0 R15: 00007ffc2e84c118 [ 1075.525835][T15553] [ 1075.526148][T15553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1075.748736][ T30] audit: type=1400 audit(1758094347.897:3384): avc: denied { open } for pid=15548 comm="syz.6.2048" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1075.804128][ T30] audit: type=1400 audit(1758094347.897:3385): avc: denied { mounton } for pid=15548 comm="syz.6.2048" path="/157/file0" dev="tmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1076.215950][ T30] audit: type=1400 audit(1758094347.897:3386): avc: denied { mount } for pid=15548 comm="syz.6.2048" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1076.271025][ T30] audit: type=1400 audit(1758094347.897:3387): avc: denied { mounton } for pid=15086 comm="syz-executor" path="/root/syzkaller.TEu3Ui/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1076.464080][ T30] audit: type=1400 audit(1758094347.897:3388): avc: denied { mount } for pid=15086 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1077.216234][ T30] audit: type=1400 audit(1758094347.907:3389): avc: denied { mount } for pid=15086 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1077.378399][ T30] audit: type=1400 audit(1758094347.918:3390): avc: denied { mounton } for pid=15086 comm="syz-executor" path="/root/syzkaller.TEu3Ui/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1077.412560][ T30] audit: type=1400 audit(1758094347.918:3391): avc: denied { mounton } for pid=15086 comm="syz-executor" path="/root/syzkaller.TEu3Ui/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1077.441491][ T30] audit: type=1400 audit(1758094348.107:3392): avc: denied { mounton } for pid=15086 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1077.852295][T15547] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1078.611844][T15547] usb 5-1: Using ep0 maxpacket: 16 [ 1078.672172][T15547] usb 5-1: config 0 has no interfaces? [ 1080.256388][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 1080.256431][ T30] audit: type=1400 audit(1758094351.970:3485): avc: denied { execmem } for pid=15596 comm="syz.6.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1080.282152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1080.431295][ T30] audit: type=1400 audit(1758094351.981:3486): avc: denied { cmd } for pid=15596 comm="syz.6.2057" path="socket:[41295]" dev="sockfs" ino=41295 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1080.629757][ T30] audit: type=1400 audit(1758094353.272:3487): avc: denied { create } for pid=15599 comm="syz.2.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1080.725033][ T30] audit: type=1400 audit(1758094353.408:3488): avc: denied { prog_load } for pid=15599 comm="syz.2.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1080.948284][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1080.963023][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1081.183634][T15609] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2059'. [ 1081.244722][ T30] audit: type=1400 audit(1758094353.408:3489): avc: denied { bpf } for pid=15599 comm="syz.2.2058" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1081.265846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.358364][T15611] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2059'. [ 1081.552113][ T30] audit: type=1400 audit(1758094353.408:3490): avc: denied { perfmon } for pid=15599 comm="syz.2.2058" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1081.783003][ T30] audit: type=1400 audit(1758094353.503:3491): avc: denied { read } for pid=15599 comm="syz.2.2058" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1081.805671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1082.412155][ T30] audit: type=1400 audit(1758094353.503:3492): avc: denied { open } for pid=15599 comm="syz.2.2058" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1083.516075][ T30] audit: type=1400 audit(1758094353.555:3493): avc: denied { read write } for pid=15599 comm="syz.2.2058" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1083.707613][ T30] audit: type=1400 audit(1758094353.555:3494): avc: denied { open } for pid=15599 comm="syz.2.2058" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1083.747757][T15547] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1083.830388][T15547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.911342][T15547] usb 5-1: Product: syz [ 1084.060340][T15547] usb 5-1: config 0 descriptor?? [ 1084.127913][T15547] usb 5-1: can't set config #0, error -32 [ 1084.200758][T15547] usb 5-1: USB disconnect, device number 79 [ 1084.722374][T15647] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1085.266901][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1085.266913][ T30] audit: type=1400 audit(1758094358.374:3527): avc: denied { unmount } for pid=5852 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1085.308643][ T30] audit: type=1400 audit(1758094358.405:3528): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1085.346470][ T30] audit: type=1400 audit(1758094358.416:3529): avc: denied { read write } for pid=15648 comm="syz.4.2066" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1085.539836][ T30] audit: type=1400 audit(1758094358.416:3530): avc: denied { open } for pid=15648 comm="syz.4.2066" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1086.111695][ T30] audit: type=1400 audit(1758094358.416:3531): avc: denied { ioctl } for pid=15648 comm="syz.4.2066" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1086.624839][ T30] audit: type=1400 audit(1758094358.447:3532): avc: denied { add_name } for pid=15614 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1086.649632][ T30] audit: type=1400 audit(1758094358.447:3533): avc: denied { create } for pid=15614 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1087.045130][ T30] audit: type=1400 audit(1758094358.447:3534): avc: denied { write } for pid=15614 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.ipv4ll" dev="tmpfs" ino=10991 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1087.274977][T15669] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1087.559032][ T30] audit: type=1400 audit(1758094358.447:3535): avc: denied { setopt } for pid=15648 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1087.583815][ T30] audit: type=1400 audit(1758094358.458:3536): avc: denied { append } for pid=15614 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" dev="tmpfs" ino=10991 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1087.608352][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.973004][T15679] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1087.973004][T15679] program syz.7.2071 not setting count and/or reply_len properly [ 1088.807499][T11354] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1088.984606][T11354] usb 3-1: Using ep0 maxpacket: 8 [ 1088.995987][T11354] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1089.013800][T11354] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.076981][T15691] validate_nla: 30 callbacks suppressed [ 1089.076999][T15691] netlink: 'syz.4.2075': attribute type 4 has an invalid length. [ 1089.090527][T15691] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2075'. [ 1089.116690][T11354] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1089.315942][T11354] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1089.352667][T11354] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.402240][T11354] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1089.435850][T15691] : renamed from bond0 (while UP) [ 1089.461209][T15547] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1089.530362][T11354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.928196][T11354] usb 3-1: usb_control_msg returned -32 [ 1090.323677][T15701] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1090.419764][T15547] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.430141][T15547] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1090.451609][T11354] usbtmc 3-1:16.0: can't read capabilities [ 1090.480837][T15547] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.534738][T15547] usb 7-1: config 0 descriptor?? [ 1090.628250][T15547] pwc: Askey VC010 type 2 USB webcam detected. [ 1090.715975][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1090.715991][ T30] audit: type=1400 audit(1758094364.095:3593): avc: denied { create } for pid=15672 comm="syz.2.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1090.921848][ T30] audit: type=1400 audit(1758094364.169:3594): avc: denied { write } for pid=15672 comm="syz.2.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1091.162377][ T30] audit: type=1400 audit(1758094364.179:3595): avc: denied { write } for pid=15672 comm="syz.2.2073" name="usbtmc0" dev="devtmpfs" ino=3874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1091.464565][T15547] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1091.516647][T15547] pwc: recv_control_msg error -32 req 02 val 2700 [ 1091.570408][ T30] audit: type=1400 audit(1758094364.347:3596): avc: denied { getattr } for pid=15694 comm="syz.6.2077" path="cgroup:[4026532791]" dev="nsfs" ino=4026532791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1091.804583][T15708] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1091.817186][ T5932] usb 3-1: USB disconnect, device number 74 [ 1091.842729][T15547] pwc: recv_control_msg error -32 req 04 val 1000 [ 1091.849877][ T30] audit: type=1400 audit(1758094364.431:3597): avc: denied { add_name } for pid=15689 comm="dhcpcd-run-hook" name="resolv.conf.eth12.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.890434][T15547] pwc: recv_control_msg error -32 req 04 val 1300 [ 1091.897511][T15547] pwc: recv_control_msg error -32 req 04 val 1400 [ 1091.917071][ T30] audit: type=1400 audit(1758094364.431:3598): avc: denied { create } for pid=15689 comm="dhcpcd-run-hook" name="resolv.conf.eth12.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1092.220970][T15547] pwc: recv_control_msg error -32 req 02 val 2000 [ 1092.847712][T15547] pwc: recv_control_msg error -71 req 04 val 1500 [ 1092.940413][T15732] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1093.340213][T15547] pwc: recv_control_msg error -71 req 02 val 2500 [ 1093.364379][T15547] pwc: recv_control_msg error -71 req 02 val 2400 [ 1093.388216][ T30] audit: type=1400 audit(1758094364.431:3599): avc: denied { write } for pid=15689 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth12.ipv4ll" dev="tmpfs" ino=11053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1093.429873][T15547] pwc: recv_control_msg error -71 req 02 val 2600 [ 1093.469276][T15547] pwc: recv_control_msg error -71 req 02 val 2900 [ 1093.482990][ T6286] IPVS: starting estimator thread 0... [ 1093.519986][T15547] pwc: recv_control_msg error -71 req 02 val 2800 [ 1093.543834][T15547] pwc: recv_control_msg error -71 req 04 val 1100 [ 1093.550540][ T30] audit: type=1400 audit(1758094364.431:3600): avc: denied { append } for pid=15689 comm="dhcpcd-run-hook" name="resolv.conf.eth12.ipv4ll" dev="tmpfs" ino=11053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1093.578902][T15547] pwc: recv_control_msg error -71 req 04 val 1200 [ 1093.600244][ T30] audit: type=1400 audit(1758094364.547:3601): avc: denied { create } for pid=15710 comm="syz.3.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1093.625038][T15739] IPVS: using max 40 ests per chain, 96000 per kthread [ 1093.643054][T15547] pwc: Registered as video103. [ 1093.668504][T15547] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input36 [ 1093.787312][ T6286] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1093.824684][ T30] audit: type=1400 audit(1758094364.547:3602): avc: denied { write } for pid=15710 comm="syz.3.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1094.284041][T15547] usb 7-1: USB disconnect, device number 38 [ 1094.408603][ T6286] usb 8-1: Using ep0 maxpacket: 16 [ 1094.422439][ T6286] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.664784][ T6286] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1094.849041][ T6286] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.875797][ T6286] usb 8-1: config 0 descriptor?? [ 1094.970883][T15753] binder: Bad value for 'max' [ 1094.980896][T15753] bridge0: entered allmulticast mode [ 1095.001444][T15753] bridge_slave_1: left allmulticast mode [ 1095.011253][T15753] bridge_slave_1: left promiscuous mode [ 1095.021827][T15753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.218243][T15753] bridge_slave_0: left allmulticast mode [ 1095.244661][T15753] bridge_slave_0: left promiscuous mode [ 1095.385706][T15753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.511644][ T6286] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1095.604729][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1095.604748][ T30] audit: type=1400 audit(1758094369.218:3630): avc: denied { setopt } for pid=15734 comm="syz.3.2086" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1095.631821][ C1] ================================================================== [ 1095.631840][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0 [ 1095.631895][ C1] Read of size 1 at addr ffff88804a837fff by task kauditd/30 [ 1095.631917][ C1] [ 1095.631930][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted syzkaller #0 PREEMPT(full) [ 1095.631965][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1095.631983][ C1] Call Trace: [ 1095.631991][ C1] [ 1095.632001][ C1] dump_stack_lvl+0x116/0x1f0 [ 1095.632034][ C1] print_report+0xcd/0x630 [ 1095.632066][ C1] ? __virt_addr_valid+0x81/0x610 [ 1095.632101][ C1] ? __phys_addr+0xe8/0x180 [ 1095.632139][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 1095.632178][ C1] kasan_report+0xe0/0x110 [ 1095.632204][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 1095.632245][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 1095.632283][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1095.632317][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 1095.632353][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 1095.632407][ C1] hid_irq_in+0x35e/0x870 [ 1095.632454][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 1095.632482][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 1095.632511][ C1] dummy_timer+0x1814/0x3a30 [ 1095.632562][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1095.632588][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1095.632622][ C1] ? mark_held_locks+0x49/0x80 [ 1095.632670][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1095.632709][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1095.632742][ C1] __hrtimer_run_queues+0x202/0xad0 [ 1095.632784][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1095.632821][ C1] ? read_tsc+0x9/0x20 [ 1095.632865][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1095.632903][ C1] handle_softirqs+0x219/0x8e0 [ 1095.632945][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1095.632987][ C1] __irq_exit_rcu+0x109/0x170 [ 1095.633024][ C1] irq_exit_rcu+0x9/0x30 [ 1095.633061][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1095.633098][ C1] [ 1095.633108][ C1] [ 1095.633119][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1095.633152][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 1095.633193][ C1] Code: 00 e8 22 d4 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 a0 e8 20 00 48 85 db 0f 85 55 01 00 00 e8 22 ed 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 77 4c 87 [ 1095.633225][ C1] RSP: 0018:ffffc90000a679c8 EFLAGS: 00000293 [ 1095.633249][ C1] RAX: ffffffff8f2ed958 RBX: 0000000000000000 RCX: ffffffff819ab010 [ 1095.633269][ C1] RDX: ffff88801ea9c880 RSI: ffffffff819ab01e RDI: 0000000000000007 [ 1095.633289][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1095.633308][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f2ed958 [ 1095.633328][ C1] R13: ffffffff8f2ed900 R14: ffffc90000a67a58 R15: dffffc0000000000 [ 1095.633353][ C1] ? console_flush_all+0x990/0xc60 [ 1095.633397][ C1] ? console_flush_all+0x99e/0xc60 [ 1095.633437][ C1] ? console_flush_all+0x99e/0xc60 [ 1095.633478][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1095.633522][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1095.633568][ C1] console_unlock+0xd8/0x210 [ 1095.633598][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1095.633628][ C1] ? do_raw_spin_unlock+0xa0/0x230 [ 1095.633657][ C1] ? _printk+0xc7/0x100 [ 1095.633682][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 1095.633714][ C1] vprintk_emit+0x418/0x6d0 [ 1095.633745][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1095.633781][ C1] ? find_held_lock+0x2b/0x80 [ 1095.633820][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1095.633868][ C1] _printk+0xc7/0x100 [ 1095.633889][ C1] ? __pfx__printk+0x10/0x10 [ 1095.633915][ C1] ? netlink_has_listeners+0x20f/0x430 [ 1095.633954][ C1] ? __pfx____ratelimit+0x10/0x10 [ 1095.633990][ C1] ? kauditd_hold_skb+0x1bc/0x250 [ 1095.634037][ C1] kauditd_hold_skb+0x205/0x250 [ 1095.634077][ C1] kauditd_send_queue+0x236/0x290 [ 1095.634116][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1095.634160][ C1] kauditd_thread+0x623/0xa70 [ 1095.634200][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 1095.634246][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1095.634286][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1095.634320][ C1] ? __kthread_parkme+0x19e/0x250 [ 1095.634359][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 1095.634408][ C1] kthread+0x3c2/0x780 [ 1095.634435][ C1] ? __pfx_kthread+0x10/0x10 [ 1095.634462][ C1] ? rcu_is_watching+0x12/0xc0 [ 1095.634494][ C1] ? __pfx_kthread+0x10/0x10 [ 1095.634517][ C1] ret_from_fork+0x56a/0x730 [ 1095.634539][ C1] ? __pfx_kthread+0x10/0x10 [ 1095.634561][ C1] ret_from_fork_asm+0x1a/0x30 [ 1095.634600][ C1] [ 1095.634609][ C1] [ 1095.634616][ C1] Allocated by task 15730: [ 1095.634630][ C1] kasan_save_stack+0x33/0x60 [ 1095.634657][ C1] kasan_save_track+0x14/0x30 [ 1095.634683][ C1] __kasan_slab_alloc+0x89/0x90 [ 1095.634711][ C1] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1095.634740][ C1] kmalloc_reserve+0x18b/0x2c0 [ 1095.634777][ C1] __alloc_skb+0x166/0x380 [ 1095.634807][ C1] skb_copy+0x1c9/0x3a0 [ 1095.634831][ C1] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb6e/0x13c0 [ 1095.634870][ C1] mac80211_hwsim_tx_frame+0x1f1/0x2a0 [ 1095.634905][ C1] mac80211_hwsim_beacon_tx+0x592/0xa40 [ 1095.634945][ C1] __iterate_interfaces+0x2e5/0x650 [ 1095.634976][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1095.635012][ C1] mac80211_hwsim_beacon+0x105/0x200 [ 1095.635040][ C1] __hrtimer_run_queues+0x202/0xad0 [ 1095.635070][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1095.635099][ C1] handle_softirqs+0x219/0x8e0 [ 1095.635127][ C1] __irq_exit_rcu+0x109/0x170 [ 1095.635157][ C1] irq_exit_rcu+0x9/0x30 [ 1095.635188][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1095.635218][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1095.635248][ C1] [ 1095.635255][ C1] Freed by task 34: [ 1095.635266][ C1] kasan_save_stack+0x33/0x60 [ 1095.635289][ C1] kasan_save_track+0x14/0x30 [ 1095.635313][ C1] kasan_save_free_info+0x3b/0x60 [ 1095.635347][ C1] __kasan_slab_free+0x60/0x70 [ 1095.635373][ C1] kmem_cache_free+0x2d1/0x4d0 [ 1095.635405][ C1] skb_free_head+0x1b7/0x210 [ 1095.635430][ C1] skb_release_data+0x795/0x9e0 [ 1095.635459][ C1] sk_skb_reason_drop+0x129/0x1a0 [ 1095.635494][ C1] ieee80211_iface_work+0x435/0x1360 [ 1095.635520][ C1] cfg80211_wiphy_work+0x2c4/0x580 [ 1095.635551][ C1] process_one_work+0x9cc/0x1b70 [ 1095.635579][ C1] worker_thread+0x6c8/0xf10 [ 1095.635607][ C1] kthread+0x3c2/0x780 [ 1095.635630][ C1] ret_from_fork+0x56a/0x730 [ 1095.635653][ C1] ret_from_fork_asm+0x1a/0x30 [ 1095.635685][ C1] [ 1095.635692][ C1] The buggy address belongs to the object at ffff88804a837a80 [ 1095.635692][ C1] which belongs to the cache skbuff_small_head of size 704 [ 1095.635716][ C1] The buggy address is located 703 bytes to the right of [ 1095.635716][ C1] allocated 704-byte region [ffff88804a837a80, ffff88804a837d40) [ 1095.635745][ C1] [ 1095.635752][ C1] The buggy address belongs to the physical page: [ 1095.635765][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a834 [ 1095.635790][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1095.635813][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1095.635851][ C1] page_type: f5(slab) [ 1095.635877][ C1] raw: 00fff00000000040 ffff88801eec4c80 dead000000000100 dead000000000122 [ 1095.635905][ C1] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 1095.635932][ C1] head: 00fff00000000040 ffff88801eec4c80 dead000000000100 dead000000000122 [ 1095.635957][ C1] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 1095.635985][ C1] head: 00fff00000000002 ffffea00012a0d01 00000000ffffffff 00000000ffffffff [ 1095.636010][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1095.636026][ C1] page dumped because: kasan: bad access detected [ 1095.636043][ C1] page_owner tracks the page as allocated [ 1095.636054][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 136, tgid 136 (kworker/u8:5), ts 870400074922, free_ts 860524534723 [ 1095.636108][ C1] post_alloc_hook+0x1c0/0x230 [ 1095.636156][ C1] get_page_from_freelist+0x132b/0x38e0 [ 1095.636186][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1095.636215][ C1] alloc_pages_mpol+0x1fb/0x550 [ 1095.636248][ C1] new_slab+0x247/0x330 [ 1095.636290][ C1] ___slab_alloc+0xcf2/0x1750 [ 1095.636333][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 1095.636378][ C1] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 1095.636413][ C1] kmalloc_reserve+0x18b/0x2c0 [ 1095.636454][ C1] __alloc_skb+0x166/0x380 [ 1095.636485][ C1] ip_frag_next+0x121/0xa60 [ 1095.636523][ C1] ip_do_fragment+0x8eb/0x18b0 [ 1095.636561][ C1] ip_fragment.constprop.0+0x161/0x230 [ 1095.636601][ C1] __ip_finish_output.part.0+0x273/0x350 [ 1095.636642][ C1] ip_output+0x35e/0xa10 [ 1095.636680][ C1] __ip_queue_xmit+0x1d30/0x2620 [ 1095.636720][ C1] page last free pid 11784 tgid 11784 stack trace: [ 1095.636737][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 1095.636780][ C1] qlist_free_all+0x4d/0x120 [ 1095.636804][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 1095.636831][ C1] __kasan_slab_alloc+0x69/0x90 [ 1095.636860][ C1] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1095.636888][ C1] getname_flags.part.0+0x4c/0x550 [ 1095.636932][ C1] getname_flags+0x93/0xf0 [ 1095.636959][ C1] user_path_at+0x24/0x60 [ 1095.636987][ C1] __x64_sys_umount+0x10a/0x1a0 [ 1095.637019][ C1] do_syscall_64+0xcd/0x4e0 [ 1095.637056][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.637085][ C1] [ 1095.637092][ C1] Memory state around the buggy address: [ 1095.637107][ C1] ffff88804a837e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1095.637129][ C1] ffff88804a837f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1095.637150][ C1] >ffff88804a837f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1095.637166][ C1] ^ [ 1095.637185][ C1] ffff88804a838000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.637206][ C1] ffff88804a838080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1095.637223][ C1] ================================================================== [ 1095.637240][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1095.637261][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted syzkaller #0 PREEMPT(full) [ 1095.637297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1095.637317][ C1] Call Trace: [ 1095.637327][ C1] [ 1095.637339][ C1] dump_stack_lvl+0x3d/0x1f0 [ 1095.637385][ C1] vpanic+0x6e8/0x7a0 [ 1095.637431][ C1] ? __pfx_vpanic+0x10/0x10 [ 1095.637478][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1095.637521][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 1095.637566][ C1] panic+0xca/0xd0 [ 1095.637587][ C1] ? __pfx_panic+0x10/0x10 [ 1095.637615][ C1] ? end_report+0x4c/0x170 [ 1095.637646][ C1] ? rcu_is_watching+0x12/0xc0 [ 1095.637685][ C1] ? lock_release+0x201/0x2f0 [ 1095.637733][ C1] check_panic_on_warn+0xab/0xb0 [ 1095.637763][ C1] end_report+0x107/0x170 [ 1095.637790][ C1] kasan_report+0xee/0x110 [ 1095.637817][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 1095.637859][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 1095.637899][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1095.637931][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 1095.637960][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 1095.637996][ C1] hid_irq_in+0x35e/0x870 [ 1095.638032][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 1095.638056][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 1095.638080][ C1] dummy_timer+0x1814/0x3a30 [ 1095.638121][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1095.638146][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1095.638172][ C1] ? mark_held_locks+0x49/0x80 [ 1095.638206][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1095.638234][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1095.638259][ C1] __hrtimer_run_queues+0x202/0xad0 [ 1095.638290][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1095.638317][ C1] ? read_tsc+0x9/0x20 [ 1095.638350][ C1] hrtimer_run_softirq+0x17d/0x350 [ 1095.638379][ C1] handle_softirqs+0x219/0x8e0 [ 1095.638415][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1095.638446][ C1] __irq_exit_rcu+0x109/0x170 [ 1095.638474][ C1] irq_exit_rcu+0x9/0x30 [ 1095.638501][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1095.638529][ C1] [ 1095.638537][ C1] [ 1095.638545][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1095.638570][ C1] RIP: 0010:console_flush_all+0x9a2/0xc60 [ 1095.638600][ C1] Code: 00 e8 22 d4 28 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 a0 e8 20 00 48 85 db 0f 85 55 01 00 00 e8 22 ed 20 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 77 4c 87 [ 1095.638624][ C1] RSP: 0018:ffffc90000a679c8 EFLAGS: 00000293 [ 1095.638647][ C1] RAX: ffffffff8f2ed958 RBX: 0000000000000000 RCX: ffffffff819ab010 [ 1095.638664][ C1] RDX: ffff88801ea9c880 RSI: ffffffff819ab01e RDI: 0000000000000007 [ 1095.638679][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1095.638698][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8f2ed958 [ 1095.638712][ C1] R13: ffffffff8f2ed900 R14: ffffc90000a67a58 R15: dffffc0000000000 [ 1095.638732][ C1] ? console_flush_all+0x990/0xc60 [ 1095.638759][ C1] ? console_flush_all+0x99e/0xc60 [ 1095.638788][ C1] ? console_flush_all+0x99e/0xc60 [ 1095.638818][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 1095.638850][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1095.638883][ C1] console_unlock+0xd8/0x210 [ 1095.638909][ C1] ? __pfx_console_unlock+0x10/0x10 [ 1095.638936][ C1] ? do_raw_spin_unlock+0xa0/0x230 [ 1095.638961][ C1] ? _printk+0xc7/0x100 [ 1095.638981][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 1095.639005][ C1] vprintk_emit+0x418/0x6d0 [ 1095.639033][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1095.639062][ C1] ? find_held_lock+0x2b/0x80 [ 1095.639091][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1095.639128][ C1] _printk+0xc7/0x100 [ 1095.639147][ C1] ? __pfx__printk+0x10/0x10 [ 1095.639169][ C1] ? netlink_has_listeners+0x20f/0x430 [ 1095.639198][ C1] ? __pfx____ratelimit+0x10/0x10 [ 1095.639225][ C1] ? kauditd_hold_skb+0x1bc/0x250 [ 1095.639261][ C1] kauditd_hold_skb+0x205/0x250 [ 1095.639297][ C1] kauditd_send_queue+0x236/0x290 [ 1095.639332][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1095.639369][ C1] kauditd_thread+0x623/0xa70 [ 1095.639408][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 1095.639445][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1095.639478][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1095.639507][ C1] ? __kthread_parkme+0x19e/0x250 [ 1095.639542][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 1095.639577][ C1] kthread+0x3c2/0x780 [ 1095.639599][ C1] ? __pfx_kthread+0x10/0x10 [ 1095.639621][ C1] ? rcu_is_watching+0x12/0xc0 [ 1095.639650][ C1] ? __pfx_kthread+0x10/0x10 [ 1095.639673][ C1] ret_from_fork+0x56a/0x730 [ 1095.639694][ C1] ? __pfx_kthread+0x10/0x10 [ 1095.639716][ C1] ret_from_fork_asm+0x1a/0x30 [ 1095.639750][ C1] [ 1095.639968][ C1] Kernel Offset: disabled