last executing test programs: 12m8.870559897s ago: executing program 1 (id=321): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = timerfd_create(0x8, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x130, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)={0x28, r4, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}}, 0x28044005) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timerfd_create(0x9, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8, @ANYRES8, @ANYRES16], 0x118) semop(0x0, &(0x7f0000000200), 0x53) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r9, @ANYRESDEC=r9], 0x5c}, 0x1, 0x0, 0x0, 0x8140}, 0x0) r10 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) r11 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)}) ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, 0x0) 12m7.803091271s ago: executing program 1 (id=323): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='vfat\x00', 0x2010040, 0x0) r2 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r3 = syz_open_procfs$pagemap(r2, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000006c0)={0x60, 0x0, &(0x7f000010d000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x80, 0x0, 0x0, 0x3, 0x67, 0x0, 0x8, 0xe}) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[], 0x0) 12m4.478423808s ago: executing program 1 (id=331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m3.940455328s ago: executing program 1 (id=332): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x832f, 0xc000, 0x7, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x1002219, 0x7721, 0x52, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r1, 0xb) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 12m0.959554187s ago: executing program 1 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x25, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m0.077113563s ago: executing program 1 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="200004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000040a01050000000000000000020000030900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x4014) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0xcabe, 0x1, 0xfffff000, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x844) 11m44.86014973s ago: executing program 32 (id=344): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setrlimit(0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="200004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000040a01050000000000000000020000030900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x4014) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0xcabe, 0x1, 0xfffff000, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x844) 10m3.177040958s ago: executing program 5 (id=888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r4, 0x0, 0x0}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="b805000000b972f25f210f01c1c4018573dd00c4a37d04ce40c4e2999ddc410f21172e470f070f3066b8ca000f00d0c74424002b010000c74424023f780000ff1c240f20e035000002000f22e0", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m2.24852274s ago: executing program 5 (id=894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f00000001c0)="c082b44eb524", 0x6}, {&(0x7f0000000240)="7fb8551016366a65b409fcf3f0dd", 0xe}], 0x3) 10m1.939284319s ago: executing program 5 (id=897): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) r1 = gettid() socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x832f, 0xc000, 0x7, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) io_uring_enter(r2, 0x1002219, 0x7721, 0x52, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r1, 0xb) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8060010) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 10m1.528629465s ago: executing program 5 (id=901): prlimit64(0x0, 0xd, &(0x7f0000000200)={0xd, 0x8}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000480)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x565c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4004050) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25190000002000018008000300047a68001800020067726573a3e374617030000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) read$FUSE(r3, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r6, r6) r7 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 9m58.063894658s ago: executing program 5 (id=919): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x96) r0 = socket$inet(0x2, 0x3, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = epoll_create1(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r4, &(0x7f0000000500)={&(0x7f0000000000), 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0xa0000019}) finit_module(r3, 0x0, 0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, &(0x7f0000000340)={[0xfff]}, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080)=0xfffffffa, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x177) 9m56.674834612s ago: executing program 5 (id=925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x22}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x40, "217d66d38547aa140db8a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r7 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000000e100"/20], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) rt_sigprocmask(0x0, &(0x7f00000002c0), &(0x7f0000000380), 0x8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={r6, @broadcast, @empty}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r9, 0x0, 0x4ffe6, 0x0) fsopen(&(0x7f0000000180)='logfs\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) 9m55.51614592s ago: executing program 33 (id=925): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0xa, 0x0, 0x80000, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x22}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x40, "217d66d38547aa140db8a200000000c538c7"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r7 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000054000100040000000000000807000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000000e100"/20], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) rt_sigprocmask(0x0, &(0x7f00000002c0), &(0x7f0000000380), 0x8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={r6, @broadcast, @empty}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r9, 0x0, 0x4ffe6, 0x0) fsopen(&(0x7f0000000180)='logfs\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) 8m4.25057266s ago: executing program 2 (id=1420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r0}, 0xc) (fail_nth: 2) 8m3.921778711s ago: executing program 2 (id=1421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') readv(r1, &(0x7f0000000400)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1) 8m1.559325824s ago: executing program 2 (id=1430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002f40)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0xc4) 7m57.929655466s ago: executing program 2 (id=1451): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x5, 0x2, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') readv(r0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1) 7m55.199760429s ago: executing program 2 (id=1464): r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000140), 0x4001) r5 = dup(0xffffffffffffffff) read$FUSE(r5, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18, 0x24, r6, {0xfff}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfffffdfb}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711204000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb58}, 0x94) semget$private(0x0, 0x6, 0x486) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x0, 0xffffffff}, {0x3, 0xffffffff}, {0x0, 0xffff}, {0x0, 0x1}, {0x4}, {0x0, 0x409}, {0x0, 0x800000}, {0x5, 0xffffffff}, {0x0, 0x2}, {0x0, 0x1}, {0x0, 0x2}, {0x0, 0x60}], 0x10, 0x0, 0x0, 0x8000000}) 7m51.258845168s ago: executing program 2 (id=1474): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 7m36.12055923s ago: executing program 34 (id=1474): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 12.027011771s ago: executing program 3 (id=3421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x0, 0x800005, 0x7ff, 0x7d500000, 0x5}, 0x14) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x1, '\x00', 0x5}, {0x83, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7c, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x20, 0x23, '\x00', 0x3}, {0x3, 0x7, 0xd1, '\x00', 0x6}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x46, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0x9}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000000)={0x120001, 0x0, {[0x3, 0xfffffffffffffffd, 0x7f, 0x80000001, 0x3, 0x9, 0x0, 0x5]}}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0xa, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) (async) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x800, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900"}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0xb, 0xffffffffffffffff}) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000340)) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x80000001}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x529}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.909794171s ago: executing program 0 (id=3423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f019d050000000f011b66bad104b88eaaa41bef2ef30fa7e0de5098c4e2f99d630066bad004ed0f8903140000360f01cf263e3e0f01cb", 0x37}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) getgroups(0x0, 0x0) 10.838522039s ago: executing program 3 (id=3424): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x20000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0x3, 0xec, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) 9.582484944s ago: executing program 0 (id=3429): modify_ldt$write(0x1, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x2, 0x0, 0x5}) 9.552693245s ago: executing program 3 (id=3430): unshare(0x6a040000) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002d0110a801c0002800900020073797a32000000000900020073797a30000000"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) sendmsg$can_bcm(r2, 0x0, 0x0) lchown(0x0, 0x0, 0xee01) unshare(0x40000000) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'filter\x00', 0x0, 0x1e010000, 0x0, [0x1, 0x5, 0x4, 0x8a0f, 0x7fff, 0x200]}, &(0x7f0000000100)=0x78) 8.522530779s ago: executing program 6 (id=3434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x10}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100197243b209911569090d60102030909021b0002096e1272ab332fc6f3f991ca0709048a0a00ffff30ff"], 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="54000000000101040000000000000000020000001c00f57f080002400000007a0800034000007fff080001400800000e2400018014000180080001080000000000000000e00000010c00028004ab308c08000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1194}, 0x7310bd3a32af6720) 6.948018184s ago: executing program 7 (id=3437): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x90) syz_init_net_socket$rose(0xb, 0x5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="030303fbfffffcdbdf253d000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x400001ff, 0x2, 0x7, "d17189070600000009523910000003000800", 0x802042, 0x200068e}) setresuid(r2, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x38}}, 0x0) 5.64169974s ago: executing program 7 (id=3438): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x8001, 0xa, 0x1, 0x0, 0xfffffffd, 0xcc7, 0x8, 0x7, 0xffffff04, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a44a, 0x0, 0x40000003, 0x89, 0x2, 0x6a, 0x6, 0xb, 0x8, 0x400005, 0x5, 0x4, 0x10000, 0xfffffff8, 0x1f00]}) 5.520053137s ago: executing program 7 (id=3439): syz_usb_connect(0x5, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x3, 0x2, 0xfffffffffffffffe, 0xb3b, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0x7) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r8) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) write$P9_RSTATu(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x224) keyctl$clear(0x7, r8) 5.517292782s ago: executing program 0 (id=3440): r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x659, 0x8000000, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x100000000000000) 5.09426514s ago: executing program 4 (id=3441): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4010000", @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x8020}, 0x4008044) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000500)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RGETLOCK(r5, 0x0, 0x2d) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001a00000200000000000000001400fc00fe80000000000000000000004000000e06001b80d48119f470d00b35807e942bad32472e"], 0x28}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000090601020000000000000000004000000900f7c06943659898330000050001000700000004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 4.624878171s ago: executing program 6 (id=3442): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0xa00000, 0x7, 0x5f, r4, 0x0, &(0x7f0000000240)={0x9909df, 0x3, '\x00', @p_u16=&(0x7f0000000200)=0x8}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57d4"], 0x0) 4.503290969s ago: executing program 4 (id=3443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0xa, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) 4.314608746s ago: executing program 4 (id=3444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="3ef244c6c492f20f2203f242a60f20e035000040000f22e0c4c13dd57cba00670fe0788066baf80cb8b64e4c8def66bafc0c66b8c70066ef0f01cf4c0fc759f366f3450fbd37", 0x46}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x2c2) 4.313763904s ago: executing program 3 (id=3445): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x60000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x3fffffff, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c2, 0xc598, 0x7, 0x5, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {0xfff1, 0x2}, {0xd, 0x3}}, ["", "", "", ""]}, 0x27}, 0x1, 0x0, 0x0, 0x48801}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9c9, 0x83}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) 4.144141899s ago: executing program 6 (id=3446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x3c, 0x3e9, 0x20, 0x70bd25, 0x25dfdbff, {0x32, 0x0, 0x0, r0, 0x6, 0x833, 0x800, 0x0, 0x0, 0x0, 0x7}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(r1, 0x118, 0x2, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x8c, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76"]) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x111, @private0, 0x7}], 0x1c) r4 = socket(0x2d, 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xa}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd00000000df2504f70000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@multiplanar_mmap={0x9, 0x2, 0x4, 0x0, 0x4, {}, {0x1, 0x0, 0x8, 0x8, 0x4, 0x3f, "c1f58acb"}, 0x7, 0x1, {&(0x7f0000000580)=[{0x10001, 0x8, {0x1}, 0xffff}, {0x5, 0x0, {0xae9}, 0xd}]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac8000000060a09040000000000000000020002000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000000800024000000000080005400000000008000340000000860800064000000020"], 0xf0}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) 4.019514621s ago: executing program 0 (id=3447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01e"], 0x1c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) write$cgroup_int(r4, &(0x7f0000000040)=0x800000000001c8, 0x12) recvmmsg$unix(r2, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f00000007c0)=""/15, 0xf}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000bc0)=""/171, 0xab}], 0x9, &(0x7f0000000800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)}}, {{&(0x7f0000000c80), 0x6e, &(0x7f0000004e40)=[{&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f0000000dc0)=""/203, 0xcb}, {&(0x7f0000000ec0)=""/2, 0x2}, {&(0x7f0000000f00)=""/178, 0xb2}, {&(0x7f0000000fc0)=""/174, 0xae}, {&(0x7f0000001080)=""/89, 0x59}, {&(0x7f0000001100)=""/49, 0x31}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000001140)=""/158, 0x9e}], 0x9, &(0x7f00000012c0)}}, {{&(0x7f0000001300)=@abs, 0x6e, &(0x7f0000001400), 0x0, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000004600)=""/9, 0x9}, {&(0x7f0000000900)=""/78, 0x4e}, {&(0x7f0000000980)=""/82, 0x52}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/150, 0x96}], 0x5}}, {{&(0x7f0000004680), 0x6e, &(0x7f0000004c40)}}], 0x6, 0x34000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f00000001c0), 0x0) socket(0x15, 0x1, 0xff) ioprio_set$pid(0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, &(0x7f00000000c0)={0x6}, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) 2.6066364s ago: executing program 4 (id=3448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x84, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x40) 2.51043489s ago: executing program 6 (id=3449): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000030000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0xffffffffffffffc6}, 0x94) 2.347828367s ago: executing program 7 (id=3450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB="248000001800010000000000000000001d01080008000a00cfaf033b55463c3c91e130adb0da0f802f0b5399e9f47c6b0d7d86ac9291927fdae61bc6d53a2b0f0cd4d83c458895", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC], 0x24}}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000080000000000000039bf075038f986ab5a45f0c44059b35a4043a0edb9487e7c8f5a1ae54ff9a54db6e60a0d353c1b138e1712a2905a8459464304f2cb2c82b6da580e3c2811dd2b1a71010580d963980eeeaf7cb7cda375eeba60af1fb44586662745278d4d"], &(0x7f0000000040)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb, r1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xa8d4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40858}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1dc65b5e, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 1.50284419s ago: executing program 6 (id=3451): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x5931c0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='cgroup\x00') syz_fuse_handle_req(r3, &(0x7f0000000ac0)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x80000000}) 1.434663855s ago: executing program 4 (id=3452): syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0x10, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8001, 0x7, 0x7ffe, 0x5, 0x3ff, 0x401432d}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x227b, 0x8, 0x80000000, 0xffff, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0x400c890) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0xe00}, 0x0) 1.416749684s ago: executing program 0 (id=3453): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4010000", @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x8020}, 0x4008044) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000500)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RGETLOCK(r5, 0x0, 0x2d) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001a00000200000000000000001400fc00fe80000000000000000000004000000e06001b80d48119f470d00b35807e942bad32472e"], 0x28}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000090601020000000000000000004000000900f7c06943659898330000050001000700000004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.32688496s ago: executing program 7 (id=3454): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r6, 0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000400)={0x0, 0xfffffe66, &(0x7f00000003c0)={&(0x7f0000000180)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r9, &(0x7f0000000000)=0x2b00, 0x12) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r9, 0x40bc5311, &(0x7f0000000100)={0x9, 0x2, 'client0\x00', 0x80000002, "3f4106ff342c5c5d", "551bc17fc80f292a5efb1725e11b4265e5cea3deea7a7051cdd7d307638ae75f", 0x2, 0xfffffff9}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x1, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x50}], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) 1.325884358s ago: executing program 6 (id=3455): bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe2$9p(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0x87) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01'], 0x700}) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) 716.104124ms ago: executing program 3 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000e80)="94d1f2e1ab95afe67e299cbc47530ccadacb8ecabe3c73ac55d925a0d52a79ceedae83cf90a1789f07fbde8a75991d1e775ce7bdb15e59273429b52a246643318051f60e", 0x44}, {&(0x7f00000009c0)="18dff49858454fa491119b39f4ec02355402d69d02218513b580502ab73969fb7558b897e3b30d7d9c163303e86c133317f29d7e6e36c73e48253f01c272ec92fbc348244d10ce2c6bf23ea037d0557d84d20daea2bf3c058abfe432abbd8e9caa85ad0b8735520934a1d67b761b5dc37cf6e5f8c97d4bd70594b5a70a07775b2be008eed722b8555654b1c72c9847787cac29cbaa00434abf377f953fe1f06ff3cbe07550b6a7bde2bc7d5c5b68753a4d94bdeb60c704ec50fc674079ea876dfba754ac108a5b9c6ad9dfbf1b1349e3df787b38ca6398943f11669967824c3e4370e238708d7738c140b959ba9a5694b614843e", 0xf4}, {&(0x7f0000000f00)="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", 0x102}, {&(0x7f0000000c40)="202bb0415639f0c1e98ad3c35ba126faa9e43e618c9679bae2c30304d1850473f4102215ea2a192d9901b0785473c381e7904a63aba8ed92e2c3d8daf88f68dd5f5d04804a0331ff16ba0ccb9c36956022c1f7656660e773c38b9cf90e3d684ca95b5283b1ff10efc0b8351d0fe7423a3e5158c1e0e4831ecc8df81a0f8827e5c49556cabf334789727d6414d056bd6fb1a1311c748dfdc72879c6091c30be23580eecd40e8c40713768764e450ab8d5d28c905d5b4dc64f1a", 0xb9}, {&(0x7f0000000d00)="845a6ee005638b2ad5dfa946f0633199a56cfa28b954f52ce3bc96ed1ffc361391d7d17045334ce9d5bce43aec5764594c6990570a911f8e19b67ac28237444f36db4d873eb720364e02738406b1db285123e01365ddb94decdbe7fb481edcddf8fc77a271c54201dd827c7283600fda09663bac7efb887e41cb330805bbba05cea8248bad80d8c3df57d2b83ce207239a2f0efd1c414d737315e3a650cd62caad58b3f1bb8b3732b3fa1ed3d38a9088490ba4a8c694e3c07f5953bdff4a145188e9c60155529b3ba1595fbce830268d5a21eec04c46e1950d2f167ff9fff49cd6111017294bf8c5d2", 0xe9}, {&(0x7f0000002300)="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", 0x2af}], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x1f000000) 264.332549ms ago: executing program 0 (id=3457): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x8, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x6, 0x5}, {0xfff3, 0xa}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8e6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_io_uring_setup(0x1e7f, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x1, 0xc}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x29e4, 0xc2de, 0x44, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000050a01080000000000000000000000020900020073797a320000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x47) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 260.143731ms ago: executing program 4 (id=3458): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000680)={0x105, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0x1e2}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030d", 0x50}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x8d) 38.606146ms ago: executing program 7 (id=3459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0)=[{{&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/47, 0x2f}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000640)=""/199, 0xc7}], 0x4, &(0x7f0000000740)=""/220, 0xdc}, 0xc}, {{&(0x7f0000000840)=@qipcrtr, 0x80, &(0x7f0000000d00)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/160, 0xa0}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000b80)=""/249, 0xf9}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/124, 0x7c}], 0x7, &(0x7f0000000d80)=""/102, 0x66}, 0x5}, {{&(0x7f0000000e00)=@x25={0x9, @remote}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/85, 0x55}, {&(0x7f0000000f00)=""/12, 0xc}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/25, 0x19}], 0x4, &(0x7f0000002080)=""/119, 0x77}, 0x6}, {{&(0x7f0000002100)=@tipc, 0x80, &(0x7f0000002280)=[{&(0x7f0000000fc0)=""/56, 0x38}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000002180)=""/159, 0x9f}, {&(0x7f0000002240)=""/8, 0x8}], 0x4, &(0x7f00000022c0)=""/230, 0xe6}, 0x200}, {{&(0x7f00000023c0)=@generic, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002440)=""/76, 0x4c}, {&(0x7f00000024c0)=""/20, 0x14}, {&(0x7f0000002500)=""/193, 0xc1}, {&(0x7f0000002600)=""/1, 0x1}, {&(0x7f0000002640)=""/131, 0x83}, {&(0x7f0000002700)=""/194, 0xc2}, {&(0x7f0000002800)=""/185, 0xb9}, {&(0x7f00000028c0)=""/224, 0xe0}], 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/75, 0x4b}, {&(0x7f0000002ac0)=""/184, 0xb8}, {&(0x7f0000002b80)=""/194, 0xc2}, {&(0x7f0000002c80)=""/243, 0xf3}], 0x4}}], 0x6, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x24500, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79b0, 0x40, 0x7ff9, 0x32c, 0x0, r3}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(0xffffffffffffffff, 0xfd0, 0x690c, 0x51, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0xfff5, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) r7 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x8000000000025a5, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r10, &(0x7f0000000000)=0x2b00, 0x12) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000040)=@overlay={0x8, 0x2, 0x4, 0xe000, 0xfffffffc, {}, {0x3, 0x0, 0xd, 0x7, 0x9, 0x80, "430516b8"}, 0x8, 0x3, {}, 0x1, 0x0, r10}) bind$unix(r7, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x55) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r11, &(0x7f00000002c0)=""/174, 0xae, 0xe0) r12 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r12, 0x0, 0x0) 0s ago: executing program 3 (id=3460): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0}}, 0x58) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r1}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mlockall(0x4) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) kernel console output (not intermixed with test programs): ttribute type 74 has an invalid length. [ 677.545293][ T30] audit: type=1400 audit(1764981859.329:853): avc: denied { mount } for pid=15602 comm="syz.6.2600" name="/" dev="rpc_pipefs" ino=49181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 677.643801][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2605'. [ 677.652838][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2605'. [ 677.757526][T15614] netlink: 'syz.0.2605': attribute type 6 has an invalid length. [ 677.817800][ T5881] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 678.136368][ T5895] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 678.205830][T15627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 678.223799][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 678.231098][ T5881] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 678.245584][ T5881] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.255697][T15627] netlink: 'syz.6.2609': attribute type 10 has an invalid length. [ 678.255718][T15627] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2609'. [ 678.255741][T15627] team0: entered promiscuous mode [ 678.255956][T15627] bridge0: port 1(team0) entered blocking state [ 678.285150][ T5895] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 678.285450][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.293314][T15627] bridge0: port 1(team0) entered disabled state [ 678.308943][ T5895] usb 1-1: device descriptor read/8, error -71 [ 678.315766][T15627] team0: entered allmulticast mode [ 678.316945][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 678.330353][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.338795][ T5881] usb 5-1: Product: syz [ 678.340044][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2609'. [ 678.356130][ T5881] usb 5-1: Manufacturer: syz [ 678.361042][ T5881] usb 5-1: SerialNumber: syz [ 678.432986][ T5895] usb usb1-port1: unable to enumerate USB device [ 679.146220][ T30] audit: type=1400 audit(1764981860.869:854): avc: denied { map } for pid=15606 comm="syz.4.2603" path="socket:[48197]" dev="sockfs" ino=48197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 679.171403][ T5881] usb 5-1: 0:2 : does not exist [ 679.182624][ T5881] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 679.207626][ T5881] usb 5-1: USB disconnect, device number 54 [ 679.251994][T15505] udevd[15505]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.253806][T15649] macvtap1: entered promiscuous mode [ 679.277527][T15649] bond0: entered promiscuous mode [ 679.283123][T15649] bond_slave_0: entered promiscuous mode [ 679.289460][T15649] bond_slave_1: entered promiscuous mode [ 679.297013][T15651] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2617'. [ 679.297312][T15649] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 679.315737][T15649] bond0: left promiscuous mode [ 679.329634][T15649] bond_slave_0: left promiscuous mode [ 679.340607][T15649] bond_slave_1: left promiscuous mode [ 679.532600][T15654] mkiss: ax0: crc mode is auto. [ 680.843451][T15677] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 680.850084][T15677] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 680.858820][T15677] vhci_hcd vhci_hcd.0: Device attached [ 680.870755][T15677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2620'. [ 681.073991][ T5895] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 681.167869][ T5881] usb 42-1: SetAddress Request (2) to port 0 [ 681.200740][ T5881] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 681.273732][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 681.280791][ T5895] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 681.306565][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 681.318624][T15678] vhci_hcd: connection reset by peer [ 681.331056][ T1129] vhci_hcd: stop threads [ 681.356962][ T5895] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 681.372017][ T1129] vhci_hcd: release socket [ 681.383933][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.393303][ T1129] vhci_hcd: disconnect device [ 681.399642][ T5895] usb 7-1: Product: syz [ 681.407638][ T5895] usb 7-1: Manufacturer: syz [ 681.412286][ T5895] usb 7-1: SerialNumber: syz [ 681.542857][ T5895] usb 7-1: config 0 descriptor?? [ 681.685027][ T5895] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 681.750869][ T5895] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 682.442583][ T5895] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 682.450282][ T5895] em28xx 7-1:0.0: Config register raw data: 0x79 [ 682.456660][ T5895] em28xx 7-1:0.0: I2S Audio (3 sample rate(s)) [ 682.463756][ T5895] em28xx 7-1:0.0: No AC97 audio processor [ 682.610107][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2634'. [ 683.251338][T15716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=15716 comm=syz.0.2635 [ 683.368283][T15722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 683.794423][ T973] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 684.292521][ T5895] usb 7-1: USB disconnect, device number 46 [ 684.467248][T15741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2644'. [ 684.488656][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 684.502217][ T973] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 684.526534][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.578668][ T973] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 684.588264][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.601453][ T973] usb 5-1: config 0 descriptor?? [ 684.610342][ T973] pxrc 5-1:0.0: Could not find endpoint [ 685.328998][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.334982][ T973] usb 5-1: USB disconnect, device number 55 [ 686.280436][ T30] audit: type=1400 audit(1764981868.029:855): avc: denied { map } for pid=15760 comm="syz.0.2650" path="socket:[48457]" dev="sockfs" ino=48457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 686.466646][ T5881] usb 42-1: device descriptor read/8, error -110 [ 686.813574][T15770] vivid-000: kernel_thread() failed [ 687.849792][ T5881] usb usb42-port1: attempt power cycle [ 688.708260][ T5881] usb usb42-port1: unable to enumerate USB device [ 688.863861][ T5895] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 689.345426][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 689.494091][ T5895] usb 7-1: device descriptor read/64, error -32 [ 689.575516][T15812] lo speed is unknown, defaulting to 1000 [ 689.763683][ T5895] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 689.873817][ T973] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 690.015996][ T5895] usb 7-1: config 0 has an invalid interface descriptor of length 8, skipping [ 690.050606][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.083707][ T5895] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.085970][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 690.130006][ T973] usb 5-1: unable to get BOS descriptor or descriptor too short [ 690.170745][ T973] usb 5-1: config 0 has an invalid interface number: 157 but max is 0 [ 690.190510][ T973] usb 5-1: config 0 has no interface number 0 [ 690.205383][ T973] usb 5-1: config 0 interface 157 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 11 [ 690.258303][ T973] usb 5-1: config 0 interface 157 has no altsetting 0 [ 690.276497][ T973] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=fe.55 [ 690.297138][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.335332][ T973] usb 5-1: Product: ш [ 690.343648][ T973] usb 5-1: Manufacturer: 䝱᷵늲卻練퇝龚䬡氱뮚賢쉰 [ 690.361328][ T973] usb 5-1: SerialNumber: 《 [ 690.385215][ T973] usb 5-1: config 0 descriptor?? [ 690.412644][ T973] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 690.544803][ T5895] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 690.658105][ T973] gspca_topro: reg_w err -71 [ 690.688793][ T973] gspca_topro: Sensor soi763a [ 690.688801][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.699324][ T973] usb 5-1: USB disconnect, device number 56 [ 690.730512][ T5895] usb 7-1: Product: syz [ 690.744316][ T5895] usb 7-1: Manufacturer: syz [ 690.757272][ T5895] usb 7-1: SerialNumber: syz [ 690.783335][ T5895] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 690.821096][ T5895] usb 7-1: no configuration chosen from 1 choice [ 690.926060][ T5895] usb 7-1: USB disconnect, device number 48 [ 692.566507][T15854] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2675'. [ 692.621401][ T30] audit: type=1400 audit(1764981874.409:856): avc: denied { write } for pid=15853 comm="syz.4.2675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 692.673722][ T30] audit: type=1400 audit(1764981874.409:857): avc: denied { read } for pid=15853 comm="syz.4.2675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 693.296877][T15860] block nbd6: shutting down sockets [ 693.923743][ T5888] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 694.094949][ T5888] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 694.149161][ T5888] usb 5-1: config 0 has no interface number 1 [ 694.159305][ T5888] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 694.178406][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.627607][ T5888] usb 5-1: config 0 descriptor?? [ 694.637727][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 694.657906][ T30] audit: type=1400 audit(1764981876.449:858): avc: denied { name_bind } for pid=15884 comm="syz.7.2686" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 694.684503][ T5888] usb 5-1: MIDIStreaming interface descriptor not found [ 694.759627][ T5888] gspca_main: spca561-2.14.0 probing abcd:cdee [ 694.926883][ T5888] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 695.093835][ T5888] usb 5-1: USB disconnect, device number 57 [ 695.996519][T15916] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2692'. [ 696.089160][ T30] audit: type=1400 audit(1764981877.869:859): avc: denied { shutdown } for pid=15913 comm="syz.7.2692" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 696.167643][T15920] fuse: Unknown parameter '0x0000000000000003' [ 696.174714][T15921] fuse: Unknown parameter '0x0000000000000003' [ 696.413671][ T5888] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 696.421803][T15917] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2692'. [ 696.585255][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 696.605801][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 696.636775][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 696.676454][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.711727][ T5888] usb 5-1: config 0 descriptor?? [ 697.003706][ T5888] ath6kl: Failed to submit usb control message: -71 [ 697.023673][ T5888] ath6kl: unable to send the bmi data to the device: -71 [ 697.030729][ T5888] ath6kl: Unable to send get target info: -71 [ 697.084618][ T5888] ath6kl: Failed to init ath6kl core: -71 [ 697.117682][ T5888] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 697.155449][ T5888] usb 5-1: USB disconnect, device number 58 [ 697.380190][T15930] vlan2: entered allmulticast mode [ 697.409639][T15930] erspan0: entered allmulticast mode [ 697.790397][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2701'. [ 698.520397][T15978] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 698.624738][T15981] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 699.080960][T15982] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 699.119232][T15982] overlayfs: missing 'lowerdir' [ 699.938905][T15994] lo speed is unknown, defaulting to 1000 [ 700.288646][ T30] audit: type=1400 audit(1764982395.085:860): avc: denied { getopt } for pid=16005 comm="syz.6.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.312715][T16001] vim2m vim2m.0: vidioc_s_fmt queue busy [ 700.499712][T16010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2716'. [ 700.509920][T15997] lo speed is unknown, defaulting to 1000 [ 700.704902][ T5895] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 700.894579][ T5895] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 701.022632][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 701.031701][ T30] audit: type=1400 audit(1764982395.785:861): avc: denied { nlmsg_write } for pid=16018 comm="syz.7.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 701.559613][T16027] lo speed is unknown, defaulting to 1000 [ 702.144036][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 702.164123][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 702.184492][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 702.209551][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 702.694429][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 702.702355][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 702.725222][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 702.743661][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 702.776622][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 702.805157][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 702.857865][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 702.976791][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.013863][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.048663][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 703.095467][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.128063][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.163628][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 703.190714][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.227852][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.250900][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 703.267590][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 703.280370][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 703.323609][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 703.337966][ T5895] usb 7-1: string descriptor 0 read error: -71 [ 703.354158][ T5895] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 703.363492][ T5895] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 703.389557][ T5895] usb 7-1: config 0 descriptor?? [ 703.410043][ T5895] usb 7-1: can't set config #0, error -71 [ 703.446570][ T5895] usb 7-1: USB disconnect, device number 49 [ 704.254150][T16061] Invalid source name [ 704.258256][T16061] UBIFS error (pid: 16061): cannot open "ubifs", error -22 [ 704.267580][T16061] netlink: 'syz.6.2727': attribute type 11 has an invalid length. [ 704.283055][T16061] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.2727'. [ 704.545268][ T5888] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 704.790206][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 705.178129][ T5888] usb 5-1: config 9 has an invalid interface number: 52 but max is 0 [ 705.315746][ T5888] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 705.778830][ T5888] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 705.809692][ T5888] usb 5-1: config 9 has no interface number 0 [ 705.836328][ T5888] usb 5-1: config 9 interface 52 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 705.861725][ T5888] usb 5-1: config 9 interface 52 has no altsetting 0 [ 705.891372][ T5888] usb 5-1: New USB device found, idVendor=045e, idProduct=046a, bcdDevice=e8.a1 [ 705.902058][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.903046][T16080] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 705.920664][T16080] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 705.930370][T16080] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 706.015719][ T5888] usb 5-1: Product: К [ 706.027615][ T5888] usb 5-1: Manufacturer: 뺀㢵饨鶮捡㼍ᬕ쨋刄罌惯䯴艘⥩枚哆䟶멾ꉟ㔌䫸瀈聇⌫컐봁ܚꝂ蔈쨣胈氽铗夔ᗂ僎낯ꥡ꘣叫⼚㰈鸃䅕╍㙑똄괟ᢿ욹궤㲑佧꘽ⶍ穬騡བ胑륀㭱擅䞃屐⿯⯉㇎鷭咪⢼ꍇ蘪큛ꠁꤥ셯ﲛ䬼Ῥᔕ礹魅刔쩅ู炋ꬑ결᯾蕕諛쀎焷멶疙޽棅됓 [ 706.067577][T16085] comedi comedi3: comedi_config --init_data is deprecated [ 706.092674][ T5888] usb 5-1: SerialNumber: Ь [ 706.603301][T16101] x_tables: ip6_tables: HL target: only valid in mangle table, not /dev/ptmx [ 706.700196][T16067] netlink: 'syz.4.2733': attribute type 10 has an invalid length. [ 706.739733][T16067] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 706.780795][ T5881] usb 5-1: USB disconnect, device number 59 [ 706.955471][T16118] program syz.0.2748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 707.935732][ T30] audit: type=1326 audit(1764982402.735:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.4.2754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67378f749 code=0x0 [ 707.971256][ T30] audit: type=1326 audit(1764982402.765:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.4.2754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc67378f749 code=0x0 [ 708.170044][T16118] syz.0.2748 (16118): drop_caches: 2 [ 708.808847][T16156] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2758'. [ 709.260003][T16160] bridge0: entered promiscuous mode [ 709.811780][T16174] netlink: 'syz.4.2765': attribute type 5 has an invalid length. [ 709.890490][T16176] netlink: 'syz.6.2767': attribute type 10 has an invalid length. [ 709.916694][T16176] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 709.994967][T16176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.378167][T16186] netlink: 'syz.3.2769': attribute type 10 has an invalid length. [ 712.733160][ T30] audit: type=1400 audit(1764982407.525:864): avc: denied { read } for pid=16214 comm="syz.3.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 714.197498][T16235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2782'. [ 714.442638][ T30] audit: type=1326 audit(1764982409.235:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 714.493758][ T30] audit: type=1326 audit(1764982409.265:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 714.582200][ T30] audit: type=1326 audit(1764982409.265:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4781f8df90 code=0x7ffc0000 [ 714.663794][ T30] audit: type=1326 audit(1764982409.265:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 714.688227][ T30] audit: type=1326 audit(1764982409.265:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 714.713201][ T30] audit: type=1326 audit(1764982409.275:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 714.745251][ T30] audit: type=1326 audit(1764982409.275:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 714.769314][ T30] audit: type=1326 audit(1764982409.275:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 714.794122][ T30] audit: type=1326 audit(1764982409.275:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 714.821848][ T30] audit: type=1326 audit(1764982409.275:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16240 comm="syz.7.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4781f8f749 code=0x7ffc0000 [ 716.304662][T16272] lo speed is unknown, defaulting to 1000 [ 718.544347][T16283] syz.3.2794: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 718.561893][T16283] CPU: 0 UID: 0 PID: 16283 Comm: syz.3.2794 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.561910][T16283] Tainted: [L]=SOFTLOCKUP [ 718.561915][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.561921][T16283] Call Trace: [ 718.561926][T16283] [ 718.561931][T16283] dump_stack_lvl+0x16c/0x1f0 [ 718.561951][T16283] warn_alloc+0x248/0x3a0 [ 718.561967][T16283] ? __pfx_warn_alloc+0x10/0x10 [ 718.561985][T16283] ? vmalloc_array_noprof+0x43/0x70 [ 718.561999][T16283] ? __vmalloc_node_noprof+0xad/0xf0 [ 718.562012][T16283] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 718.562028][T16283] ? vmalloc_array_noprof+0x43/0x70 [ 718.562045][T16283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 718.562061][T16283] ? vmalloc_array_noprof+0x43/0x70 [ 718.562074][T16283] __vmalloc_node_noprof+0xad/0xf0 [ 718.562085][T16283] ? vmalloc_array_noprof+0x43/0x70 [ 718.562100][T16283] __vmalloc_node_range_noprof+0xb3b/0x1480 [ 718.562115][T16283] ? vmalloc_array_noprof+0x43/0x70 [ 718.562129][T16283] ? rcu_is_watching+0x12/0xc0 [ 718.562145][T16283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 718.562159][T16283] ? is_vmalloc_addr+0x10/0xa0 [ 718.562172][T16283] ? vmalloc_array_noprof+0x43/0x70 [ 718.562185][T16283] __vmalloc_node_noprof+0xad/0xf0 [ 718.562196][T16283] ? vmalloc_array_noprof+0x43/0x70 [ 718.562211][T16283] vmalloc_array_noprof+0x43/0x70 [ 718.562224][T16283] do_replace_finish+0xe7/0x22c0 [ 718.562237][T16283] ? __lock_acquire+0x433/0x22f0 [ 718.562253][T16283] ? do_replace+0x2a3/0x510 [ 718.562266][T16283] ? __pfx_do_replace_finish+0x10/0x10 [ 718.562277][T16283] ? find_held_lock+0x2b/0x80 [ 718.562288][T16283] ? __might_fault+0xe3/0x190 [ 718.562301][T16283] ? __might_fault+0xe3/0x190 [ 718.562312][T16283] ? __might_fault+0x13b/0x190 [ 718.562329][T16283] do_replace+0x350/0x510 [ 718.562340][T16283] ? __pfx_do_replace+0x10/0x10 [ 718.562356][T16283] ? bpf_lsm_capable+0x9/0x10 [ 718.562371][T16283] ? security_capable+0x7e/0x260 [ 718.562384][T16283] do_ebt_set_ctl+0x46e/0x570 [ 718.562394][T16283] ? sockopt_release_sock+0x52/0x60 [ 718.562406][T16283] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 718.562418][T16283] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 718.562433][T16283] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 718.562451][T16283] nf_setsockopt+0x8d/0xf0 [ 718.562468][T16283] ip_setsockopt+0xcb/0xf0 [ 718.562479][T16283] udp_setsockopt+0x7d/0xd0 [ 718.562495][T16283] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 718.562510][T16283] do_sock_setsockopt+0xf3/0x1d0 [ 718.562525][T16283] __sys_setsockopt+0x1a0/0x230 [ 718.562545][T16283] __x64_sys_setsockopt+0xbd/0x160 [ 718.562561][T16283] ? do_syscall_64+0x91/0xf80 [ 718.562576][T16283] ? lockdep_hardirqs_on+0x7c/0x110 [ 718.562592][T16283] do_syscall_64+0xcd/0xf80 [ 718.562608][T16283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.562620][T16283] RIP: 0033:0x7fa56cf8f749 [ 718.562635][T16283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.562646][T16283] RSP: 002b:00007fa56ddc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 718.562657][T16283] RAX: ffffffffffffffda RBX: 00007fa56d1e6180 RCX: 00007fa56cf8f749 [ 718.562664][T16283] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000008 [ 718.562670][T16283] RBP: 00007fa56d013f91 R08: 0000000000000108 R09: 0000000000000000 [ 718.562677][T16283] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000000 [ 718.562684][T16283] R13: 00007fa56d1e6218 R14: 00007fa56d1e6180 R15: 00007ffc488b0678 [ 718.562698][T16283] [ 718.562702][T16283] Mem-Info: [ 718.971187][T16283] active_anon:52268 inactive_anon:0 isolated_anon:0 [ 718.971187][T16283] active_file:19535 inactive_file:8262 isolated_file:0 [ 718.971187][T16283] unevictable:17167 dirty:339 writeback:0 [ 718.971187][T16283] slab_reclaimable:8418 slab_unreclaimable:101848 [ 718.971187][T16283] mapped:35772 shmem:46043 pagetables:2093 [ 718.971187][T16283] sec_pagetables:0 bounce:0 [ 718.971187][T16283] kernel_misc_reclaimable:0 [ 718.971187][T16283] free:1187954 free_pcp:21246 free_cma:0 [ 719.017413][T16283] Node 0 active_anon:209072kB inactive_anon:0kB active_file:78116kB inactive_file:32912kB unevictable:67132kB isolated(anon):0kB isolated(file):0kB mapped:143064kB dirty:1356kB writeback:0kB shmem:182636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13272kB pagetables:8248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 719.050016][T16283] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 719.080050][T16283] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.110125][T16283] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 719.115867][T16283] Node 0 DMA32 free:865660kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:209072kB inactive_anon:0kB active_file:78116kB inactive_file:32912kB unevictable:67132kB writepending:1356kB zspages:0kB present:3129332kB managed:2541772kB mlocked:0kB bounce:0kB free_pcp:47528kB local_pcp:20416kB free_cma:0kB [ 719.149239][T16283] lowmem_reserve[]: 0 0 1 1 1 [ 719.154080][T16283] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 719.183661][T16283] lowmem_reserve[]: 0 0 0 0 0 [ 719.188349][T16283] Node 1 Normal free:3870796kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:37476kB local_pcp:16116kB free_cma:0kB [ 719.221016][T16283] lowmem_reserve[]: 0 0 0 0 0 [ 719.225728][T16283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 719.238336][T16283] Node 0 DMA32: 1*4kB (U) 338*8kB (ME) 549*16kB (ME) 331*32kB (ME) 210*64kB (UME) 119*128kB (UME) 237*256kB (UME) 361*512kB (UME) 126*1024kB (UME) 29*2048kB (UM) 93*4096kB (UM) = 865604kB [ 719.256856][T16283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 719.268266][T16283] Node 1 Normal: 187*4kB (UM) 52*8kB (UME) 40*16kB (UME) 98*32kB (UME) 30*64kB (UME) 7*128kB (UE) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UE) 4*2048kB (ME) 940*4096kB (M) = 3870796kB [ 719.286614][T16283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.296138][T16283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 719.305677][T16283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.315256][T16283] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 719.324530][T16283] 90235 total pagecache pages [ 719.329173][T16283] 0 pages in swap cache [ 719.333291][T16283] Free swap = 124996kB [ 719.337424][T16283] Total swap = 124996kB [ 719.341545][T16283] 2097051 pages RAM [ 719.345349][T16283] 0 pages HighMem/MovableOnly [ 719.349991][T16283] 429582 pages reserved [ 719.354135][T16283] 0 pages cma reserved [ 720.501749][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2800'. [ 720.516692][T16297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=16297 comm=syz.3.2800 [ 721.265819][T16310] fuse: Bad value for 'user_id' [ 721.283696][T16310] fuse: Bad value for 'user_id' [ 722.054847][T16317] netlink: 'syz.7.2806': attribute type 10 has an invalid length. [ 722.062659][T16317] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2806'. [ 722.071924][T16317] dummy0: entered promiscuous mode [ 722.078783][T16317] bridge0: port 2(dummy0) entered blocking state [ 722.085205][T16317] bridge0: port 2(dummy0) entered disabled state [ 722.091659][T16317] dummy0: entered allmulticast mode [ 722.097983][T16317] bridge0: port 2(dummy0) entered blocking state [ 722.104380][T16317] bridge0: port 2(dummy0) entered forwarding state [ 722.215944][T16315] can0: slcan on ttyS3. [ 722.445348][T16311] can0 (unregistered): slcan off ttyS3. [ 724.175721][ T6467] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 724.395301][ T6467] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 724.412733][ T6467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.423406][ T6467] usb 5-1: Product: syz [ 724.431850][ T6467] usb 5-1: Manufacturer: syz [ 724.437033][ T6467] usb 5-1: SerialNumber: syz [ 724.460889][ T6467] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 724.487426][ T5881] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 724.655949][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 724.655964][ T30] audit: type=1400 audit(1764982419.455:902): avc: denied { relabelfrom } for pid=16376 comm="syz.6.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 724.723684][ T30] audit: type=1400 audit(1764982419.485:903): avc: denied { relabelto } for pid=16376 comm="syz.6.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 724.789572][T16378] tmpfs: Unknown parameter 'nogw*RX L ' [ 725.528098][T16384] 9pnet_fd: p9_fd_create_tcp (16384): problem connecting socket to 127.0.0.1 [ 725.633819][ T5881] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 725.694646][ T5881] ath9k_htc: Failed to initialize the device [ 725.724205][T16352] fuse: Bad value for 'user_id' [ 725.752278][T16352] fuse: Bad value for 'user_id' [ 725.778474][ T5881] usb 5-1: ath9k_htc: USB layer deinitialized [ 726.214245][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2821'. [ 726.233837][T14829] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 726.463743][T14829] usb 1-1: Using ep0 maxpacket: 16 [ 726.478758][T14829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 726.507142][T14829] usb 1-1: config 0 has an invalid interface number: 157 but max is 0 [ 726.547143][T14829] usb 1-1: config 0 has no interface number 0 [ 726.600631][T14829] usb 1-1: config 0 interface 157 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 11 [ 726.713932][T14829] usb 1-1: config 0 interface 157 has no altsetting 0 [ 726.827065][T14829] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=fe.55 [ 726.864881][T14829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.911759][T14829] usb 1-1: Product: ш [ 727.252455][T14829] usb 1-1: Manufacturer: 䝱᷵늲卻練퇝龚䬡氱뮚賢쉰 [ 727.273340][T14829] usb 1-1: SerialNumber: 《 [ 727.313906][T14829] usb 1-1: config 0 descriptor?? [ 727.335786][T14829] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 727.565876][T14829] gspca_topro: reg_w err -71 [ 727.740745][T14829] gspca_topro: Sensor soi763a [ 727.781319][T14829] usb 1-1: USB disconnect, device number 74 [ 729.225008][T16429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2829'. [ 730.606283][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'. [ 731.067224][T16433] team1: entered promiscuous mode [ 731.077159][T16433] team1: entered allmulticast mode [ 731.089353][T16433] 8021q: adding VLAN 0 to HW filter on device team1 [ 731.385378][ T5888] usb 5-1: USB disconnect, device number 60 [ 731.753694][ T5888] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 731.972904][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.023000][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.069838][ T5888] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 732.100360][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.129080][ T5888] usb 1-1: config 0 descriptor?? [ 732.253076][ T5888] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 734.159528][ T5888] usb 1-1: USB disconnect, device number 75 [ 734.630101][T16480] 9pnet_fd: p9_fd_create_tcp (16480): problem connecting socket to 127.0.0.1 [ 735.098017][T16484] FAULT_INJECTION: forcing a failure. [ 735.098017][T16484] name failslab, interval 1, probability 0, space 0, times 0 [ 735.123819][T16484] CPU: 0 UID: 0 PID: 16484 Comm: syz.4.2846 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.123849][T16484] Tainted: [L]=SOFTLOCKUP [ 735.123855][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.123866][T16484] Call Trace: [ 735.123873][T16484] [ 735.123880][T16484] dump_stack_lvl+0x16c/0x1f0 [ 735.123910][T16484] should_fail_ex+0x512/0x640 [ 735.123936][T16484] ? fs_reclaim_acquire+0xae/0x150 [ 735.123964][T16484] should_failslab+0xc2/0x120 [ 735.123981][T16484] __kmalloc_noprof+0xdd/0x8f0 [ 735.124000][T16484] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 735.124028][T16484] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 735.124049][T16484] tomoyo_realpath_from_path+0xc2/0x6e0 [ 735.124073][T16484] ? tomoyo_profile+0x47/0x60 [ 735.124099][T16484] tomoyo_path_number_perm+0x245/0x580 [ 735.124115][T16484] ? tomoyo_path_number_perm+0x237/0x580 [ 735.124136][T16484] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 735.124156][T16484] ? find_held_lock+0x2b/0x80 [ 735.124195][T16484] ? find_held_lock+0x2b/0x80 [ 735.124212][T16484] ? hook_file_ioctl_common+0x144/0x410 [ 735.124240][T16484] ? __fget_files+0x20e/0x3c0 [ 735.124260][T16484] security_file_ioctl+0x9b/0x240 [ 735.124283][T16484] __x64_sys_ioctl+0xb7/0x210 [ 735.124308][T16484] do_syscall_64+0xcd/0xf80 [ 735.124335][T16484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.124352][T16484] RIP: 0033:0x7fc67378f749 [ 735.124367][T16484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.124384][T16484] RSP: 002b:00007fc67468a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.124402][T16484] RAX: ffffffffffffffda RBX: 00007fc6739e5fa0 RCX: 00007fc67378f749 [ 735.124417][T16484] RDX: 0000200000000000 RSI: 00000000c1004110 RDI: 0000000000000003 [ 735.124428][T16484] RBP: 00007fc67468a090 R08: 0000000000000000 R09: 0000000000000000 [ 735.124439][T16484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.124449][T16484] R13: 00007fc6739e6038 R14: 00007fc6739e5fa0 R15: 00007fffef095ba8 [ 735.124475][T16484] [ 735.152559][T16487] lo speed is unknown, defaulting to 1000 [ 735.153924][T16484] ERROR: Out of memory at tomoyo_realpath_from_path. [ 735.222688][T16488] bridge1: entered allmulticast mode [ 735.324468][T16493] [U]  [ 735.409267][T16493] [U] K{ [ 735.419510][T16493] [U] T 1ŠFFˊ`GJǘGO/MC [ 735.449102][T16493] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 735.467268][T16493] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 735.499224][T16493] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 735.572105][T16500] overlayfs: failed to clone lowerpath [ 735.579696][T16493] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 735.625301][T16493] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 735.742452][T16493] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 735.769060][T16493] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 736.363912][T16493] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 736.381005][T16493] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 736.470115][T16493] [U] 22Ʃ۩X?0;3U [ 736.510713][T16493] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 736.540644][T16493] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 736.552250][T16493] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 736.567767][T16493] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 736.577701][T16493] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 736.590348][T16493] [U] EC [ 736.596601][T16493] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 736.644267][T16493] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 736.732566][T16487] lo speed is unknown, defaulting to 1000 [ 736.915472][ T5888] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 737.093700][ T5888] usb 7-1: Using ep0 maxpacket: 8 [ 737.113318][ T5888] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 737.137874][ T5888] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.179559][ T5888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.202114][ T5888] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.223106][ T5888] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.291238][ T5888] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 737.321642][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.559729][ T5888] usb 7-1: GET_CAPABILITIES returned 0 [ 737.570521][ T5888] usbtmc 7-1:16.0: can't read capabilities [ 737.774172][ T5888] usb 7-1: USB disconnect, device number 50 [ 738.859306][T16539] 9pnet_fd: p9_fd_create_tcp (16539): problem connecting socket to 127.0.0.1 [ 739.923865][ T30] audit: type=1326 audit(1764982434.645:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16540 comm="syz.6.2859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dc2b8f749 code=0x0 [ 741.140241][T16561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.280126][T16561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.347504][ T973] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 741.925091][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.963624][ T973] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 741.993425][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.037316][ T973] usb 5-1: config 0 descriptor?? [ 742.313792][T16555] trusted_key: syz.4.2862 sent an empty control message without MSG_MORE. [ 742.462439][T16572] 9pnet_fd: Insufficient options for proto=fd [ 742.487529][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2866'. [ 742.496587][T16572] netlink: 'syz.6.2866': attribute type 5 has an invalid length. [ 742.713814][ T1158] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.871107][ T1158] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.898582][ T1158] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.938292][ T1158] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.097563][T16555] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2862'. [ 743.144279][ T973] usbhid 5-1:0.0: can't add hid device: -71 [ 743.179167][ T973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 743.207617][ T973] usb 5-1: USB disconnect, device number 61 [ 743.663103][ T30] audit: type=1326 audit(1764982438.455:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16597 comm="syz.7.2873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4781f8f749 code=0x0 [ 743.968727][T16606] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 744.044001][T16608] 9pnet_fd: p9_fd_create_tcp (16608): problem connecting socket to 127.0.0.1 [ 744.475253][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'. [ 744.869017][T16615] IPVS: sh: FWM 3 0x00000003 - no destination available [ 744.887950][T16615] IPVS: sh: FWM 3 0x00000003 - no destination available [ 745.496262][ T30] audit: type=1326 audit(1764982440.295:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.550500][ T30] audit: type=1326 audit(1764982440.295:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.609858][ T30] audit: type=1326 audit(1764982440.295:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.637604][ T30] audit: type=1326 audit(1764982440.315:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.666758][ T30] audit: type=1326 audit(1764982440.315:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.701536][ T30] audit: type=1326 audit(1764982440.325:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.734872][ T30] audit: type=1326 audit(1764982440.375:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.763757][ T30] audit: type=1326 audit(1764982440.375:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.787651][ T30] audit: type=1326 audit(1764982440.375:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.845569][ T30] audit: type=1326 audit(1764982440.375:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16625 comm="syz.4.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc67378f749 code=0x7ffc0000 [ 745.989145][T16641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16641 comm=syz.0.2886 [ 746.011751][T16641] netlink: 'syz.0.2886': attribute type 1 has an invalid length. [ 746.757582][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.939275][T16651] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2887'. [ 747.243945][T16654] 9pnet_fd: Insufficient options for proto=fd [ 747.260947][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2887'. [ 748.000702][T16669] batman_adv: batadv0: Adding interface: gretap1 [ 748.009273][T16669] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.065227][T16669] batman_adv: batadv0: Interface activated: gretap1 [ 749.346976][T16691] overlayfs: missing 'lowerdir' [ 749.445039][T16691] overlay: Unknown parameter 'pcr' [ 749.587556][T16697] IPVS: sh: FWM 3 0x00000003 - no destination available [ 749.607312][T16697] IPVS: sh: FWM 3 0x00000003 - no destination available [ 753.290371][T16733] overlayfs: failed to resolve './file1': -2 [ 753.323688][ T973] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 753.503043][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.525731][ T973] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 753.555681][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.588174][ T973] usb 5-1: config 0 descriptor?? [ 754.177593][T16742] netlink: 'syz.6.2913': attribute type 1 has an invalid length. [ 754.210469][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 754.210485][ T30] audit: type=1326 audit(1764982449.005:930): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56cf8f749 code=0x7ffc0000 [ 754.247593][ T30] audit: type=1326 audit(1764982449.045:931): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56cf8f749 code=0x7ffc0000 [ 754.322143][ T30] audit: type=1326 audit(1764982449.045:932): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fa56cf8f749 code=0x7ffc0000 [ 754.363531][T16742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 754.373678][ T973] logitech-djreceiver 0003:046D:C71F.0016: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 754.423615][T16746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 754.438176][ T30] audit: type=1326 audit(1764982449.045:933): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa56cf2b829 code=0x7ffc0000 [ 754.463539][T16746] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 754.476505][ T973] usb 5-1: USB disconnect, device number 62 [ 754.515713][T16746] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 754.682125][ T30] audit: type=1326 audit(1764982449.045:934): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56cf8f749 code=0x7ffc0000 [ 754.711985][T16754] fido_id[16754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 755.216244][ T30] audit: type=1326 audit(1764982449.045:935): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56cf8f749 code=0x7ffc0000 [ 755.241727][T16751] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 755.352742][T16751] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 755.379421][ T30] audit: type=1326 audit(1764982449.045:936): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56cf8df90 code=0x7ffc0000 [ 755.476929][ T30] audit: type=1326 audit(1764982449.045:937): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56cf8df90 code=0x7ffc0000 [ 755.548295][ T30] audit: type=1326 audit(1764982449.045:938): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56cf8f749 code=0x7ffc0000 [ 755.649825][ T30] audit: type=1326 audit(1764982449.045:939): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16739 comm="syz.3.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56cf8f749 code=0x7ffc0000 [ 755.957970][T16772] hub 9-0:1.0: USB hub found [ 755.968854][T16772] hub 9-0:1.0: 1 port detected [ 758.288473][T16784] infiniband sy: set down [ 758.293177][T16784] infiniband sy: added bond_slave_0 [ 758.576069][T16784] RDS/IB: sy: added [ 758.580964][T16784] smc: adding ib device sy with port count 1 [ 758.587270][T16784] smc: ib device sy port 1 has no pnetid [ 759.479527][T16797] netlink: 'syz.6.2925': attribute type 10 has an invalid length. [ 759.489661][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 759.489675][ T30] audit: type=1400 audit(1764982454.275:949): avc: denied { block_suspend } for pid=16793 comm="syz.7.2924" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 759.545157][T16799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2926'. [ 761.139911][T16815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2932'. [ 761.229726][ T30] audit: type=1400 audit(1764982456.025:950): avc: denied { getopt } for pid=16822 comm="syz.6.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 761.286064][T16826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2937'. [ 761.321752][ T30] audit: type=1400 audit(1764982456.115:951): avc: denied { mounton } for pid=16816 comm="syz.0.2933" path="/561/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 !  @ trans=fd,rfdno=0x0000000000000005,wfdno=0x0000000000000006,./file0@  /dev/fuseP)HL@[ 761.832639][T16834] lo speed is unknown, defaulting to 1000  fd=00000000000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000[ 762.094984][T16845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2943'. [ 762.605853][T16834] IPVS: dh: FWM 3 0x00000003 - no destination available [ 762.624145][T14829] IPVS: starting estimator thread 0... [ 762.723337][T16858] IPVS: using max 76 ests per chain, 182400 per kthread [ 763.210370][ T1129] IPVS: stop unused estimator thread 0... [ 764.225784][ T30] audit: type=1400 audit(1764982459.025:952): avc: denied { mount } for pid=16874 comm="syz.0.2950" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 765.023703][T14829] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 765.942704][T16893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16893 comm=syz.4.2956 [ 766.213048][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2961'. [ 766.474466][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2962'. [ 767.027654][T14829] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 767.038524][T14829] usb 7-1: can't read configurations, error -71 [ 767.190522][ T30] audit: type=1400 audit(1764982461.985:953): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 767.682991][T16921] cgroup: Unknown subsys name 'cpuset' [ 769.105434][T14829] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 769.589240][T14829] usb 5-1: Using ep0 maxpacket: 16 [ 769.607217][T14829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 769.629264][T14829] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 769.669047][T14829] usb 5-1: can't read configurations, error -71 [ 769.815329][T16965] IPVS: sh: FWM 3 0x00000003 - no destination available [ 769.831743][T16965] IPVS: sh: FWM 3 0x00000003 - no destination available [ 771.536758][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 772.395469][T16994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2225463490 (142429663360 ns) > initial count (63815086272 ns). Using initial count to start timer. [ 772.642912][T16999] kvm: apic: phys broadcast and lowest prio [ 772.744049][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2987'. [ 772.896308][T16998] bridge0: port 2(dummy0) entered disabled state [ 773.188016][T16998] dummy0 (unregistering): left allmulticast mode [ 773.281229][T16998] bridge0: port 2(dummy0) entered disabled state [ 774.047800][T17019] netlink: 348 bytes leftover after parsing attributes in process `syz.6.2982'. [ 774.430925][T17028] lo speed is unknown, defaulting to 1000 [ 775.293068][T17035] overlayfs: failed to clone upperpath [ 776.795828][T17056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3006'. [ 777.673925][T14829] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 777.833644][T14829] usb 1-1: Using ep0 maxpacket: 16 [ 777.850955][T14829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 777.891546][T14829] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 777.924237][T14829] usb 1-1: can't read configurations, error -71 [ 778.716979][T17089] IPVS: sh: FWM 3 0x00000003 - no destination available [ 778.736266][T17089] IPVS: sh: FWM 3 0x00000003 - no destination available [ 778.743944][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 780.647173][T17099] kAFS: unable to lookup cell '({^@' [ 782.120307][T17145] overlayfs: failed to clone upperpath [ 782.373687][ T6467] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 782.555366][T17160] 9pnet_fd: p9_fd_create_tcp (17160): problem connecting socket to 127.0.0.1 [ 782.668449][ T6467] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 782.737064][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 782.819588][ T6467] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 782.917934][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 782.937190][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 782.951611][ T6467] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 782.959201][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 782.972702][ T6467] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 782.977610][T17162] netlink: 'syz.7.3039': attribute type 10 has an invalid length. [ 783.001714][T17162] bridge0: port 1(team0) entered disabled state [ 783.008172][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 783.020192][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 783.025199][T17162] team0: left allmulticast mode [ 783.037053][ T6467] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 783.044782][T17162] team0: left promiscuous mode [ 783.044975][T17162] bridge0: port 1(team0) entered disabled state [ 783.060665][T17162] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.060694][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 783.074509][T17162] bond0: (slave team0): Enslaving as an active interface with an up link [ 783.081265][ T6467] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 783.257253][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 783.271390][ T6467] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 783.287200][ T6467] usb 7-1: string descriptor 0 read error: -22 [ 783.293473][ T6467] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 783.302826][ T6467] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.788694][ T6467] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 783.819034][T17167] lo speed is unknown, defaulting to 1000 [ 784.047524][ T5888] usb 7-1: USB disconnect, device number 53 [ 784.279150][T17179] F2FS-fs: Conflicting test_dummy_encryption options [ 784.765029][ T6467] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 784.988418][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 784.999314][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 785.009037][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 785.017122][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 785.024666][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 785.038292][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 785.049734][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 785.057007][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 785.071560][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 785.079325][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 785.120106][ T6467] usb 1-1: Using ep0 maxpacket: 16 [ 785.166336][ T6467] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.189227][T17186] lo speed is unknown, defaulting to 1000 [ 785.246263][ T6467] usb 1-1: config 0 interface 0 has no altsetting 0 [ 785.261495][T17194] rdma_op ffff88807c87b1f0 conn xmit_rdma 0000000000000000 [ 785.281434][ T6467] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 785.322137][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3051'. [ 785.332932][ T6467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.374681][ T6467] usb 1-1: Product: syz [ 785.380067][ T6467] usb 1-1: Manufacturer: syz [ 785.398388][ T6467] usb 1-1: SerialNumber: syz [ 785.431902][ T6467] usb 1-1: config 0 descriptor?? [ 785.778603][ T3587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.822552][ T3587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.953081][ T3587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.963522][ T3587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.084088][ T3587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.095204][ T3587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.104547][T17229] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3060'. [ 787.153826][ T5829] Bluetooth: hci3: command tx timeout [ 787.173519][T17232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3058'. [ 787.451622][T17236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3647 sclass=netlink_route_socket pid=17236 comm=syz.3.3061 [ 787.473068][ T3587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.483885][ T3587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.497375][ T30] audit: type=1400 audit(1764982482.295:954): avc: denied { bind } for pid=17234 comm="syz.3.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 787.523787][T17186] chnl_net:caif_netlink_parms(): no params data found [ 787.663925][ T5888] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 787.738298][T17186] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.756321][T17186] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.772891][T17186] bridge_slave_0: entered allmulticast mode [ 787.787240][T17186] bridge_slave_0: entered promiscuous mode [ 787.825904][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 787.838832][T17186] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.849076][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 787.886801][T17186] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.897331][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 787.912423][T17186] bridge_slave_1: entered allmulticast mode [ 787.928691][T17186] bridge_slave_1: entered promiscuous mode [ 787.931182][ T5888] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 787.950316][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.959017][ T5888] usb 7-1: Product: syz [ 787.963542][ T5888] usb 7-1: Manufacturer: syz [ 787.968555][ T5888] usb 7-1: SerialNumber: syz [ 787.981087][ T5888] usb 7-1: config 0 descriptor?? [ 787.994128][ T5888] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 788.005416][ T5888] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 788.054224][ T6467] usb 1-1: USB disconnect, device number 78 [ 788.460932][ T30] audit: type=1400 audit(1764982483.245:955): avc: denied { read } for pid=17248 comm="syz.0.3065" dev="nsfs" ino=4026532961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 788.587775][ T30] audit: type=1400 audit(1764982483.245:956): avc: denied { open } for pid=17248 comm="syz.0.3065" path="net:[4026532961]" dev="nsfs" ino=4026532961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 788.854638][ T5888] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 788.865082][ T5888] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 788.877225][ T5888] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 788.921664][ T5888] em28xx 7-1:0.0: No AC97 audio processor [ 788.954804][T17251] 9pnet_fd: p9_fd_create_tcp (17251): problem connecting socket to 127.0.0.1 [ 789.267058][ T5888] usb 7-1: USB disconnect, device number 54 [ 789.275518][ T5829] Bluetooth: hci3: command tx timeout [ 789.285211][ T5888] em28xx 7-1:0.0: Disconnecting em28xx [ 789.325787][ T5888] em28xx 7-1:0.0: Freeing device [ 790.082586][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.111358][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.125760][ T3587] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 790.163453][ T3587] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 790.191053][ T3587] bond0 (unregistering): Released all slaves [ 790.424093][ T3587] bond1 (unregistering): Released all slaves [ 790.631498][ T3587] : left promiscuous mode [ 791.167990][T17274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3072'. [ 791.186973][T17186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.228030][ T3587] tipc: Left network mode [ 791.249877][T17186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.299918][ T5829] block nbd0: Receive control failed (result -107) [ 791.313879][ T5829] Bluetooth: hci3: command tx timeout [ 791.414314][ T30] audit: type=1400 audit(1764982486.205:957): avc: denied { allowed } for pid=17281 comm="syz.7.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 791.609481][T17186] team0: Port device team_slave_0 added [ 791.806554][T17186] team0: Port device team_slave_1 added [ 792.991687][ T30] audit: type=1400 audit(1764982487.785:958): avc: denied { read } for pid=17302 comm="syz.7.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 793.079441][T17186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.101844][ T30] audit: type=1400 audit(1764982487.895:959): avc: denied { write } for pid=17302 comm="syz.7.3079" path="socket:[54746]" dev="sockfs" ino=54746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 793.140488][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.213630][T17186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.295234][T17186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.302194][T17186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.390140][T17186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.403889][ T5829] Bluetooth: hci3: command tx timeout [ 793.544383][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3084'. [ 793.616822][T17325] hsr_slave_0: left promiscuous mode [ 793.628883][T17325] hsr_slave_1: left promiscuous mode [ 793.836855][T17322] lo speed is unknown, defaulting to 1000 [ 793.951537][T17186] hsr_slave_0: entered promiscuous mode [ 793.977128][T17186] hsr_slave_1: entered promiscuous mode [ 793.993849][T17186] debugfs: 'hsr0' already exists in 'hsr' [ 793.999586][T17186] Cannot create hsr debugfs directory [ 794.114133][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.144079][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.174522][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.181911][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.801417][ T3587] hsr0: left allmulticast mode [ 794.813993][ T3587] veth1_macvtap: left promiscuous mode [ 794.831753][ T3587] veth0_macvtap: left promiscuous mode [ 794.847669][ T3587] veth1_vlan: left promiscuous mode [ 794.853766][ T3587] veth0_vlan: left promiscuous mode [ 795.444664][T17343] fuse: Unknown parameter 'rootmodw(/J %0user_' [ 795.949399][ T3587] team0 (unregistering): Port device team_slave_1 removed [ 796.081628][ T3587] team0 (unregistering): Port device team_slave_0 removed [ 797.089176][T17358] sctp: [Deprecated]: syz.0.3092 (pid 17358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 797.089176][T17358] Use struct sctp_sack_info instead [ 797.763532][T17345] syz_tun: entered allmulticast mode [ 798.205929][T17371] IPVS: sh: FWM 3 0x00000003 - no destination available [ 798.223198][T17371] IPVS: sh: FWM 3 0x00000003 - no destination available [ 798.842628][ T30] audit: type=1804 audit(1764982493.635:960): pid=17381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3096" name="/newroot/586/file0" dev="tmpfs" ino=3089 res=1 errno=0 [ 798.946558][T17381] lo speed is unknown, defaulting to 1000 [ 799.033943][T17338] syz_tun: left allmulticast mode [ 799.078401][T17390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3097'. [ 799.447815][ T3587] IPVS: stop unused estimator thread 0... [ 801.157787][T17186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 801.208274][T17186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 801.297700][T17186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 801.472386][T14829] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 801.542231][T17443] 9pnet_fd: Insufficient options for proto=fd [ 801.802399][T14829] usb 7-1: config 0 has no interfaces? [ 801.834114][T14829] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 801.863531][T14829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.900226][T14829] usb 7-1: Product: syz [ 801.913609][T14829] usb 7-1: Manufacturer: syz [ 801.927397][T14829] usb 7-1: SerialNumber: syz [ 801.986474][T14829] usb 7-1: config 0 descriptor?? [ 802.099982][T17186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 802.398083][T17456] IPVS: sh: FWM 3 0x00000003 - no destination available [ 802.420029][T17456] IPVS: sh: FWM 3 0x00000003 - no destination available [ 802.576266][ T30] audit: type=1400 audit(1764982497.365:961): avc: denied { ioctl } for pid=17423 comm="syz.6.3105" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 802.601884][T17455] IPVS: set_ctl: invalid protocol: 25647 47.117.115.98:28015 [ 802.644958][T17186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.717644][ T5888] usb 7-1: USB disconnect, device number 55 [ 802.858375][ T30] audit: type=1400 audit(1764982497.655:962): avc: denied { append } for pid=17461 comm="syz.0.3112" name="file0" dev="tmpfs" ino=3110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 802.912527][T17186] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.940874][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.948027][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.989518][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.996674][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.646698][ T30] audit: type=1400 audit(1764982498.445:963): avc: denied { create } for pid=17477 comm="syz.6.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 803.723300][ T30] audit: type=1400 audit(1764982498.475:964): avc: denied { write } for pid=17477 comm="syz.6.3114" path="socket:[55589]" dev="sockfs" ino=55589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 803.793324][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3114'. [ 803.955972][ T30] audit: type=1400 audit(1764982498.745:965): avc: denied { mounton } for pid=17477 comm="syz.6.3114" path="/syzcgroup/unified/syz6" dev="rpc_pipefs" ino=49181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 803.988540][T17483] affs: No valid root block on device nullb0 [ 804.064106][T17483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3114'. [ 804.325311][T17186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.227196][ T5895] lo speed is unknown, defaulting to 1000 [ 805.918264][T17523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5664 sclass=netlink_route_socket pid=17523 comm=syz.0.3120 [ 807.462380][T17534] 9pnet_fd: Insufficient options for proto=fd [ 808.196404][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.416215][T17534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3123'. [ 808.663823][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 808.679945][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 808.687020][T17186] veth0_vlan: entered promiscuous mode [ 808.767049][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 808.773038][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 808.884477][T17543] ceph: No mds server is up or the cluster is laggy [ 809.044340][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 809.050418][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 809.277221][T17557] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3125'. [ 809.451876][T17186] veth1_vlan: entered promiscuous mode [ 809.535728][T17186] veth0_macvtap: entered promiscuous mode [ 809.575042][T17186] veth1_macvtap: entered promiscuous mode [ 809.646388][T17186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.688328][T17186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.754581][ T3841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.802993][ T3841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.842635][ T3841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.891497][ T3841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.185652][ T4180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.218326][ T4180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.289945][T14665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.327378][T14665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.414512][ C0] hrtimer: interrupt took 9732 ns [ 811.317096][ T30] audit: type=1400 audit(1764982506.115:966): avc: denied { write } for pid=17186 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_acl_exec_t:s0" [ 812.098015][T17603] syz_tun: entered promiscuous mode [ 812.689967][T17620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3139'. [ 812.794606][T17628] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 812.802906][T17628] netlink: 'syz.3.3136': attribute type 2 has an invalid length. [ 812.813462][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 812.830986][T17628] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3136'. [ 814.298988][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 814.308618][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 814.318873][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 814.327573][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 814.335407][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 814.344691][ T6357] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 814.385895][ T5881] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 814.397323][T17652] lo speed is unknown, defaulting to 1000 [ 814.513768][ T6357] usb 5-1: Using ep0 maxpacket: 8 [ 814.528825][ T6357] usb 5-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 814.625645][ T5881] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.654750][ T6357] usb 5-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 814.693407][ T5881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.706605][ T6357] usb 5-1: config 218 has no interface number 0 [ 814.713513][ T6357] usb 5-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.778313][T17657] netlink: 'syz.7.3146': attribute type 1 has an invalid length. [ 814.926684][ T5881] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.972655][ T6357] usb 5-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 815.068110][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.083482][ T6357] usb 5-1: config 218 interface 95 has no altsetting 0 [ 815.094978][ T5881] usb 7-1: Product: syz [ 815.105309][ T6357] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 815.115565][ T5881] usb 7-1: Manufacturer: syz [ 815.125811][ T5881] usb 7-1: SerialNumber: syz [ 815.133280][ T6357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.136680][T17659] lo speed is unknown, defaulting to 1000 [ 815.150334][ T6357] usb 5-1: Product: syz [ 815.156427][ T6357] usb 5-1: Manufacturer: syz [ 815.161094][ T6357] usb 5-1: SerialNumber: syz [ 815.468983][ T5881] usb 7-1: cannot find UAC_HEADER [ 815.483047][T17647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.504985][T17647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.509299][ T5881] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 815.529163][T17664] lo speed is unknown, defaulting to 1000 [ 815.543027][ T5881] usb 7-1: USB disconnect, device number 56 [ 815.545728][T17647] IPVS: nq: FWM 3 0x00000003 - no destination available [ 815.556950][ T5888] IPVS: starting estimator thread 0... [ 815.608758][ T6357] usbtouchscreen 5-1:218.95: probe with driver usbtouchscreen failed with error -71 [ 815.635348][T17649] udevd[17649]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.651325][T17670] IPVS: using max 52 ests per chain, 124800 per kthread [ 815.685792][ T6357] usb 5-1: USB disconnect, device number 65 [ 815.797131][ T4962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.946695][ T4962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.980561][T17676] lo speed is unknown, defaulting to 1000 [ 816.038953][T17652] chnl_net:caif_netlink_parms(): no params data found [ 816.085161][ T4962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.328451][ T4962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.435526][ T5829] Bluetooth: hci4: command tx timeout [ 817.139355][T17652] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.160602][T17652] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.186305][T17652] bridge_slave_0: entered allmulticast mode [ 817.232765][T17652] bridge_slave_0: entered promiscuous mode [ 817.282530][T17652] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.293824][T17652] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.303408][T17652] bridge_slave_1: entered allmulticast mode [ 817.322248][T17652] bridge_slave_1: entered promiscuous mode [ 817.429033][T17652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.683313][T17652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.955507][T17652] team0: Port device team_slave_0 added [ 817.969785][T17652] team0: Port device team_slave_1 added [ 818.137339][ T4962] bond4 (unregistering): (slave geneve2): Releasing active interface [ 818.166303][ T5881] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 818.280072][ T4962] bond0 (unregistering): left promiscuous mode [ 818.286416][ T4962] bond_slave_0: left promiscuous mode [ 818.292309][ T4962] bond_slave_1: left promiscuous mode [ 818.299438][ T4962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.312976][ T4962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.325001][ T4962] bond0 (unregistering): Released all slaves [ 818.346453][ T5881] usb 5-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 818.371828][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 818.401668][ T5881] usb 5-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 818.446046][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.500139][ T5881] usb 5-1: config 0 descriptor?? [ 818.515427][ T5829] Bluetooth: hci4: command tx timeout [ 818.545839][ T5881] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 818.665156][ T4962] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 818.673271][ T4962] vcan1: left promiscuous mode [ 818.680881][ T4962] bond1 (unregistering): Released all slaves [ 818.698213][ T4962] bond2 (unregistering): Released all slaves [ 818.719546][ T4962] bond3 (unregistering): Released all slaves [ 818.928843][ T4962] bond4 (unregistering): Released all slaves [ 818.953815][ T4962] bond5 (unregistering): Released all slaves [ 819.039029][T17652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.066640][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.513635][T17652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.636413][ T4962] tipc: Disabling bearer [ 819.643761][ T4962] tipc: Left network mode [ 819.643890][T17652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.662002][ T4962] IPVS: stopping backup sync thread 11244 ... [ 820.094363][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.193667][T17652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.365939][T17723] lo speed is unknown, defaulting to 1000 [ 820.554283][T17652] hsr_slave_0: entered promiscuous mode [ 820.578316][T17652] hsr_slave_1: entered promiscuous mode [ 820.593681][ T5829] Bluetooth: hci4: command tx timeout [ 820.772629][T17731] tipc: Enabling of bearer rejected, failed to enable media [ 820.913522][T17736] syzkaller0: entered promiscuous mode [ 820.951288][T17736] syzkaller0: entered allmulticast mode [ 820.987071][ T5888] usb 5-1: USB disconnect, device number 66 [ 821.061379][ T4962] batadv0: left promiscuous mode [ 821.080431][ T4962] hsr_slave_0: left promiscuous mode [ 821.097730][ T4962] hsr_slave_1: left promiscuous mode [ 821.117874][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.129778][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.226548][ T4962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.262379][ T4962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.288718][ T4962] veth1_macvtap: left promiscuous mode [ 821.296273][ T4962] veth0_macvtap: left promiscuous mode [ 821.302213][ T4962] veth1_vlan: left promiscuous mode [ 821.308461][ T4962] veth0_vlan: left promiscuous mode [ 821.581666][T17759] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3170'. [ 822.379333][ T4962] team0 (unregistering): Port device team_slave_1 removed [ 822.451390][ T4962] team0 (unregistering): Port device team_slave_0 removed [ 822.684179][ T5829] Bluetooth: hci4: command tx timeout [ 822.938392][ T5888] lo speed is unknown, defaulting to 1000 [ 822.964005][ T5888] syz0: Port: 1 Link DOWN [ 823.172521][T17778] xt_hashlimit: invalid interval [ 823.776977][ T4962] IPVS: stop unused estimator thread 0... [ 824.352458][ T30] audit: type=1400 audit(1764982519.145:967): avc: denied { name_bind } for pid=17797 comm="syz.3.3180" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 825.082422][T17652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 825.188905][T17652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 825.381463][T17652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 825.531129][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3181'. [ 825.540390][T17814] netlink: 'syz.4.3181': attribute type 5 has an invalid length. [ 825.880905][T17652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 826.266496][ T4180] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.323667][ T4180] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.376571][ T4180] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 826.749866][ T3841] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.200367][T17652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.328749][T17652] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.344917][T17847] netlink: 'syz.7.3190': attribute type 10 has an invalid length. [ 827.383311][T17847] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3190'. [ 827.407190][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.414349][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.422682][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3190'. [ 827.461763][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.468886][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.535195][T17850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3190'. [ 827.593600][T17850] netlink: 'syz.7.3190': attribute type 19 has an invalid length. [ 827.640249][T17850] netlink: 'syz.7.3190': attribute type 20 has an invalid length. [ 827.765504][ T30] audit: type=1400 audit(1764982522.565:968): avc: denied { sqpoll } for pid=17860 comm="syz.3.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 827.792894][T17862] lo speed is unknown, defaulting to 1000 [ 827.813428][T17862] lo speed is unknown, defaulting to 1000 [ 827.829955][T17862] lo speed is unknown, defaulting to 1000 [ 827.928093][T17867] netlink: 'syz.7.3193': attribute type 4 has an invalid length. [ 827.972812][T17867] netlink: 'syz.7.3193': attribute type 4 has an invalid length. [ 828.206885][T17652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.414271][T17652] veth0_vlan: entered promiscuous mode [ 828.474753][T17652] veth1_vlan: entered promiscuous mode [ 828.561001][ T5888] lo speed is unknown, defaulting to 1000 [ 828.571010][T17862] infiniband syz1: set active [ 828.590559][T17862] infiniband syz1: added lo [ 828.609236][T17862] syz1: rxe_create_cq: returned err = -12 [ 828.630296][T17862] infiniband syz1: Couldn't create ib_mad CQ [ 828.656396][T17862] infiniband syz1: Couldn't open port 1 [ 828.710085][T17652] veth0_macvtap: entered promiscuous mode [ 828.748629][T17862] RDS/IB: syz1: added [ 828.752632][T17862] smc: adding ib device syz1 with port count 1 [ 828.757920][T17652] veth1_macvtap: entered promiscuous mode [ 828.793976][T17862] smc: ib device syz1 port 1 has no pnetid [ 828.832570][ T5888] lo speed is unknown, defaulting to 1000 [ 828.852273][T17862] lo speed is unknown, defaulting to 1000 [ 828.869849][T17652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.910398][T17652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.952454][ T1129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.009656][ T1129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.157508][ T1129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.196484][ T1129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.254225][T17885] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3196'. [ 829.263277][T17885] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3196'. [ 829.381399][ T30] audit: type=1400 audit(1764982524.175:969): avc: denied { getattr } for pid=17888 comm="syz.7.3197" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=57440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 829.577415][T17862] lo speed is unknown, defaulting to 1000 [ 829.603054][ T4180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.653675][ T4180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.670781][T17895] netlink: 'syz.6.3198': attribute type 1 has an invalid length. [ 829.792957][ T4090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.823712][ T4090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.958995][T17908] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3201'. [ 830.480907][T17862] lo speed is unknown, defaulting to 1000 [ 831.453436][ T30] audit: type=1400 audit(1764982526.245:970): avc: denied { create } for pid=17932 comm="syz.6.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 831.476723][ T6357] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 831.592467][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3208'. [ 831.656176][ T6357] usb 1-1: Using ep0 maxpacket: 32 [ 831.670925][ T6357] usb 1-1: config 0 has an invalid interface number: 157 but max is 0 [ 831.698364][ T6357] usb 1-1: config 0 has no interface number 0 [ 831.704506][T17862] lo speed is unknown, defaulting to 1000 [ 831.735370][ T6357] usb 1-1: config 0 interface 157 has no altsetting 0 [ 831.760246][ T6357] usb 1-1: New USB device found, idVendor=12d1, idProduct=4933, bcdDevice=fb.27 [ 831.786014][ T6357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.831678][ T6357] usb 1-1: Product: syz [ 831.851341][ T6357] usb 1-1: Manufacturer: syz [ 831.871206][ T6357] usb 1-1: SerialNumber: syz [ 831.895894][ T6357] usb 1-1: config 0 descriptor?? [ 831.939982][ T6357] option 1-1:0.157: GSM modem (1-port) converter detected [ 831.987433][ T6357] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 832.050354][ T30] audit: type=1400 audit(1764982526.845:971): avc: denied { setopt } for pid=17944 comm="syz.7.3211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 832.269102][T17862] lo speed is unknown, defaulting to 1000 [ 832.754769][T17862] lo speed is unknown, defaulting to 1000 [ 833.387413][T17862] lo speed is unknown, defaulting to 1000 [ 834.131836][T17969] netlink: 'syz.7.3219': attribute type 4 has an invalid length. [ 834.159510][T17969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17969 comm=syz.7.3219 [ 834.172090][T14829] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 834.252842][ T5895] usb 1-1: USB disconnect, device number 79 [ 834.299348][ T5895] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 834.335496][ T5895] option 1-1:0.157: device disconnected [ 834.345334][T14829] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 834.353515][T14829] usb 5-1: config 0 has no interface number 1 [ 834.390413][T14829] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 834.425132][T14829] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 834.473147][T14829] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 834.495653][T14829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 834.513026][T14829] usb 5-1: SerialNumber: syz [ 834.529675][T14829] usb 5-1: config 0 descriptor?? [ 834.564994][T14829] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 834.586412][T14829] uvcvideo 5-1:0.199: No valid video chain found. [ 834.609776][T17980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 834.617094][T17980] IPv6: NLM_F_CREATE should be set when creating new route [ 834.937300][T17989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.963903][T17989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.172912][T17993] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3217'. [ 835.689200][T17964] lo speed is unknown, defaulting to 1000 [ 836.474243][T18026] No control pipe specified [ 837.533429][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 838.389975][ T30] audit: type=1400 audit(1764982532.805:972): avc: denied { listen } for pid=18032 comm="syz.6.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 838.839358][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 839.130530][ T6467] usb 5-1: USB disconnect, device number 67 [ 839.137085][ T30] audit: type=1326 audit(1764982533.935:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 839.166551][ T30] audit: type=1326 audit(1764982533.935:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 839.540716][ T30] audit: type=1326 audit(1764982534.265:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 839.608869][ T30] audit: type=1326 audit(1764982534.285:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 839.652962][ T30] audit: type=1326 audit(1764982534.325:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 839.679395][ T30] audit: type=1326 audit(1764982534.365:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 839.703909][ T30] audit: type=1326 audit(1764982534.365:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 839.729834][ T30] audit: type=1326 audit(1764982534.375:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 839.760978][ T30] audit: type=1326 audit(1764982534.375:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc2b8f749 code=0x7ffc0000 [ 840.797628][ T121] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 840.987826][ T121] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 841.052737][ T121] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 841.136731][ T121] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 841.186603][ T121] usb 7-1: config 220 has no interface number 2 [ 841.200223][ T121] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 841.228919][ T121] usb 7-1: config 220 interface 0 has no altsetting 0 [ 841.246341][ T121] usb 7-1: config 220 interface 76 has no altsetting 0 [ 841.262565][ T121] usb 7-1: config 220 interface 1 has no altsetting 0 [ 841.280526][ T121] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 841.298436][ T121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.314874][ T121] usb 7-1: Product: syz [ 841.324248][ T121] usb 7-1: Manufacturer: syz [ 841.329695][ T121] usb 7-1: SerialNumber: syz [ 841.390794][T18105] netlink: 'syz.4.3258': attribute type 18 has an invalid length. [ 841.399594][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 841.420562][T18105] netlink: 'syz.4.3258': attribute type 18 has an invalid length. [ 841.429205][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 841.489758][T18105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 841.554221][T18113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=18113 comm=syz.4.3258 [ 841.566333][ T121] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 841.598612][ T121] uvcvideo 7-1:220.0: No valid video chain found. [ 841.635524][ T121] usb 7-1: selecting invalid altsetting 0 [ 841.672957][ T121] usb 7-1: selecting invalid altsetting 0 [ 841.707575][ T121] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 841.745027][ T121] usb 7-1: USB disconnect, device number 57 [ 841.927423][T18128] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3265'. [ 843.476880][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3278'. [ 844.215040][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 844.215056][ T30] audit: type=1400 audit(1764982539.015:990): avc: denied { listen } for pid=18188 comm="syz.7.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 844.294479][ T30] audit: type=1400 audit(1764982539.045:991): avc: denied { accept } for pid=18188 comm="syz.7.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 844.430100][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'. [ 844.457764][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'. [ 844.703710][ T5881] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 844.877671][ T5881] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 844.902175][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 844.952076][ T5881] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 845.003638][ T5881] usb 1-1: config 1 has no interface number 1 [ 845.030678][T18214] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2225463490 (142429663360 ns) > initial count (63815086272 ns). Using initial count to start timer. [ 845.064262][ T5881] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 845.104185][T18215] kvm: apic: phys broadcast and lowest prio [ 845.127638][ T5881] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 845.178491][ T5881] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 845.209909][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.237303][ T5881] usb 1-1: Product: syz [ 845.250174][ T5881] usb 1-1: Manufacturer: syz [ 845.268975][ T5881] usb 1-1: SerialNumber: syz [ 845.725670][ T5881] usb 1-1: USB disconnect, device number 80 [ 846.985361][T18245] hub 9-0:1.0: USB hub found [ 847.015862][T18245] hub 9-0:1.0: 1 port detected [ 847.104753][T18246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 847.111955][T18246] IPv6: NLM_F_CREATE should be set when creating new route [ 847.182501][T18249] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 847.226938][T18248] IPVS: stopping master sync thread 18249 ... [ 849.176155][T18307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 849.315990][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3318'. [ 849.989585][T18318] CIFS mount error: No usable UNC path provided in device string! [ 849.989585][T18318] [ 850.026952][T18318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 850.111220][ T30] audit: type=1400 audit(1764982544.905:992): avc: denied { lock } for pid=18322 comm="syz.4.3328" path="socket:[59608]" dev="sockfs" ino=59608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 850.723273][T18334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3332'. [ 856.064175][T18362] new mount options do not match the existing superblock, will be ignored [ 857.228978][T18418] ubi31: detaching mtd0 [ 857.269703][T18418] ubi31: mtd0 is detached [ 857.481856][T18423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3358'. [ 857.628576][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3361'. [ 857.884751][T18439] : renamed from lo (while UP) [ 859.833944][T18461] vlan2: entered promiscuous mode [ 859.854901][T18461] hsr_slave_1: entered promiscuous mode [ 859.860644][T18461] vlan2: entered allmulticast mode [ 859.874359][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 859.893589][T18461] hsr_slave_1: entered allmulticast mode [ 860.200155][ T5961] kernel write not supported for file bpf-prog (pid: 5961 comm: kworker/0:10) [ 860.634840][ T6357] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 860.724151][ T5881] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 860.974334][ T6357] usb 7-1: Using ep0 maxpacket: 16 [ 861.001078][ T6357] usb 7-1: config 222 has an invalid interface number: 31 but max is 0 [ 861.182134][ T6357] usb 7-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 861.193059][ T6357] usb 7-1: config 222 has no interface number 0 [ 861.199599][ T6357] usb 7-1: config 222 interface 31 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 861.219963][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 861.225343][ T6357] usb 7-1: config 222 interface 31 has no altsetting 0 [ 862.206039][ T5881] usb 5-1: config 9 has an invalid interface number: 27 but max is 0 [ 862.215173][ T6357] usb 7-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 862.244179][ T5881] usb 5-1: config 9 has no interface number 0 [ 862.250299][ T5881] usb 5-1: config 9 interface 27 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 862.338744][ T6357] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.366712][ T30] audit: type=1326 audit(1764982564.117:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18477 comm="syz.0.3378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5a2f8f749 code=0x0 [ 862.897855][ T6357] usb 7-1: Product: syz [ 862.904752][ T6357] usb 7-1: Manufacturer: syz [ 862.909590][ T5881] usb 5-1: config 9 interface 27 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 862.920370][ T6357] usb 7-1: SerialNumber: syz [ 862.926484][ T5881] usb 5-1: config 9 interface 27 altsetting 7 bulk endpoint 0xE has invalid maxpacket 1024 [ 862.937533][ T5881] usb 5-1: config 9 interface 27 altsetting 7 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 862.949012][ T5881] usb 5-1: config 9 interface 27 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 862.962785][ T5881] usb 5-1: config 9 interface 27 altsetting 7 endpoint 0x9 has an invalid bInterval 105, changing to 10 [ 862.975123][ T5881] usb 5-1: config 9 interface 27 altsetting 7 endpoint 0x6 has an invalid bInterval 253, changing to 7 [ 862.986286][ T5881] usb 5-1: config 9 interface 27 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 863.021092][ T5881] usb 5-1: config 9 interface 27 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 863.032387][ T5881] usb 5-1: config 9 interface 27 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 863.063654][ T5881] usb 5-1: config 9 interface 27 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 863.090928][ T5881] usb 5-1: config 9 interface 27 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 863.146221][T18497] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3383'. [ 863.220479][ T5881] usb 5-1: config 9 interface 27 has no altsetting 0 [ 863.230885][ T6357] ldusb 7-1:222.31: Interrupt in endpoint not found [ 863.245888][ T5881] usb 5-1: New USB device found, idVendor=16ab, idProduct=7811, bcdDevice=6d.12 [ 863.283832][ T6357] usb 7-1: USB disconnect, device number 58 [ 863.299305][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.333589][ T5881] usb 5-1: Product: ᄾ䶔幈譡ࣜ骣쓪썐朗튈傒꼽叧봌P횧窬嫊궢쥦摖부ﬤ緐맕䀣꾄䑦鍵㇬瘟圆❢鲺끍ᦌ谿짫重繦筊牎㩘碶롡ଲ砚㇤놨ꎑ挱㯁㲭腧㾆䙡ڣꥉ萸왦∲걠魓ꚵ銝̑ණ頖윴ᣢ璨燜ᮜ颗⑫刐ꑴ黶䃮夊뱏ੜᭉ㺑Ūꪓꖪℶ뾃⎿轉喭鴾 [ 863.404343][ T5881] usb 5-1: Manufacturer: ⤃䱹ꚭ䒎ᴢ⎞ᮄ駒䓄眠몕艂▖⻗帖㌈屏巴᰸ᴩ恰靰뉬ࡍ湛톈ꂄ舟谶☍㇮띵엑濉▬⛕匽﷢찁㛾䈷র診䟩쟬਌匈쒍꥕竨볨咤岀衣邃盡낌狽䖟찾沏탚鵵ⴽ랮ᔵ畵ॖ㋘ [ 863.702222][T18505] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 864.141561][ T5881] usb 5-1: SerialNumber: 洍蒨版硝鳊䙰ᢅ똋洋鲅ᨄ땚觞앏侏㶁魛쯀ﮎ澷⨎矎碍ᑾ餛錜늮턊혨蟅줾忨馒瞵ﻳⵙរ쎜洪＀綈ሣꄿ㑓ᢚ匲脏杖ᓳ䂀ꪎ㷼㠪迧⓭恃ᵒ䵛苇ꁐ锄欍循挪치摸뽚慧罼惍겵ଐ⦾荗諃䠼헃턚ኺд唅΢ј張婩═絤矄銗Ȧ麬빕쉊䆎႞涔㵆뜏ᒟ樵᱕桳乒髡 [ 864.241134][ T5881] usb 5-1: can't set config #9, error -71 [ 864.249384][ T5881] usb 5-1: USB disconnect, device number 68 [ 865.873627][ T6357] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 866.356241][ T121] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 866.478965][ T6357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.553843][ T121] usb 1-1: Using ep0 maxpacket: 8 [ 866.569216][ T121] usb 1-1: config 128 has an invalid interface number: 40 but max is 0 [ 866.598179][ T121] usb 1-1: config 128 has no interface number 0 [ 866.628537][ T121] usb 1-1: config 128 interface 40 has no altsetting 0 [ 866.653405][ T6357] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.673593][ T6357] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 866.699062][ T6357] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.706426][ T121] usb 1-1: New USB device found, idVendor=2dc8, idProduct=e745, bcdDevice=89.14 [ 866.720013][ T6357] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.737623][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.215359][ T6357] usb 7-1: config 0 descriptor?? [ 867.423087][T18547] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3395'. [ 867.729494][ T6357] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xe [ 867.749202][ T6357] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 867.768554][ T6357] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 868.228797][T18542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.306428][T18542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.526045][T18581] pimreg: entered allmulticast mode [ 868.559962][T18581] pimreg: left allmulticast mode [ 868.768768][ T121] usb 1-1: string descriptor 0 read error: -71 [ 868.797413][T18591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18591 comm=syz.4.3402 [ 868.865133][ T121] usb 1-1: USB disconnect, device number 81 [ 868.955235][ T5961] libceph: connect (1)[c::]:6789 error -101 [ 868.972815][ T5961] libceph: mon0 (1)[c::]:6789 connect error [ 869.127122][T18598] ceph: No mds server is up or the cluster is laggy [ 869.294749][ T121] libceph: connect (1)[c::]:6789 error -101 [ 869.300844][ T121] libceph: mon0 (1)[c::]:6789 connect error [ 869.434511][ T6357] usb 7-1: reset high-speed USB device number 59 using dummy_hcd [ 869.639283][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.253758][T18614] netlink: zone id is out of range [ 870.259045][T18614] netlink: zone id is out of range [ 870.264381][T18614] netlink: zone id is out of range [ 870.270447][T18614] netlink: get zone limit has 4 unknown bytes [ 870.465859][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3403'. [ 870.802556][T18613] openvswitch: netlink: Flow actions attr not present in new flow. [ 871.473734][ T121] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 871.543624][ T6357] usb 7-1: device descriptor read/64, error -71 [ 871.653981][T18632] netlink: 'syz.0.3411': attribute type 1 has an invalid length. [ 871.668943][ T121] usb 5-1: Using ep0 maxpacket: 32 [ 871.726118][ T121] usb 5-1: config 0 interface 0 has no altsetting 0 [ 871.838935][ T121] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 871.955540][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.992881][ T121] usb 5-1: Product: syz [ 872.008905][ T121] usb 5-1: Manufacturer: syz [ 872.029425][ T121] usb 5-1: SerialNumber: syz [ 872.048401][ T121] usb 5-1: config 0 descriptor?? [ 872.103689][ T6357] usb 7-1: reset high-speed USB device number 59 using dummy_hcd [ 872.124939][ T6357] usb 7-1: device reset changed ep0 maxpacket size! [ 872.147122][ T24] usb 7-1: USB disconnect, device number 59 [ 872.307809][T18628] IPVS: ip_vs_edit_dest(): server weight less than zero [ 872.340125][ T121] gs_usb 5-1:0.0: Couldn't send data format (err=-71) [ 872.388030][ T121] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 872.524357][ T24] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 872.726448][ T121] usb 5-1: USB disconnect, device number 69 [ 872.873627][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 872.910598][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.962937][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.117770][ T121] IPVS: starting estimator thread 0... [ 873.298670][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 873.340903][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 873.383912][T18642] IPVS: using max 39 ests per chain, 93600 per kthread [ 873.526773][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.823345][T18655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3417'. [ 873.866988][T18655] wg1: entered promiscuous mode [ 873.871871][T18655] wg1: entered allmulticast mode [ 874.060292][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 874.072631][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 874.081561][ T24] usb 7-1: Manufacturer: syz [ 874.110496][ T24] usb 7-1: config 0 descriptor?? [ 874.147001][ T24] usb 7-1: can't set config #0, error -71 [ 874.181286][ T24] usb 7-1: USB disconnect, device number 60 [ 876.220178][T18678] ip6t_rpfilter: unknown options [ 877.189295][ T121] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 877.696290][T18707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3432'. [ 877.735133][ T121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.829524][ T121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.876945][ T121] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 877.943114][ T121] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 877.973327][ T121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.005963][ T121] usb 1-1: config 0 descriptor?? [ 878.028270][T18713] netlink: 'syz.7.3433': attribute type 2 has an invalid length. [ 878.108327][T18690] lo speed is unknown, defaulting to 1000 [ 878.134170][ T24] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 878.309285][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 878.344994][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 878.382137][ T24] usb 7-1: config 9 has an invalid descriptor of length 171, skipping remainder of the config [ 878.419960][ T24] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 878.445333][ T121] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xe [ 878.470749][ T24] usb 7-1: config 9 has an invalid descriptor of length 171, skipping remainder of the config [ 878.516174][ T121] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 878.541403][ T24] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 878.573225][ T24] usb 7-1: config 9 has an invalid descriptor of length 171, skipping remainder of the config [ 878.626230][ T121] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 878.627999][ T24] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 878.694948][T18691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.746853][T18691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.863613][ T24] usb 7-1: config 9 has an invalid descriptor of length 171, skipping remainder of the config [ 878.907857][ T24] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 878.970502][ T24] usb 7-1: config 9 has an invalid descriptor of length 171, skipping remainder of the config [ 879.015798][ T24] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 879.045692][T18696] lo speed is unknown, defaulting to 1000 [ 879.094131][ T24] usb 7-1: config 9 has an invalid descriptor of length 171, skipping remainder of the config [ 879.135318][ T24] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 879.178007][ T24] usb 7-1: config 9 has an invalid descriptor of length 171, skipping remainder of the config [ 879.190934][T18720] pimreg: entered allmulticast mode [ 879.223634][ T24] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 879.243389][ T24] usb 7-1: config 9 has an invalid descriptor of length 171, skipping remainder of the config [ 879.268241][T18720] pimreg: left allmulticast mode [ 879.284264][ T24] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 879.318679][ T24] usb 7-1: New USB device found, idVendor=1199, idProduct=9056, bcdDevice=d6.90 [ 879.344325][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.361205][ T24] usb 7-1: Product: syz [ 879.378091][ T24] usb 7-1: Manufacturer: syz [ 879.394389][ T24] usb 7-1: SerialNumber: syz [ 879.657732][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3434'. [ 879.904265][ T121] usb 1-1: reset high-speed USB device number 82 using dummy_hcd [ 880.661037][ T24] usb 7-1: USB disconnect, device number 61 [ 881.744719][ T5895] usb 1-1: USB disconnect, device number 82 [ 881.978038][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3442'. [ 882.181455][ T30] audit: type=1400 audit(1764982583.967:994): avc: denied { write } for pid=18753 comm="syz.4.3444" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 882.278109][ T30] audit: type=1400 audit(1764982584.057:995): avc: denied { getopt } for pid=18758 comm="syz.6.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 884.946179][ T30] audit: type=1400 audit(1764982586.737:996): avc: denied { associate } for pid=18780 comm="syz.6.3451" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 886.302104][T18802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3457'. [ 886.444244][T18802] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 886.452999][T18802] ------------[ cut here ]------------ [ 886.459110][T18802] Unexpected driver unregister! [ 886.464044][T18802] WARNING: drivers/base/driver.c:273 at 0x0, CPU#0: syz.0.3457/18802 [ 886.472122][T18802] Modules linked in: [ 886.476425][T18802] CPU: 0 UID: 0 PID: 18802 Comm: syz.0.3457 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.487406][T18802] Tainted: [L]=SOFTLOCKUP [ 886.491722][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.501959][T18802] RIP: 0010:driver_unregister+0x89/0xb0 [ 886.507551][T18802] Code: 00 75 3a 48 8b 73 68 48 89 ef e8 72 be 87 fc 48 89 df e8 1a 94 ff ff 5b 5d e9 b3 b4 dc fb e8 ae b4 dc fb 48 8d 3d 57 3a b0 0a <67> 48 0f b9 3a 5b 5d e9 9b b4 dc fb e8 e6 be 45 fc eb 9a e8 df be [ 886.527488][T18802] RSP: 0000:ffffc900051279a0 EFLAGS: 00010283 [ 886.533753][T18802] RAX: 00000000000048e9 RBX: ffffffff8ff4fa40 RCX: ffffc90022ab9000 [ 886.541747][T18802] RDX: 0000000000080000 RSI: ffffffff85e17192 RDI: ffffffff9091abf0 [ 886.550517][T18802] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 886.559070][T18802] R10: 0000000000000000 R11: 0000000016d90853 R12: ffffffff8ff4f980 [ 886.568748][T18802] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888030a27800 [ 886.568788][T18802] FS: 00007fd5a3e116c0(0000) GS:ffff888124960000(0000) knlGS:0000000000000000 [ 886.586002][T18802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 886.592597][T18802] CR2: 00002000000bd038 CR3: 0000000090fb2000 CR4: 00000000003526f0 [ 886.600623][T18802] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 886.608627][T18802] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 886.616705][T18802] Call Trace: [ 886.619983][T18802] [ 886.622907][T18802] comedi_device_detach_locked+0x12f/0xa50 [ 886.628871][T18802] comedi_device_detach+0x67/0xb0 [ 886.633917][T18802] comedi_device_attach+0x43d/0x900 [ 886.639125][T18802] do_devconfig_ioctl+0x1b1/0x710 [ 886.644206][T18802] ? comedi_unlocked_ioctl+0x167/0x2ee0 [ 886.650026][T18802] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 886.655827][T18802] ? find_held_lock+0x2b/0x80 [ 886.660487][T18802] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 886.665947][T18802] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 886.671732][T18802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 886.677620][T18802] ? do_vfs_ioctl+0x128/0x14f0 [ 886.682363][T18802] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 886.687394][T18802] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 886.694272][T18802] ? hook_file_ioctl_common+0x144/0x410 [ 886.699818][T18802] ? selinux_file_ioctl+0x180/0x270 [ 886.705047][T18802] ? selinux_file_ioctl+0xb4/0x270 [ 886.710141][T18802] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 886.715947][T18802] __x64_sys_ioctl+0x18e/0x210 [ 886.720690][T18802] do_syscall_64+0xcd/0xf80 [ 886.725202][T18802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.731148][T18802] RIP: 0033:0x7fd5a2f8f749 [ 886.735551][T18802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.755451][T18802] RSP: 002b:00007fd5a3e11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.764109][T18802] RAX: ffffffffffffffda RBX: 00007fd5a31e6090 RCX: 00007fd5a2f8f749 [ 886.772057][T18802] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 886.780053][T18802] RBP: 00007fd5a3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 886.788017][T18802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.795985][T18802] R13: 00007fd5a31e6128 R14: 00007fd5a31e6090 R15: 00007ffca66c4918 [ 886.803958][T18802] [ 886.806953][T18802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 886.814207][T18802] CPU: 0 UID: 0 PID: 18802 Comm: syz.0.3457 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.825124][T18802] Tainted: [L]=SOFTLOCKUP [ 886.829418][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 886.839445][T18802] Call Trace: [ 886.842709][T18802] [ 886.845613][T18802] dump_stack_lvl+0x3d/0x1f0 [ 886.850184][T18802] vpanic+0x640/0x6f0 [ 886.854154][T18802] panic+0xca/0xd0 [ 886.857868][T18802] ? __pfx_panic+0x10/0x10 [ 886.862281][T18802] check_panic_on_warn+0xab/0xb0 [ 886.867204][T18802] __warn+0x108/0x3c0 [ 886.871175][T18802] __report_bug+0x2a0/0x520 [ 886.875655][T18802] ? __pfx___report_bug+0x10/0x10 [ 886.880654][T18802] ? driver_unregister+0x82/0xb0 [ 886.885569][T18802] ? report_bug_entry+0x17/0x220 [ 886.890482][T18802] report_bug_entry+0xb2/0x220 [ 886.895217][T18802] ? driver_unregister+0x89/0xb0 [ 886.900126][T18802] handle_bug+0x18a/0x260 [ 886.904427][T18802] exc_invalid_op+0x17/0x50 [ 886.908904][T18802] asm_exc_invalid_op+0x1a/0x20 [ 886.913726][T18802] RIP: 0010:driver_unregister+0x89/0xb0 [ 886.919242][T18802] Code: 00 75 3a 48 8b 73 68 48 89 ef e8 72 be 87 fc 48 89 df e8 1a 94 ff ff 5b 5d e9 b3 b4 dc fb e8 ae b4 dc fb 48 8d 3d 57 3a b0 0a <67> 48 0f b9 3a 5b 5d e9 9b b4 dc fb e8 e6 be 45 fc eb 9a e8 df be [ 886.938826][T18802] RSP: 0000:ffffc900051279a0 EFLAGS: 00010283 [ 886.944878][T18802] RAX: 00000000000048e9 RBX: ffffffff8ff4fa40 RCX: ffffc90022ab9000 [ 886.952826][T18802] RDX: 0000000000080000 RSI: ffffffff85e17192 RDI: ffffffff9091abf0 [ 886.960769][T18802] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 886.968712][T18802] R10: 0000000000000000 R11: 0000000016d90853 R12: ffffffff8ff4f980 [ 886.976655][T18802] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888030a27800 [ 886.984611][T18802] ? driver_unregister+0x82/0xb0 [ 886.989524][T18802] comedi_device_detach_locked+0x12f/0xa50 [ 886.995321][T18802] comedi_device_detach+0x67/0xb0 [ 887.000334][T18802] comedi_device_attach+0x43d/0x900 [ 887.005512][T18802] do_devconfig_ioctl+0x1b1/0x710 [ 887.010509][T18802] ? comedi_unlocked_ioctl+0x167/0x2ee0 [ 887.016030][T18802] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 887.021566][T18802] ? find_held_lock+0x2b/0x80 [ 887.026221][T18802] comedi_unlocked_ioctl+0x165d/0x2ee0 [ 887.031665][T18802] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 887.037463][T18802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 887.043334][T18802] ? do_vfs_ioctl+0x128/0x14f0 [ 887.048091][T18802] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 887.053091][T18802] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 887.059918][T18802] ? hook_file_ioctl_common+0x144/0x410 [ 887.065444][T18802] ? selinux_file_ioctl+0x180/0x270 [ 887.070620][T18802] ? selinux_file_ioctl+0xb4/0x270 [ 887.075714][T18802] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 887.081508][T18802] __x64_sys_ioctl+0x18e/0x210 [ 887.086248][T18802] do_syscall_64+0xcd/0xf80 [ 887.090727][T18802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.096595][T18802] RIP: 0033:0x7fd5a2f8f749 [ 887.100989][T18802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.120671][T18802] RSP: 002b:00007fd5a3e11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.129055][T18802] RAX: ffffffffffffffda RBX: 00007fd5a31e6090 RCX: 00007fd5a2f8f749 [ 887.137001][T18802] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 887.144954][T18802] RBP: 00007fd5a3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 887.152898][T18802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.160840][T18802] R13: 00007fd5a31e6128 R14: 00007fd5a31e6090 R15: 00007ffca66c4918 [ 887.168791][T18802] [ 887.171994][T18802] Kernel Offset: disabled [ 887.176295][T18802] Rebooting in 86400 seconds..